Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375/77edcd41-83c3-3d54-9d91-d3c211050376.roa
File:                     77edcd41-83c3-3d54-9d91-d3c211050376.roa (raw, json)
Hash identifier:          XJgGo5cvEWsp5P7wiMZoMoY470b0pfCnDu6zMw25t0Y=
Subject key identifier:   BB:BB:D5:FF:57:68:6D:FC:CC:F4:73:A1:69:1B:37:44:AA:88:F6:B0
Certificate issuer:       /CN=a53ac0b1-83a3-47f2-b28e-b2b1977dc375
Certificate serial:       010D0C9F4328584D359FA9A67F20A8FD903ED380
Authority key identifier: AC:C4:2B:19:FD:7B:64:94:F1:BE:8D:6F:0C:E8:8A:B4:D4:7C:F2:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375/77edcd41-83c3-3d54-9d91-d3c211050376.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     18503
IP address blocks:        199.34.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375/a53ac0b1-83a3-47f2-b28e-b2b1977dc375.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375/a53ac0b1-83a3-47f2-b28e-b2b1977dc375.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:a9:a6:7f:20:a8:fd:90:3e:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53ac0b1-83a3-47f2-b28e-b2b1977dc375
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=44ea5618-0a52-4da1-915d-0c460fba0787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d1:7c:13:97:b5:60:8a:b0:9e:7e:d9:fb:bf:
                    4d:da:69:f5:09:b1:6a:25:94:14:df:88:fa:d1:5b:
                    71:8a:0f:f0:a8:0b:f1:a6:62:8b:4f:90:5e:81:70:
                    c8:8c:64:3f:70:3c:ea:16:50:d2:90:b4:fa:86:f1:
                    47:93:64:34:85:7f:cc:fb:d5:fc:97:ae:45:61:6a:
                    da:6a:85:b8:5a:85:a3:3b:1f:c7:70:5e:a0:84:0e:
                    07:47:59:7a:e3:ee:8c:1c:43:c5:91:7c:a0:8a:71:
                    d0:52:e1:01:43:f6:4c:fa:c9:53:cb:fa:cf:93:63:
                    14:20:e0:5b:d3:0f:bf:44:f7:ab:e0:e5:6b:08:4e:
                    ac:f0:d4:f8:c0:ad:7e:44:54:8a:f2:65:1b:0c:cb:
                    ca:df:be:3c:1f:8d:cb:6f:75:40:8b:65:e3:ba:14:
                    35:f8:6e:ee:57:5b:14:2a:ff:38:dd:8f:e9:20:86:
                    61:f8:99:29:fe:96:33:3a:ee:59:72:d5:74:fc:09:
                    fd:e5:14:d5:5d:9b:1d:f9:f9:ad:44:5c:29:fa:1a:
                    c7:e4:84:b9:75:c7:ed:a5:b2:ec:c5:12:80:dc:40:
                    8e:3c:b1:a0:e7:32:49:ba:6b:cb:1a:b5:d7:53:d4:
                    41:a1:f2:d8:16:29:0c:b7:42:ab:c4:b2:d9:6e:c6:
                    f3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:BB:D5:FF:57:68:6D:FC:CC:F4:73:A1:69:1B:37:44:AA:88:F6:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375/77edcd41-83c3-3d54-9d91-d3c211050376.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375/a53ac0b1-83a3-47f2-b28e-b2b1977dc375.crl

            X509v3 Authority Key Identifier:
                keyid:AC:C4:2B:19:FD:7B:64:94:F1:BE:8D:6F:0C:E8:8A:B4:D4:7C:F2:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.34.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:52:9c:16:97:e4:90:1e:d3:7f:da:43:b6:5a:bd:98:f5:3a:
         a6:d7:80:14:16:d8:b4:b9:a0:4c:af:34:3b:ae:2e:38:63:b6:
         0a:6f:bf:e8:0a:bb:0f:9a:62:14:56:d0:6c:73:e8:8f:5d:a5:
         61:ed:41:3d:9d:43:a9:de:ac:28:2a:a5:ed:03:ec:1f:c6:f2:
         b7:a7:7b:52:f9:a1:46:30:36:3d:36:99:72:de:0d:bc:83:8a:
         c8:9a:4a:92:ff:92:9e:38:e2:82:57:64:3b:18:c6:3b:6e:77:
         89:01:ac:15:f5:84:2d:f2:16:61:59:83:84:54:0b:65:85:26:
         2f:84:bc:a6:ad:15:a9:d8:b0:ad:78:df:da:be:1c:db:fd:e9:
         cf:ac:1a:e8:46:61:3b:d3:d7:66:b2:94:70:39:7f:b5:39:78:
         c1:c4:b7:68:d4:69:61:11:63:3c:62:48:d8:d2:b7:b8:79:b1:
         e2:fe:26:85:0d:bd:bc:d0:64:d6:a7:a8:72:fc:36:26:2d:ae:
         84:91:93:bd:cc:2f:da:c4:b8:68:7c:93:64:e8:c6:1f:9b:f0:
         25:56:70:2b:81:54:ab:24:c7:46:72:9f:01:54:91:7a:54:7d:
         e8:ab:8a:6a:0c:0e:dc:98:53:05:1f:0a:10:00:c6:ba:a8:4b:
         90:18:92:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:37:44 2026 by rpki-client