Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/1dc07208-ca23-362a-a20c-22d013df9b70.roa
File:                     1dc07208-ca23-362a-a20c-22d013df9b70.roa (raw, json)
Hash identifier:          nCEIgSlbCCSM4tHoIE77sC9ihZXr+GD98PZ6cj6xZfo=
Subject key identifier:   2D:DC:59:05:79:13:FF:26:79:B5:1B:9B:00:BA:11:BB:BC:F6:C8:85
Certificate issuer:       /CN=68f1635e-5871-4108-b726-e99a09258e31
Certificate serial:       010D0C9F4328584D386A5E3B84C071B782EC7C00
Authority key identifier: CD:C5:9F:2D:D8:29:37:AA:4F:82:8E:D4:10:7B:6E:FF:F4:CA:08:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/1dc07208-ca23-362a-a20c-22d013df9b70.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     33510
IP address blocks:        204.126.156.0/24 maxlen: 24
                          204.126.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/68f1635e-5871-4108-b726-e99a09258e31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/68f1635e-5871-4108-b726-e99a09258e31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:5e:3b:84:c0:71:b7:82:ec:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68f1635e-5871-4108-b726-e99a09258e31
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=2e3b8a5a-99ca-4c15-9211-3864c15ab306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7a:9f:94:bf:ca:80:f3:39:50:c5:b8:8e:b2:
                    b7:08:8a:c4:d1:6f:4a:35:c9:af:41:e0:0f:0f:7a:
                    3f:f0:51:1a:0c:df:e2:1c:80:5b:33:80:0a:e7:79:
                    6b:16:73:eb:a8:47:0c:54:68:c5:ef:2d:55:bd:01:
                    85:c2:c1:3b:14:0f:41:fd:6a:57:f7:e3:35:8e:50:
                    63:43:b7:61:61:a5:f9:56:6d:9f:d0:d9:e0:b3:59:
                    bd:f2:74:c1:1a:02:53:c1:87:d9:f4:66:7e:f0:fd:
                    75:ba:90:a3:e3:d7:e8:af:1d:08:df:d3:41:61:8c:
                    da:0b:e6:60:d1:04:bb:96:a9:90:a0:ab:ea:6d:4d:
                    9a:1c:d3:dd:3f:ec:90:a5:8b:71:11:b4:02:9e:58:
                    73:4f:30:59:e2:50:66:a1:97:eb:49:35:ad:21:86:
                    c8:e2:8a:ed:a2:f6:2d:6f:b8:4a:e7:ac:16:87:04:
                    be:a4:53:dc:92:fe:cf:e7:5f:34:76:95:8e:27:d7:
                    b7:5a:9a:2d:9d:ec:3d:14:f3:7d:88:da:04:fe:ad:
                    6b:c9:74:68:a5:23:9a:ab:13:31:89:d7:c1:53:fb:
                    03:2e:a9:ef:51:39:bc:24:d8:b6:7b:38:53:22:48:
                    b8:6c:7b:a2:56:35:04:40:80:ed:94:7d:fd:fb:31:
                    9c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:DC:59:05:79:13:FF:26:79:B5:1B:9B:00:BA:11:BB:BC:F6:C8:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/1dc07208-ca23-362a-a20c-22d013df9b70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31/68f1635e-5871-4108-b726-e99a09258e31.crl

            X509v3 Authority Key Identifier:
                keyid:CD:C5:9F:2D:D8:29:37:AA:4F:82:8E:D4:10:7B:6E:FF:F4:CA:08:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/68f1635e-5871-4108-b726-e99a09258e31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.126.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:7d:e0:e0:8c:e8:3e:44:c0:2b:e4:a8:68:de:c5:6f:84:0e:
         ae:68:57:e5:a0:d0:52:b7:96:06:fd:0b:a7:db:8d:a9:f1:52:
         62:b9:0d:7d:13:3b:5a:26:51:ec:5a:0d:20:e7:45:da:b7:0b:
         09:d5:05:d6:b5:b3:38:65:ac:58:fb:ea:17:11:43:2d:80:01:
         65:aa:ad:2f:c0:46:f6:81:52:85:fe:65:38:84:e9:3d:78:25:
         ac:58:a3:eb:b6:25:07:92:41:2c:b0:81:63:3c:1a:68:75:1c:
         79:ba:95:f1:c6:01:85:c7:51:3f:31:3b:97:c9:33:9f:ac:22:
         47:60:f3:1f:74:e7:cc:32:4e:55:6a:9e:72:5e:8b:5a:39:83:
         e7:72:c3:36:ec:83:b5:9f:05:d3:1c:ab:e4:ed:bb:bc:bc:e8:
         22:55:da:bf:60:f5:10:17:a7:a5:b3:10:8a:c8:14:32:ba:d4:
         94:f8:65:83:1c:8a:7f:8d:48:78:a1:b9:67:65:a9:ed:30:e2:
         19:06:50:94:6a:54:6c:f2:b7:be:d5:9e:e9:75:18:80:5e:2f:
         67:d5:db:b4:56:58:11:b3:30:ed:44:45:d6:1f:5b:5c:3e:6b:
         21:20:f1:42:aa:6d:38:7a:b4:0a:2a:43:d5:7e:98:a7:44:fe:
         85:28:18:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:02:05 2026 by rpki-client