Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/31912e9a-77a4-32d5-8d87-bb69cf974e29.roa
File:                     31912e9a-77a4-32d5-8d87-bb69cf974e29.roa (raw, json)
Hash identifier:          hSzwT0OUUc3JzwkfW9VFgMcAVfLJ1j3JgabQfWL7FZ0=
Subject key identifier:   4C:3D:F8:AF:FD:80:79:D1:30:FE:D8:21:63:71:9A:A4:47:B8:8F:79
Certificate issuer:       /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial:       010D0C9F4328584DAF19941885F3569A5D687000
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/31912e9a-77a4-32d5-8d87-bb69cf974e29.roa
Signing time:             Fri 01 May 2026 01:19:34 +0000
ROA not before:           Fri 01 May 2026 01:19:34 +0000
ROA not after:            Thu 30 Jul 2026 01:19:34 +0000
asID:                     63023
IP address blocks:        170.101.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:af:19:94:18:85:f3:56:9a:5d:68:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
        Validity
            Not Before: May  1 01:19:34 2026 GMT
            Not After : Jul 30 01:19:34 2026 GMT
        Subject: CN=1285fc95-da13-4c8f-bc84-6488e56948a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:bc:b4:87:f0:9e:66:f0:22:64:6e:40:7a:14:
                    05:60:45:aa:fd:21:ae:1b:8a:5e:b5:eb:f3:c8:42:
                    fd:54:57:1e:9a:ef:40:b8:80:f3:09:6d:ab:58:fa:
                    f8:b7:0e:54:02:09:e7:7e:dc:dc:e8:37:d3:52:0f:
                    3c:3d:d2:7e:f4:35:b3:9e:c1:79:6c:67:1f:b5:0c:
                    f0:96:8c:cf:9e:b1:31:7e:1d:47:8d:d0:9d:32:8b:
                    d3:9c:9a:9a:61:47:a0:8f:ec:de:51:4f:a7:39:51:
                    9d:59:83:59:fe:b0:20:03:c8:b7:da:24:12:76:3c:
                    2c:96:d3:ee:11:4c:8c:00:78:7e:f6:fa:8d:d8:09:
                    3c:3a:c8:bd:d6:7b:7d:d4:89:bd:3c:25:69:ed:cb:
                    7b:98:65:f6:82:52:78:e4:df:4d:6b:02:16:e0:91:
                    46:e9:96:31:4d:c7:0a:de:0d:1a:f3:a7:cb:1f:6a:
                    fa:ab:a3:62:0d:84:0a:9d:7a:f5:6c:64:d7:2b:a3:
                    92:7b:04:3b:59:25:ab:4e:37:be:2d:25:ba:97:fe:
                    a1:b9:b1:4a:8e:60:60:de:00:41:45:1e:fd:d4:24:
                    ac:a4:c5:65:e0:9e:23:48:66:93:eb:ab:50:04:76:
                    16:05:53:1e:7f:04:63:ec:1e:4b:0b:57:62:f9:e8:
                    6a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:3D:F8:AF:FD:80:79:D1:30:FE:D8:21:63:71:9A:A4:47:B8:8F:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/31912e9a-77a4-32d5-8d87-bb69cf974e29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.101.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:12:af:1d:62:fb:09:c4:ae:e2:73:a5:00:ba:ab:b2:0a:3c:
         7a:52:0e:f6:c3:41:cf:34:a8:2e:c9:87:d8:25:06:44:86:6c:
         09:a4:60:4e:be:28:88:f3:13:84:39:d8:cc:0e:9f:ef:a0:fc:
         99:2a:cc:69:c5:4a:0d:d8:44:91:56:9f:07:e6:d0:87:33:7a:
         06:73:15:3e:01:ed:24:e6:05:dd:ad:c5:94:e4:89:d1:cf:97:
         48:50:85:a4:d3:c2:48:2d:83:9b:13:6e:89:c4:25:d4:5b:1c:
         54:69:99:ee:81:d9:82:f6:9a:01:be:5f:fb:3f:48:7a:53:33:
         4b:bb:46:df:4a:60:92:12:e0:25:61:2c:61:e7:f2:b4:9a:60:
         87:fb:d5:a9:c0:84:fe:15:29:cf:ae:55:db:da:01:e9:a8:37:
         8f:bb:5e:19:6d:06:3e:0e:02:91:74:c6:89:fd:89:82:6c:3f:
         3a:08:e3:e0:27:68:dd:69:51:9b:52:8e:7b:58:ff:5d:d6:c3:
         fa:fe:76:d5:07:b8:fc:7b:1a:4f:61:66:3a:e8:ff:9a:d7:01:
         8a:6c:50:a0:4e:f3:92:87:cc:9f:e1:8c:7c:8d:f5:82:c0:d7:
         7d:48:69:a9:a4:0e:bb:5c:cb:85:3a:00:dc:d6:9a:81:2f:5a:
         d7:f4:77:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:37:11 2026 by rpki-client