Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/f441c09f-0eea-375c-b13f-bceb660b2cd7.roa
File:                     f441c09f-0eea-375c-b13f-bceb660b2cd7.roa (raw, json)
Hash identifier:          +tU3f08fiGGNpdYYWFK8LSsdqmmh5PUKdiMo1MwTsN8=
Subject key identifier:   C6:F7:30:64:02:8F:3C:73:8E:45:5D:67:5A:F3:8C:81:55:DE:32:A2
Certificate issuer:       /CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
Certificate serial:       010D0C9F4328584D2D3F9D8DD39F80288876FD10
Authority key identifier: 97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/f441c09f-0eea-375c-b13f-bceb660b2cd7.roa
Signing time:             Sun 15 Mar 2026 13:00:41 +0000
ROA not before:           Sun 15 Mar 2026 13:00:41 +0000
ROA not after:            Sat 13 Jun 2026 13:00:41 +0000
asID:                     18934
IP address blocks:        162.208.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2d:3f:9d:8d:d3:9f:80:28:88:76:fd:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
        Validity
            Not Before: Mar 15 13:00:41 2026 GMT
            Not After : Jun 13 13:00:41 2026 GMT
        Subject: CN=ce8f66ad-c39c-41d3-8820-09ec4cfa4dfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:41:60:50:6d:a4:66:17:aa:bd:84:2e:29:a4:
                    69:c6:cb:9c:92:eb:2c:9f:4c:17:2a:99:6b:38:97:
                    a7:84:0c:47:61:a8:a5:82:a6:2d:f1:57:8d:a9:86:
                    bd:7d:93:57:ce:7d:00:b4:18:79:63:17:ad:fc:2c:
                    60:d5:35:6c:07:a8:22:3c:e5:26:79:fd:3b:df:6c:
                    ba:0a:f7:7b:fd:d9:c3:ac:1a:45:86:25:d8:03:56:
                    7e:1e:91:71:74:92:ec:26:55:13:cf:0f:49:b4:6d:
                    25:5b:1a:c0:f5:c1:6c:75:6d:00:68:fb:0c:fc:65:
                    d7:96:0c:54:5f:fb:b9:ff:54:40:c2:45:ba:9a:16:
                    bd:67:3a:05:20:e6:37:7e:e4:95:ad:3b:80:ef:40:
                    60:84:88:ce:2d:d0:7d:b0:cc:2c:42:fb:a0:3c:35:
                    0d:f1:56:f5:6d:a3:de:8e:91:18:ce:12:32:e8:9f:
                    6f:f2:4d:90:a1:85:64:46:ca:60:ac:a5:e7:93:84:
                    70:97:62:8b:9c:f9:c0:af:f7:a2:28:0f:8c:a5:bf:
                    e5:9c:1a:d4:54:13:9d:04:f9:96:c4:fb:f9:e0:9b:
                    5b:d3:f8:2b:49:a5:69:bf:56:f7:3e:57:a7:c7:6a:
                    1e:41:8b:a0:bd:02:1b:b2:8d:cf:db:80:bd:dd:eb:
                    ce:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F7:30:64:02:8F:3C:73:8E:45:5D:67:5A:F3:8C:81:55:DE:32:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/f441c09f-0eea-375c-b13f-bceb660b2cd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl

            X509v3 Authority Key Identifier:
                keyid:97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.208.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:7c:6e:66:1b:e5:5d:47:a4:22:24:70:1e:b0:83:48:f2:a0:
         7d:92:83:cb:e5:58:6b:27:11:62:2a:bb:8f:55:60:99:53:71:
         cc:7d:b9:9a:d3:80:d9:cf:ec:91:d2:ed:92:17:36:49:c2:fd:
         e8:77:fa:7a:53:5b:6c:a0:a5:b9:7a:e9:cf:eb:be:96:81:7f:
         08:a8:43:53:c4:36:8a:47:26:ea:dd:5f:69:61:06:bb:6f:a1:
         7b:fe:ef:db:82:a3:95:4a:cb:a7:b0:ef:c1:f8:6d:9a:aa:7d:
         ba:84:ab:2b:e9:52:7e:91:ca:83:6c:11:9e:cb:55:a3:9f:9f:
         9b:c3:c9:ac:43:20:5f:5c:59:77:9c:41:cc:07:d0:52:a5:3a:
         f9:05:aa:25:38:2b:fa:52:1a:43:6d:d1:d2:83:4f:de:82:1b:
         54:f3:17:bc:54:e0:c4:fb:df:8c:e2:cb:7e:12:be:7a:c6:e7:
         e2:6f:bd:84:85:2e:a8:0a:23:d3:e4:99:b1:90:a1:12:99:66:
         3d:8e:d0:bc:47:62:30:d3:2b:52:a1:65:a1:7e:b5:1b:11:c1:
         8c:88:d1:71:9c:60:40:7d:fd:2a:9f:7a:73:23:c7:c2:71:d8:
         ba:87:d9:d9:d8:df:8c:a5:a4:d7:59:bd:ac:b3:3b:96:45:57:
         c7:a6:21:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:55:46 2026 by rpki-client