Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c/dfc43987-e52e-30aa-857f-3bd6ef64ddb2.roa
File:                     dfc43987-e52e-30aa-857f-3bd6ef64ddb2.roa (raw, json)
Hash identifier:          9VZiMczg1ZHS/PU2IGC0IBC5pIazb4AcG+fMdoL0uOI=
Subject key identifier:   55:8E:6A:49:B7:61:E8:D9:AA:6A:06:4E:FD:88:A4:A4:6B:F5:07:E1
Certificate issuer:       /CN=ce660bcc-5f06-4302-bd04-76a6aff8b40c
Certificate serial:       010D0C9F4328584D343A13999E22253E496A9000
Authority key identifier: DA:75:7B:A4:71:96:8C:F8:F5:CD:04:CC:3F:B8:1A:A5:FE:17:DD:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c/dfc43987-e52e-30aa-857f-3bd6ef64ddb2.roa
Signing time:             Wed 18 Mar 2026 01:00:33 +0000
ROA not before:           Wed 18 Mar 2026 01:00:33 +0000
ROA not after:            Tue 16 Jun 2026 01:00:33 +0000
asID:                     54223
IP address blocks:        204.145.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c/ce660bcc-5f06-4302-bd04-76a6aff8b40c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c/ce660bcc-5f06-4302-bd04-76a6aff8b40c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:34:3a:13:99:9e:22:25:3e:49:6a:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce660bcc-5f06-4302-bd04-76a6aff8b40c
        Validity
            Not Before: Mar 18 01:00:33 2026 GMT
            Not After : Jun 16 01:00:33 2026 GMT
        Subject: CN=1ec69263-230c-4a9c-a2c5-69845822be46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:78:15:26:e0:cc:32:ba:5b:ea:5b:a1:69:cd:
                    ea:e6:37:2a:b4:cb:6b:07:cd:8f:53:45:8e:f2:d4:
                    39:70:76:bd:8d:17:11:28:ca:25:e0:51:0b:53:40:
                    e6:1f:3f:f5:78:f7:4f:cc:a8:54:54:ff:d5:73:84:
                    1e:d2:87:dc:58:57:b6:fb:d7:7a:bf:06:c2:23:46:
                    97:91:84:e0:fc:0b:20:1c:95:1b:3f:71:0d:71:80:
                    5e:df:16:a0:82:f2:31:7c:7d:b6:a4:29:eb:02:9e:
                    67:8b:f7:ea:86:80:b4:31:e7:4c:d3:ec:74:46:20:
                    e2:7a:3c:fb:ac:a6:90:b7:58:84:42:74:3c:0a:db:
                    e8:6b:97:93:0d:6f:9a:d5:df:3a:24:05:81:2b:7a:
                    7e:ea:df:30:6f:86:c7:d5:36:2a:20:39:59:61:23:
                    b0:c7:d9:df:af:15:7b:ae:01:0d:e6:ea:79:7d:26:
                    5f:68:97:0f:01:dc:f3:45:c1:0f:7d:e0:2c:a9:6d:
                    99:63:cd:18:af:a1:b7:4e:fc:b0:de:01:0c:f6:72:
                    41:34:52:1c:e7:fb:31:8d:7e:60:7b:1e:c4:60:d6:
                    d6:82:a3:f2:1a:f5:50:ab:c5:cd:6f:dd:51:e3:14:
                    ce:ba:d6:62:b2:0b:76:4a:f5:6e:0a:db:2a:9e:c5:
                    d3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:8E:6A:49:B7:61:E8:D9:AA:6A:06:4E:FD:88:A4:A4:6B:F5:07:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c/dfc43987-e52e-30aa-857f-3bd6ef64ddb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c/ce660bcc-5f06-4302-bd04-76a6aff8b40c.crl

            X509v3 Authority Key Identifier:
                keyid:DA:75:7B:A4:71:96:8C:F8:F5:CD:04:CC:3F:B8:1A:A5:FE:17:DD:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce660bcc-5f06-4302-bd04-76a6aff8b40c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.145.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:d4:1c:d8:a1:f3:55:f8:d9:62:0d:24:18:60:ab:f9:62:25:
         f7:0a:89:32:46:8a:bb:33:fc:e1:f0:12:23:6e:21:1f:c2:ac:
         4a:1d:70:e5:53:e7:b7:33:65:95:c9:b7:95:d5:19:45:a6:c5:
         7e:b3:6a:71:39:71:83:44:a0:84:23:be:ee:09:39:ad:18:9f:
         17:85:4c:bd:27:0a:9d:84:67:2e:9d:fc:5a:66:dd:21:79:13:
         db:bf:ac:1d:71:92:a3:ba:64:c1:f5:21:09:31:87:0d:d4:3b:
         48:30:0b:90:c5:12:22:37:5a:ec:ef:82:cf:a2:76:3e:6b:68:
         89:b1:3e:d5:b1:9f:11:be:a0:05:a6:a4:2b:d4:5a:de:7d:2b:
         d7:dd:8c:18:a5:ec:16:bf:c0:90:bd:d2:d9:5e:b4:4e:75:3f:
         b3:b5:87:26:dd:1d:96:53:a1:9c:6c:c4:cd:08:4f:2c:85:46:
         e6:9e:4c:4a:e2:d4:4e:76:55:41:0c:03:4d:85:1f:8e:ab:a4:
         c3:75:03:45:c5:51:70:bd:02:41:c4:51:7c:86:ee:b0:f1:c3:
         80:0f:15:96:68:67:74:44:5e:b1:e9:ff:92:5c:e5:16:09:3e:
         ce:aa:37:49:c3:b8:3b:b9:df:25:62:c7:14:05:61:01:29:0c:
         11:c6:98:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:11:07 2026 by rpki-client