Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/774db6f0-cf2d-395e-b5a7-40a5d21134d6.roa
File:                     774db6f0-cf2d-395e-b5a7-40a5d21134d6.roa (raw, json)
Hash identifier:          w3h+jP9nzPt/DECVMCwHq6HY0NxXyTzW+7No3Q1oM/Y=
Subject key identifier:   F4:AA:14:BB:A0:40:4E:84:01:B6:B8:F0:79:12:E9:9C:F0:E4:AC:76
Certificate issuer:       /CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Certificate serial:       010D0C9F4328584D2BDA0C887B7EDDB511132200
Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/774db6f0-cf2d-395e-b5a7-40a5d21134d6.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     16433
IP address blocks:        173.240.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:0c:88:7b:7e:dd:b5:11:13:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=3d6871d0-e6af-419a-98bb-0a59853e5795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7e:b4:3b:9b:5f:4e:ed:f4:21:3c:a7:23:6d:
                    85:0a:0c:46:49:bc:9e:5a:9c:c2:d3:21:b5:47:4a:
                    0d:12:08:50:20:aa:85:85:e3:17:7c:53:cb:8e:ca:
                    aa:2a:b1:10:30:3b:8a:11:80:13:14:b4:38:e9:1b:
                    b5:ca:d7:b7:ff:a3:35:8a:be:d0:45:7b:5b:96:7f:
                    c3:12:6a:de:7d:57:df:7e:a1:0c:d0:fe:46:7b:cc:
                    bf:15:6c:06:14:69:36:2f:69:e8:90:7a:a4:1b:a9:
                    91:97:47:33:e0:06:d7:74:e3:21:1b:66:52:6f:89:
                    a6:2c:3f:07:e5:18:2e:f3:c3:d9:4f:d3:75:78:2d:
                    14:27:29:d1:b9:2d:dc:a1:18:38:5c:f9:6b:9d:68:
                    80:84:b4:ec:e4:c1:8c:5b:da:b7:49:b3:34:a3:90:
                    44:37:76:72:64:9d:33:a3:60:ad:80:35:3f:d3:3c:
                    6b:fd:36:0d:9a:28:c6:31:5f:30:c1:39:10:88:80:
                    a3:66:fd:07:8b:81:2f:79:77:82:59:b4:21:3b:58:
                    e5:f3:9f:42:1b:5a:e3:5c:db:e4:67:cd:cf:b7:14:
                    93:35:51:15:81:93:df:27:a9:28:bb:10:d2:99:cf:
                    dd:c2:9a:ad:5a:88:1b:fe:3c:49:c0:07:44:47:74:
                    16:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:AA:14:BB:A0:40:4E:84:01:B6:B8:F0:79:12:E9:9C:F0:E4:AC:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/774db6f0-cf2d-395e-b5a7-40a5d21134d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl

            X509v3 Authority Key Identifier:
                keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.240.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:73:6d:25:f0:f1:86:46:26:6f:80:9d:94:eb:e3:ad:e9:3d:
         19:d3:f7:f3:4d:4a:f5:ce:72:0d:53:56:ac:33:28:c6:92:d1:
         35:fa:03:dc:14:7e:99:fa:24:1b:c6:f6:ca:85:79:df:43:40:
         ff:f0:de:c6:90:11:97:02:2d:9c:92:48:c4:df:59:7b:2c:62:
         06:bd:31:23:8f:10:90:ec:f6:d5:51:05:68:39:5c:66:1d:13:
         6f:04:a2:ca:ca:a7:ab:b1:94:d8:b5:27:73:1d:7d:f4:f1:7d:
         0d:44:be:4d:7d:63:b5:4d:67:c2:4a:a7:0e:f5:03:60:f2:fc:
         6c:69:4e:72:8c:e6:59:19:3a:b9:a7:67:6e:8d:ab:cc:87:84:
         e8:05:ba:31:03:72:df:d2:c7:6c:de:2c:35:0c:e1:be:dc:64:
         ba:a6:1a:5a:46:47:86:d9:ec:f8:28:f9:1f:1a:2b:46:3b:c1:
         bf:cc:9a:74:d7:b3:f6:be:46:1e:65:ba:07:18:e7:e6:79:25:
         33:fc:be:08:25:b9:69:fc:83:ab:02:97:46:c4:88:9e:63:4a:
         da:79:ae:5e:93:ab:3b:4c:19:64:3a:58:84:2b:90:bf:b8:a6:
         38:6c:dd:48:ec:8f:6f:9c:00:5d:bf:d2:b0:dc:a7:ba:74:84:
         5f:b8:36:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:50 2026 by rpki-client