Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fce46eeb-4860-4c58-a01e-b357cd55e055/ebc74433-3042-3b63-ba72-c1ab7ba1f42e.roa
File:                     ebc74433-3042-3b63-ba72-c1ab7ba1f42e.roa (raw, json)
Hash identifier:          2yV0Vc3U+HlJO/4Wc5WpmqScV7Ma/RLUY1C8oNrIZfY=
Subject key identifier:   24:79:9E:00:43:B6:F6:8B:61:2C:49:7B:DB:52:B4:66:1B:25:55:D3
Certificate issuer:       /CN=fce46eeb-4860-4c58-a01e-b357cd55e055
Certificate serial:       010D0C9F4328584D492A7174F83B2F1FFFFD28E0
Authority key identifier: 7A:15:3E:25:DA:09:EC:39:48:A4:91:CB:25:93:76:4E:FE:8F:EB:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fce46eeb-4860-4c58-a01e-b357cd55e055.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fce46eeb-4860-4c58-a01e-b357cd55e055/ebc74433-3042-3b63-ba72-c1ab7ba1f42e.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     376
IP address blocks:        205.237.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fce46eeb-4860-4c58-a01e-b357cd55e055/fce46eeb-4860-4c58-a01e-b357cd55e055.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fce46eeb-4860-4c58-a01e-b357cd55e055/fce46eeb-4860-4c58-a01e-b357cd55e055.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fce46eeb-4860-4c58-a01e-b357cd55e055.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:71:74:f8:3b:2f:1f:ff:fd:28:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fce46eeb-4860-4c58-a01e-b357cd55e055
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=a3665411-c0ec-470b-9da0-41891f519055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d2:1f:8f:9e:4b:64:a3:42:f4:d5:cf:3f:e0:
                    0f:d1:f3:67:95:6a:ee:d3:a7:c1:af:b1:59:bd:2c:
                    2d:d9:ec:e3:8d:0e:af:08:eb:17:9b:94:c8:56:45:
                    af:f7:36:78:a4:57:8c:75:95:46:dc:f5:d1:17:f1:
                    9e:e6:07:bc:3c:88:7c:5b:bb:d9:97:12:16:1d:db:
                    9e:c9:95:bd:16:fa:d6:c4:30:88:cf:35:96:50:a6:
                    e9:5f:fb:3d:f1:53:47:1f:0a:f7:26:16:2a:e1:4f:
                    4e:16:3d:ce:63:72:9f:5b:7a:b5:ff:fe:d2:3a:cb:
                    e6:c1:03:b3:a8:fe:49:73:4e:94:fc:81:55:87:1d:
                    ca:a5:8a:b9:5a:65:f3:95:65:5c:93:0d:f6:fe:05:
                    91:a6:41:5d:66:b1:ac:04:02:f7:84:be:08:27:71:
                    b2:62:aa:06:0f:2d:40:b1:f3:25:08:a7:bc:0b:3c:
                    7d:d8:1a:ab:f2:c7:52:70:56:aa:68:4a:a6:57:12:
                    93:5c:34:44:59:2a:67:3f:bd:c5:78:f9:da:86:4e:
                    aa:6a:05:72:84:1a:b1:76:ee:87:29:67:c0:43:91:
                    99:f1:3c:96:89:18:c9:d1:06:0b:d7:87:c0:c9:3d:
                    b0:e9:d9:ef:0a:b6:55:09:9d:bc:a9:14:ec:57:e8:
                    c9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:79:9E:00:43:B6:F6:8B:61:2C:49:7B:DB:52:B4:66:1B:25:55:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fce46eeb-4860-4c58-a01e-b357cd55e055/ebc74433-3042-3b63-ba72-c1ab7ba1f42e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fce46eeb-4860-4c58-a01e-b357cd55e055/fce46eeb-4860-4c58-a01e-b357cd55e055.crl

            X509v3 Authority Key Identifier:
                keyid:7A:15:3E:25:DA:09:EC:39:48:A4:91:CB:25:93:76:4E:FE:8F:EB:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fce46eeb-4860-4c58-a01e-b357cd55e055.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.237.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:b8:73:cd:76:4d:65:5a:79:da:70:c5:e6:20:68:8b:98:72:
         f5:70:31:18:f1:2d:80:91:36:00:8b:63:c6:0e:7d:86:ee:43:
         58:c4:f6:4d:62:c7:9e:b5:ec:2d:82:9d:d9:7b:f9:23:94:8a:
         27:37:4d:0d:73:46:34:34:80:b7:54:ea:c9:df:26:74:ab:5f:
         24:7e:9d:65:14:31:f6:31:07:01:9e:14:72:22:fd:7c:fb:c5:
         45:6a:f8:84:66:ed:46:97:7a:d9:58:df:06:fe:1f:c6:cc:1a:
         33:c3:fd:94:ab:d9:f0:69:77:88:d7:10:5f:fa:29:39:cb:e5:
         d3:84:4c:6c:80:ab:9c:ef:c0:97:a0:cb:a1:17:a1:c3:b8:ed:
         82:17:39:ea:01:9e:73:54:f3:56:c9:8e:98:50:31:f5:91:5f:
         e5:81:3e:9a:ab:58:6d:4a:ce:9c:70:15:4f:35:a8:ad:44:ce:
         48:5b:44:31:d1:0c:e2:c6:5b:92:f3:f7:25:1d:98:73:bc:46:
         d9:ef:25:9e:65:b6:4b:fc:1b:5b:38:5f:90:63:4e:7b:cf:ce:
         da:69:c8:65:7d:0e:79:ac:df:24:e5:a8:d2:02:6d:90:13:fe:
         11:3d:84:a5:2f:92:3d:64:0c:96:75:8c:09:91:26:26:74:38:
         0f:f7:35:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:18:22 2026 by rpki-client