Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/7c8a4b99-283b-3234-b816-b4b5409f8a4d.roa
File:                     7c8a4b99-283b-3234-b816-b4b5409f8a4d.roa (raw, json)
Hash identifier:          tFme67QOHIFG4FXpU3KvuyBT76zHqavjK4cPLedrEbU=
Subject key identifier:   14:EA:29:38:CB:8A:E4:37:BA:41:0B:47:4B:8D:DB:22:23:AB:DC:29
Certificate issuer:       /CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
Certificate serial:       010D0C9F4328584D2D3F742734D23609A725D0A0
Authority key identifier: 97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/7c8a4b99-283b-3234-b816-b4b5409f8a4d.roa
Signing time:             Sun 15 Mar 2026 13:00:41 +0000
ROA not before:           Sun 15 Mar 2026 13:00:41 +0000
ROA not after:            Sat 13 Jun 2026 13:00:41 +0000
asID:                     18934
IP address blocks:        162.208.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2d:3f:74:27:34:d2:36:09:a7:25:d0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
        Validity
            Not Before: Mar 15 13:00:41 2026 GMT
            Not After : Jun 13 13:00:41 2026 GMT
        Subject: CN=f1335873-ca29-4ebe-b2ae-6b33b4134a25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c6:8d:2b:cf:6f:59:08:10:91:2a:14:eb:19:
                    68:dc:a3:d1:ba:f6:ed:4e:3e:de:93:20:0c:7d:c5:
                    79:99:98:41:be:9b:f9:5d:08:0d:89:8f:ea:62:61:
                    fb:8e:c7:5f:a0:5c:bb:72:be:5d:d5:38:b5:ab:ce:
                    0f:b1:8f:92:c1:e9:50:23:ad:97:fd:66:6e:6a:12:
                    f9:b1:bc:5d:9a:77:11:47:de:e6:6c:0c:a5:55:2e:
                    cf:35:85:8f:81:d3:3e:66:82:fe:ca:65:92:67:50:
                    6a:18:27:95:7b:c5:b1:37:e7:47:40:a7:6a:e8:52:
                    bc:b4:e0:e7:c8:c4:d6:70:03:19:52:31:f9:26:a2:
                    69:80:a4:cc:c2:f6:ec:f1:d5:60:25:36:7e:e9:3e:
                    f3:07:ab:e1:6d:1e:00:59:30:05:2f:3c:4c:bf:f2:
                    d0:c7:eb:b1:91:0d:5d:3e:a1:92:05:e7:d2:91:7a:
                    78:01:c9:3a:e9:94:54:67:de:07:23:56:5d:e0:85:
                    11:ad:17:e2:49:0e:39:7e:c1:e1:7e:44:67:07:f2:
                    71:1b:82:87:6d:8d:f8:c1:b4:ce:99:57:9a:65:0f:
                    0d:3d:c2:7c:59:db:9e:0e:52:aa:c4:be:65:af:52:
                    7a:af:c1:11:f3:e1:3f:ee:b5:25:12:05:46:e4:51:
                    12:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:EA:29:38:CB:8A:E4:37:BA:41:0B:47:4B:8D:DB:22:23:AB:DC:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/7c8a4b99-283b-3234-b816-b4b5409f8a4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl

            X509v3 Authority Key Identifier:
                keyid:97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.208.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:78:d1:81:79:86:6d:96:e4:32:0a:4b:46:04:a1:ab:d5:7f:
         9a:0c:e5:dd:af:bf:d8:59:c2:2b:60:d0:2e:86:0b:b9:37:ed:
         42:de:08:c1:43:ac:6c:d6:a0:04:07:45:df:cc:f2:7c:16:63:
         27:6d:78:dd:28:c6:44:53:15:21:4d:9f:ac:39:d3:bb:a6:29:
         db:6d:4d:cd:0c:80:57:83:e6:97:a4:3c:18:3b:af:c7:39:43:
         25:33:81:c4:a3:ce:b0:53:50:30:ee:0a:d1:0b:f0:e9:19:df:
         df:65:54:89:7c:52:fa:5d:74:d4:d7:33:cc:8b:94:89:70:7f:
         9a:1b:d5:9a:ff:39:1e:28:ae:3d:77:1a:73:35:48:5b:48:53:
         85:b4:ff:b4:b3:d6:7a:09:47:dc:a5:02:19:00:b1:5f:45:0a:
         83:81:b3:15:cc:c1:d7:0e:40:c9:5e:18:d7:1f:b3:fb:69:e7:
         bc:64:65:68:ac:a4:c6:e5:e0:8b:71:77:c9:aa:63:af:5b:28:
         5d:e2:8e:5e:d0:08:53:d3:1a:89:04:07:2d:13:d9:d4:95:62:
         d3:56:1b:c5:2b:82:c7:b0:00:ff:19:69:73:75:94:65:00:d6:
         9f:83:32:ed:bf:ea:75:18:a9:76:83:36:69:06:60:3d:51:4f:
         3b:39:58:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:23 2026 by rpki-client