Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/9cc2c7a5-f839-35ef-a495-0b95482603fc.roa
File:                     9cc2c7a5-f839-35ef-a495-0b95482603fc.roa (raw, json)
Hash identifier:          Rp+qARW9jOt1AEfsTZy4+8bwoOJOvWB+Zfwdyi1Rly8=
Subject key identifier:   D3:81:E9:14:9A:F2:5B:58:7A:0B:CF:92:2C:D0:FF:7E:31:04:C3:00
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584D4BC62187816EBDDD4AA29980
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/9cc2c7a5-f839-35ef-a495-0b95482603fc.roa
Signing time:             Thu 26 Mar 2026 11:26:25 +0000
ROA not before:           Thu 26 Mar 2026 11:26:25 +0000
ROA not after:            Wed 24 Jun 2026 11:26:25 +0000
asID:                     17497
IP address blocks:        173.232.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4b:c6:21:87:81:6e:bd:dd:4a:a2:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Mar 26 11:26:25 2026 GMT
            Not After : Jun 24 11:26:25 2026 GMT
        Subject: CN=8d8b468e-35fa-428f-8a19-0b94bad406b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8f:ac:4f:90:76:89:37:f5:1f:54:6d:a8:3e:
                    44:5d:50:b4:11:25:e9:28:67:8b:2a:4e:f8:a5:9c:
                    c2:51:49:3a:5b:69:0b:e2:87:7b:ce:38:3a:b9:20:
                    b8:2e:0d:ce:62:87:ab:16:62:d7:90:89:14:39:3f:
                    e3:d4:40:b1:4e:38:ac:6d:dd:ad:87:36:6f:0c:e1:
                    3d:f7:4f:9e:bf:4a:bf:30:fb:db:31:a2:ed:3f:59:
                    45:51:5d:81:30:ec:fa:9b:8b:bd:83:3a:a9:c2:29:
                    e9:e0:a7:d8:fd:4e:b3:19:c3:34:65:71:6a:40:78:
                    37:c9:5c:3b:a1:e3:a2:bd:0d:9e:ee:75:97:ad:cb:
                    38:88:1c:ae:23:2a:1b:0f:ec:4f:ec:bb:1a:b4:73:
                    be:55:de:b8:0c:ff:40:62:00:35:55:e8:9c:3f:22:
                    e8:24:21:de:48:ac:7d:a5:88:37:23:7c:a9:ff:9d:
                    56:15:3c:d3:e3:1a:45:5d:49:14:1f:81:cd:e6:ff:
                    a3:2a:bc:cb:42:cf:8e:e5:0e:e6:49:82:3a:49:71:
                    ec:40:e5:24:f3:57:e5:3d:e3:78:58:f3:b7:e6:ed:
                    62:b5:39:81:87:6f:64:c1:c8:a1:b2:0a:f2:8c:f3:
                    dc:53:56:ae:da:6f:91:bf:51:99:93:e8:79:0a:8d:
                    01:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:81:E9:14:9A:F2:5B:58:7A:0B:CF:92:2C:D0:FF:7E:31:04:C3:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/9cc2c7a5-f839-35ef-a495-0b95482603fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.232.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:15:8c:96:fa:56:7f:80:e5:df:ad:ac:cd:4b:64:30:d1:0c:
         52:eb:bf:02:ff:a7:38:52:8f:8d:44:e2:49:bf:de:f1:09:fb:
         f3:06:77:44:bb:27:4b:46:18:a2:5a:ed:c9:03:91:52:43:06:
         b0:e0:2c:af:09:ef:c4:92:b7:4d:b1:05:88:50:ba:54:dc:f3:
         69:f8:17:3e:a8:c5:50:12:e7:f6:e7:70:be:71:36:23:2f:67:
         cf:25:8d:d7:33:3d:c0:b3:fd:e0:06:2a:41:6c:64:69:88:28:
         ff:b9:3f:40:70:3d:29:9a:dc:45:a4:1b:84:a0:95:aa:63:b3:
         a3:8e:56:97:7e:13:2e:bc:b7:01:cb:67:b5:75:bc:59:e9:5b:
         45:f9:9a:0d:eb:00:c9:fb:fc:3a:23:d9:68:01:a4:b3:dd:99:
         e8:1a:84:b4:8f:dd:1e:fc:b9:5e:81:cd:2e:6d:48:21:7d:21:
         50:8f:ba:be:64:d8:92:72:d2:b6:72:cd:bf:af:16:5d:66:e0:
         93:50:27:3d:16:ba:75:0a:20:eb:55:90:f5:82:97:64:7d:af:
         15:24:5a:23:87:5e:a7:f7:b3:86:3e:eb:a5:2b:fd:a0:bd:bc:
         7a:1e:39:b8:82:d0:d9:6d:fd:f6:6d:0d:9e:5b:d7:e1:a4:8b:
         7c:4a:4a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:49:03 2026 by rpki-client