Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7214f507-cefe-3be9-8809-bc2eed31d0ab.roa
File:                     7214f507-cefe-3be9-8809-bc2eed31d0ab.roa (raw, json)
Hash identifier:          jku73oTBfN/cf8zkkbaXABrAdMY4aizzgtIbgcSu+N0=
Subject key identifier:   41:D5:B0:45:AA:70:6D:A4:3C:0C:7F:55:AD:97:F7:4F:3F:D9:A6:53
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584D24B874ABB9FB33B10E145780
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7214f507-cefe-3be9-8809-bc2eed31d0ab.roa
Signing time:             Thu 12 Mar 2026 11:42:20 +0000
ROA not before:           Thu 12 Mar 2026 11:42:20 +0000
ROA not after:            Wed 10 Jun 2026 11:42:20 +0000
asID:                     834
IP address blocks:        173.232.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:b8:74:ab:b9:fb:33:b1:0e:14:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Mar 12 11:42:20 2026 GMT
            Not After : Jun 10 11:42:20 2026 GMT
        Subject: CN=87738afd-43df-4fe9-be56-2bb85d41dbc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c0:43:d5:ed:37:ee:26:a6:52:75:5d:65:a4:
                    16:61:af:23:19:1e:61:df:4c:ff:9b:6d:73:a9:cb:
                    f5:fc:a3:28:3b:f2:2c:df:ed:2b:0f:eb:32:7d:b3:
                    56:c9:9b:12:21:db:01:39:7d:20:ac:f6:e0:2a:97:
                    a6:03:12:1d:d4:79:87:f3:d8:ca:8b:c3:8a:d6:9d:
                    f3:99:2c:32:92:69:52:de:3d:d9:95:19:04:16:2b:
                    84:89:32:f4:aa:e7:b3:d1:40:64:86:af:2b:a2:9a:
                    79:70:e8:4a:3d:bc:d6:3a:c8:47:7e:48:03:87:60:
                    53:2f:3e:31:0a:c5:de:67:1d:51:04:c3:9f:cb:ed:
                    dc:93:4a:06:f3:43:e4:f5:92:0a:f4:2a:ff:39:68:
                    ad:92:85:04:fb:98:ed:87:96:43:82:72:a0:03:f4:
                    b9:16:48:9a:66:3b:2d:3c:30:d1:27:b3:d0:ef:f2:
                    0f:26:a9:ef:bb:86:b1:01:75:9e:1d:de:e5:f3:43:
                    20:59:94:59:37:a3:0d:7a:ac:3b:eb:7f:e1:db:77:
                    b6:27:3a:91:ef:ca:ad:43:64:7a:73:15:24:dc:2f:
                    82:97:e0:ec:ae:8a:99:7c:e5:d6:ab:a2:8c:90:6b:
                    72:2e:8d:02:c8:ad:36:44:99:fa:2e:5c:22:8c:02:
                    6d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D5:B0:45:AA:70:6D:A4:3C:0C:7F:55:AD:97:F7:4F:3F:D9:A6:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7214f507-cefe-3be9-8809-bc2eed31d0ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.232.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:dd:d8:52:16:bb:4e:3a:c7:06:a8:29:91:89:c5:25:dd:78:
         26:88:37:d1:e2:88:c6:a1:13:07:ee:06:a1:af:1a:7a:cd:48:
         7d:b7:74:4a:49:84:b1:c2:e0:36:21:0f:53:7b:27:36:23:5a:
         00:c7:b0:15:37:86:cb:56:2a:33:a3:11:aa:12:0b:33:3b:0d:
         55:a7:3e:34:cb:86:93:40:63:7f:5c:40:e4:ac:1f:dc:2f:e7:
         50:7f:a0:04:3d:2d:45:8b:d3:38:51:5f:4e:54:d4:6a:dd:06:
         c6:58:34:15:29:64:16:c4:dc:d5:c0:e2:31:59:1b:5f:1d:67:
         e4:c4:11:1b:43:8b:e7:f7:86:73:6f:8b:81:66:ab:9f:19:94:
         8b:15:10:08:f8:5f:34:99:d5:59:8a:45:62:a9:df:15:10:b4:
         ef:f9:59:6b:f4:bb:0c:d3:a7:de:4f:42:7b:4f:68:e8:42:02:
         56:ce:74:45:83:76:93:bf:b1:8f:0f:ce:8e:67:81:f3:5a:83:
         04:55:dc:fe:cf:85:67:1d:db:c0:b6:6f:e7:67:d9:36:75:c1:
         3c:12:34:2c:74:b9:31:75:70:8b:24:0b:c7:46:40:72:fb:f9:
         9c:20:8f:c5:60:e8:54:98:44:8e:eb:26:63:91:be:51:bd:eb:
         e5:d5:fa:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:58:46 2026 by rpki-client