Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/9b4c3cda-7638-35a1-9a03-c1aa07ab65e0.roa
File:                     9b4c3cda-7638-35a1-9a03-c1aa07ab65e0.roa (raw, json)
Hash identifier:          poncFLiX+yf8kq6BMiQRhZKaC73WCuoaCsjFFxirS0A=
Subject key identifier:   1F:09:D2:EC:29:CE:B1:A9:05:8B:89:32:38:88:5D:89:CA:37:3F:9E
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584D485A208787F6890D69521F40
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/9b4c3cda-7638-35a1-9a03-c1aa07ab65e0.roa
Signing time:             Wed 25 Mar 2026 06:01:22 +0000
ROA not before:           Wed 25 Mar 2026 06:01:22 +0000
ROA not after:            Tue 23 Jun 2026 06:01:22 +0000
asID:                     401783
IP address blocks:        173.232.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:48:5a:20:87:87:f6:89:0d:69:52:1f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Mar 25 06:01:22 2026 GMT
            Not After : Jun 23 06:01:22 2026 GMT
        Subject: CN=9e943629-d5ab-4418-bcf8-82d7922cb670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ae:b1:8b:a3:9a:d7:38:7d:89:79:7b:c2:89:
                    16:87:0d:52:a5:8f:df:8f:c1:a9:31:3c:e2:cd:05:
                    10:64:bd:25:b8:fd:d5:a1:42:f6:74:e2:31:d7:00:
                    f8:58:2d:86:b9:38:43:74:8d:cd:8f:14:9a:7f:5b:
                    bf:3c:33:48:2b:ea:9e:87:83:b6:ab:e4:4d:07:c4:
                    80:b0:e2:1d:03:df:50:fc:7a:8a:46:81:a9:fa:6a:
                    a5:b0:2e:1b:9e:3c:6d:fa:22:3d:b9:76:05:de:b9:
                    5c:fb:3c:98:65:5a:96:72:3f:d0:94:13:4a:c8:c4:
                    a9:fc:9e:0a:19:85:b0:04:f0:b5:35:e1:bb:f4:0a:
                    6e:d6:6e:bf:80:e8:e3:1d:bb:d2:19:44:c5:00:fb:
                    10:75:b8:4d:e5:17:c3:b9:d9:98:7c:66:fb:02:95:
                    87:67:fb:4f:39:66:ab:df:3e:72:98:8c:f1:30:62:
                    ab:85:f3:af:d0:d8:77:58:4b:d3:b7:c9:e2:0f:8a:
                    b2:44:1c:06:26:f7:8b:d2:3c:a7:40:fe:8f:2c:d2:
                    ec:c6:a9:2e:bf:29:d9:8b:36:7b:e0:95:21:3e:68:
                    51:0c:55:e1:de:98:a3:27:23:2c:98:18:46:7e:46:
                    b9:cb:e6:5e:47:19:47:a8:98:f2:07:74:b6:a6:77:
                    d6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:09:D2:EC:29:CE:B1:A9:05:8B:89:32:38:88:5D:89:CA:37:3F:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/9b4c3cda-7638-35a1-9a03-c1aa07ab65e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.232.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:97:98:19:ab:84:8b:b2:db:5f:c9:a1:d5:63:83:20:64:cd:
         61:c7:7c:cf:06:17:d1:90:2d:59:12:d8:eb:8e:41:9b:03:f6:
         c8:90:6a:85:1d:ba:64:8f:ad:8b:34:65:a8:ba:ac:8b:13:51:
         26:23:42:6f:00:b2:0a:72:ea:0c:aa:9b:ac:ac:e0:05:28:d0:
         b9:44:5f:45:56:bc:d3:a6:38:c1:34:11:e6:28:50:b4:6a:55:
         fd:cc:48:83:28:8e:75:c4:7d:44:f3:0e:3b:8c:ff:2e:93:47:
         b0:0a:7e:a6:04:96:b5:35:d9:05:a8:bd:3f:aa:6f:84:b8:af:
         7f:a5:65:7e:cc:11:9d:a3:69:4f:ff:4a:f1:51:17:47:2c:9c:
         bc:49:8d:7c:f7:fd:5a:e8:aa:96:cb:48:32:17:9d:c3:02:dd:
         c3:96:9f:48:08:cd:05:a6:aa:88:ec:b3:c5:f3:c8:a5:8f:2a:
         ad:cb:db:87:f7:10:15:f1:22:6b:3c:f0:34:bd:05:78:dc:a7:
         67:f0:c9:53:ee:0d:07:1b:a0:84:07:bf:36:4a:6c:ad:83:82:
         ef:18:35:ec:d0:89:32:bf:50:22:d5:b0:53:70:1a:2a:a5:cc:
         1a:c9:e3:08:7b:65:dc:38:6f:10:5d:7d:e5:63:ab:6e:b8:af:
         93:45:09:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:33:22 2026 by rpki-client