Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/dbf5a2ba-c09e-3140-9416-c56a5bd23eb2.roa
File:                     dbf5a2ba-c09e-3140-9416-c56a5bd23eb2.roa (raw, json)
Hash identifier:          QB6rmHpNfm5peXjEpLJ7naJswx02Qqzz/ZfHne9Xp9o=
Subject key identifier:   97:47:11:86:6D:37:AB:D2:A3:50:07:1B:F7:2D:A4:01:40:80:3C:94
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584D300A2BBCF2D2C713CB925B00
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/dbf5a2ba-c09e-3140-9416-c56a5bd23eb2.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     174
IP address blocks:        170.130.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:2b:bc:f2:d2:c7:13:cb:92:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=6241de80-707b-47e3-bcfc-6a0beab6bd2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:52:44:89:55:79:94:21:d9:f9:91:95:a4:bd:
                    39:7a:8b:f1:79:6c:0e:1a:c5:6a:1f:f6:a4:ed:ff:
                    03:50:a0:88:9a:71:9d:57:de:7a:7d:e6:13:70:6d:
                    bc:b9:6d:d5:f7:09:97:96:01:3f:1d:fe:d5:14:f9:
                    3c:30:c6:b1:24:cb:82:a7:50:6b:4e:10:2a:c4:e2:
                    81:c6:66:75:24:21:6a:ab:2c:97:1f:fe:eb:99:b1:
                    fd:ae:23:38:15:1f:31:7f:c6:cf:c7:a8:c5:85:7e:
                    c0:ea:e8:fc:9e:a3:39:da:35:79:ca:8e:81:db:8d:
                    34:27:48:ac:19:39:46:cd:40:99:b9:73:ec:ba:21:
                    44:6b:5f:2b:3d:bc:d4:79:0e:06:6d:e5:61:c5:fc:
                    01:bd:60:c3:53:43:d8:65:66:5a:5d:5d:4e:e7:11:
                    2f:dd:de:ec:b3:ef:b1:ec:93:66:64:02:6f:c0:9b:
                    4c:5e:58:cc:42:97:53:5a:94:4b:12:44:02:dd:45:
                    09:d5:5d:8a:a7:ca:1d:63:7c:3e:0d:2d:8b:30:cd:
                    7d:0d:1f:7b:94:ac:5a:e5:af:18:5e:05:17:b5:77:
                    5e:f6:0a:cd:d4:f7:d1:9a:75:17:18:1d:83:22:2e:
                    4c:3a:1b:ec:17:33:39:a2:06:7e:9c:2a:ca:20:4c:
                    c2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:47:11:86:6D:37:AB:D2:A3:50:07:1B:F7:2D:A4:01:40:80:3C:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/dbf5a2ba-c09e-3140-9416-c56a5bd23eb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.130.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:86:63:97:42:bd:dc:d0:98:bf:7e:77:97:e9:15:54:53:04:
         d4:37:a4:9c:ed:b2:55:5b:e4:ca:cc:cf:bc:b0:55:dc:0d:8e:
         66:cb:cf:e9:9f:26:0d:5c:3a:aa:b5:e9:ab:19:7b:86:89:20:
         af:00:26:33:11:38:a0:56:30:3f:e8:85:0b:07:06:15:70:6b:
         98:c8:f7:65:3a:66:4b:bb:42:24:3e:81:2f:f8:33:91:44:17:
         2a:be:87:67:ee:b3:a7:b0:b8:40:03:2f:1a:da:07:32:bc:56:
         f1:35:96:a0:a4:45:5b:9a:59:96:f3:f4:cb:3f:ec:bd:72:0a:
         9c:05:b2:47:1f:eb:3a:2f:18:ac:50:d4:44:59:7d:d6:44:f8:
         c4:74:a8:a1:69:d5:23:24:69:0e:4f:2a:46:4e:cc:69:96:63:
         04:25:58:a1:43:d5:29:3e:59:18:20:43:03:af:2a:27:9f:5c:
         48:52:e9:6c:17:0b:f5:fc:00:72:4f:48:f8:44:57:24:24:ca:
         98:3e:ea:8f:2a:e9:68:9c:75:4f:af:84:aa:67:c6:90:7c:68:
         9a:c9:8b:8f:41:67:90:4e:ea:79:4f:07:c7:12:fc:b3:bf:a7:
         4b:23:de:94:bd:9a:5e:2c:d4:6e:6c:99:6c:c8:be:44:e3:3a:
         47:98:c1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:42:23 2026 by rpki-client