Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d8908a6d-f62c-3f11-b965-a01a26b7a4a4.roa
File:                     d8908a6d-f62c-3f11-b965-a01a26b7a4a4.roa (raw, json)
Hash identifier:          bcvFVPu1/2qq2+zPgy/A7DvLESCiaRN0iwuVPEi5nIk=
Subject key identifier:   B4:2D:70:B4:CC:D8:81:ED:2F:C4:1C:06:5E:6E:A1:78:C3:DE:7C:6A
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584D39CF9F2DE2BD744C0AECCC80
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d8908a6d-f62c-3f11-b965-a01a26b7a4a4.roa
Signing time:             Fri 20 Mar 2026 01:00:32 +0000
ROA not before:           Fri 20 Mar 2026 01:00:32 +0000
ROA not after:            Thu 18 Jun 2026 01:00:32 +0000
asID:                     62904
IP address blocks:        173.232.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:39:cf:9f:2d:e2:bd:74:4c:0a:ec:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Mar 20 01:00:32 2026 GMT
            Not After : Jun 18 01:00:32 2026 GMT
        Subject: CN=d6dedd75-1eeb-445c-8824-63713caf4bd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d8:0d:7a:fd:e5:8e:7b:fd:90:cf:49:92:46:
                    72:40:56:d9:c8:44:86:c3:2c:fc:c4:41:e3:67:ab:
                    c8:12:b5:d9:e0:f3:1f:12:7b:22:69:06:1a:e7:ca:
                    9e:9a:1c:42:a2:30:96:08:7c:fb:ba:97:91:17:1e:
                    00:7c:6d:59:a9:0e:4f:8c:c1:e7:8d:cb:eb:7b:86:
                    67:1d:57:74:60:38:9a:7f:a7:04:e2:30:91:91:c1:
                    f5:ee:74:c2:36:87:2a:a8:88:83:d7:7f:cf:2d:de:
                    48:94:ee:d1:62:c4:53:ce:e5:24:e1:22:c9:55:b8:
                    fd:9b:16:4b:1b:aa:64:ff:c2:50:16:fe:a6:f0:f5:
                    0b:f4:46:da:99:2e:1b:51:a1:4e:49:e8:6d:10:39:
                    bf:51:00:d8:11:81:56:1c:35:fd:80:20:04:5e:56:
                    d3:5b:06:d7:2f:ca:1d:b6:0e:92:89:27:6c:5c:45:
                    51:fe:87:b3:e8:e1:27:68:b5:93:92:b8:e7:08:79:
                    e9:bc:b3:55:c2:dc:54:41:f5:50:fe:0d:c1:0b:2e:
                    78:7a:09:33:5f:c9:df:a9:30:7b:9c:55:50:1b:81:
                    9c:ef:a5:83:fa:cd:6f:b7:0d:13:2c:00:ac:82:4f:
                    25:8b:b6:72:3e:40:b4:91:f1:5f:c2:3d:cd:91:70:
                    ad:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2D:70:B4:CC:D8:81:ED:2F:C4:1C:06:5E:6E:A1:78:C3:DE:7C:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d8908a6d-f62c-3f11-b965-a01a26b7a4a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.232.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:f7:f3:72:8a:5e:2a:8c:ce:33:3b:1f:64:d7:30:9f:53:32:
         fa:9b:af:45:32:ba:e0:66:dd:68:50:cc:d5:64:8a:6d:8c:25:
         1d:b0:29:f0:5f:7e:46:a2:54:6a:17:2c:0a:90:59:93:18:55:
         9f:67:1b:b7:f7:1d:3d:6b:fa:8b:90:dc:c5:34:a2:52:e4:2e:
         04:8c:01:7f:2d:42:38:8d:b8:ff:dd:3c:6f:80:3f:ca:f5:14:
         48:49:ec:a7:50:f9:ab:d5:c9:c1:88:49:65:8d:9e:01:ac:52:
         6d:df:a3:aa:0e:39:f4:af:ba:63:66:77:30:7c:01:ca:9e:90:
         d5:62:71:9c:c5:bc:ce:e8:bf:36:f6:8a:ae:d2:6a:65:85:b9:
         a0:4c:a7:05:c6:2b:20:61:8d:9e:eb:24:0d:23:8b:8c:32:cb:
         7e:f6:f4:3e:25:13:1f:b8:a9:06:83:2f:13:09:5f:75:b9:0c:
         5c:29:aa:26:e9:6e:67:52:55:17:22:f8:bb:de:20:6b:97:da:
         c4:92:56:f3:6c:c1:16:63:bc:9b:76:46:cd:16:40:58:91:da:
         88:9a:78:2e:18:7f:b0:9d:b3:bb:9c:0a:59:0e:dd:e8:8f:cf:
         57:3e:98:45:2f:b6:ee:13:4b:85:93:d2:54:55:31:69:50:d3:
         02:d2:45:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:10:51 2026 by rpki-client