Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/eb4cbefa-b866-3696-8e46-cca0e7b94c55.roa
File:                     eb4cbefa-b866-3696-8e46-cca0e7b94c55.roa (raw, json)
Hash identifier:          jms7MA2zV65d41sDMiGFpqaQPwMuZNLQC965gwLf1ZY=
Subject key identifier:   31:4C:68:61:17:E4:4F:3C:B2:D6:4B:53:90:E7:BF:D7:E6:FF:81:ED
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D300AB225BB2A41C29EC09B80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/eb4cbefa-b866-3696-8e46-cca0e7b94c55.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     7922
IP address blocks:        209.101.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:b2:25:bb:2a:41:c2:9e:c0:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=454befab-7cce-4b7a-83fd-952070091858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:96:70:4d:a2:a8:ea:d8:76:5c:97:42:46:12:
                    21:7a:15:3b:fc:99:ec:7f:1f:2f:82:a8:f3:81:84:
                    7b:6d:4e:b5:a3:cf:50:0c:c1:bd:b3:78:79:27:22:
                    c2:a3:e1:d9:2a:dc:85:d7:bf:07:79:a7:3e:3a:f5:
                    eb:51:c9:5b:ac:64:7b:00:34:b9:bd:66:59:3a:74:
                    6a:8b:82:76:da:40:4f:df:19:a1:ee:47:31:59:7f:
                    a7:e6:af:df:6c:ed:52:73:d3:82:28:bc:e4:b9:06:
                    57:41:63:2b:32:e8:b5:37:8f:08:8c:ac:2b:00:20:
                    26:03:57:eb:13:ad:f5:fa:31:3d:67:97:fb:a1:6a:
                    d3:b9:48:8e:68:6c:f6:c8:d9:da:13:61:8f:3c:e4:
                    be:a0:8b:66:61:d4:e8:48:a8:50:29:76:b6:d3:ca:
                    22:8b:6c:83:39:7d:16:41:03:00:a9:9d:e8:da:bd:
                    fb:c0:91:be:1c:b1:29:ed:c3:72:37:b1:f0:01:7d:
                    e3:35:f9:0a:7f:2e:b1:b9:be:d4:34:00:17:7f:2a:
                    39:de:58:10:3f:11:e4:40:f7:7c:9b:22:a4:85:dd:
                    a4:fc:3b:4e:81:2a:f6:27:3c:13:da:61:37:3c:13:
                    db:61:91:39:cf:2f:09:05:8c:e4:dc:71:5d:f4:d1:
                    5f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:4C:68:61:17:E4:4F:3C:B2:D6:4B:53:90:E7:BF:D7:E6:FF:81:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/eb4cbefa-b866-3696-8e46-cca0e7b94c55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.101.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:28:1e:92:38:95:f7:90:e2:ae:da:73:11:bb:77:e9:31:f8:
         85:1b:0f:03:8d:bb:61:3c:8a:8c:7e:9c:4a:38:dc:36:fd:bb:
         bf:dd:62:f8:1b:ba:a3:5d:fe:3b:65:9b:80:ac:7a:85:cf:82:
         e5:53:80:67:00:0e:d4:64:22:da:0f:32:21:86:85:77:8d:27:
         4f:10:d7:80:fc:37:2b:05:37:f0:e2:a2:52:cc:ec:a6:be:af:
         a9:3f:7d:f9:35:9e:39:48:bb:ea:08:38:09:02:12:d7:15:e9:
         29:c1:6a:a5:a3:9e:6e:ae:0e:b6:dc:d2:4f:46:cf:e5:4b:b8:
         8a:51:4e:55:ae:66:d0:49:ce:20:98:3d:21:82:ea:26:fa:29:
         5b:e6:aa:32:7b:b3:43:09:c6:83:2d:d6:48:06:bc:b5:06:59:
         cd:2a:b6:25:47:e2:f4:ec:91:9c:19:15:93:86:37:9f:74:7c:
         86:99:5f:39:5a:89:ea:90:7e:15:e9:92:57:1d:4c:c1:f7:5b:
         dd:da:c2:1b:12:5f:9b:cd:5a:32:cc:e3:7e:b6:1d:26:29:a6:
         51:7c:a2:91:1c:8d:2f:b0:81:c7:f7:0e:66:e7:c6:da:e5:57:
         49:38:4e:4d:c8:fe:41:7c:5c:d5:cc:8b:b7:7c:51:e3:74:57:
         9e:4e:be:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:16:55 2026 by rpki-client