Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/40955f70-e0e8-32ca-b95b-cce7dae74ec0.roa
File:                     40955f70-e0e8-32ca-b95b-cce7dae74ec0.roa (raw, json)
Hash identifier:          VsuvmeSXN4vDuCpkvR7y1Fffb1U+fSbk0zmFTACfw0U=
Subject key identifier:   7B:BD:7D:93:33:61:12:33:3E:6A:F6:E2:71:D8:58:63:6A:2D:D1:D2
Certificate issuer:       /CN=58520fc1-e07b-4b1b-ad59-5756198c9756
Certificate serial:       010D0C9F4328584D19B4DAB579C75F0080A2A140
Authority key identifier: 8B:68:5A:47:96:D3:96:D1:F9:A1:5F:E7:38:95:E0:29:83:E6:D4:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/40955f70-e0e8-32ca-b95b-cce7dae74ec0.roa
Signing time:             Sun 08 Mar 2026 13:00:40 +0000
ROA not before:           Sun 08 Mar 2026 13:00:40 +0000
ROA not after:            Sat 06 Jun 2026 13:00:40 +0000
asID:                     8075
IP address blocks:        199.181.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/58520fc1-e07b-4b1b-ad59-5756198c9756.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/58520fc1-e07b-4b1b-ad59-5756198c9756.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:19:b4:da:b5:79:c7:5f:00:80:a2:a1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58520fc1-e07b-4b1b-ad59-5756198c9756
        Validity
            Not Before: Mar  8 13:00:40 2026 GMT
            Not After : Jun  6 13:00:40 2026 GMT
        Subject: CN=21b6378d-dbbd-448e-bbc9-45382205cd36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:50:16:f7:b7:ed:8a:b7:21:b1:2c:7d:6b:85:
                    51:cd:c6:94:f4:00:04:11:fe:3e:32:de:55:50:35:
                    93:7e:f3:48:58:68:d9:d7:33:c5:bd:3f:a5:85:85:
                    95:56:a2:01:37:fe:66:1e:85:12:8d:33:4e:8e:45:
                    82:c1:d0:1b:7c:5f:6d:dd:5a:77:ca:d1:d2:a6:f6:
                    0c:3f:fc:56:fc:c2:90:b3:c0:e7:7a:db:4c:4b:eb:
                    b0:56:5b:3e:61:da:7f:49:74:d2:76:b1:08:79:22:
                    70:d3:74:d1:c0:e8:ca:eb:ab:91:0c:d8:fc:66:f3:
                    dc:4e:a2:f1:10:01:03:9c:7e:e8:91:fd:35:05:b6:
                    12:96:28:3b:dc:5d:e3:96:d7:21:bd:2c:2d:84:94:
                    bf:ea:ed:2e:8e:07:93:56:d3:85:1a:46:00:5b:6c:
                    1b:66:99:9e:33:fa:df:72:85:f4:24:00:ff:ac:bb:
                    fa:c5:8b:b0:54:0f:6b:c2:1f:84:1f:17:7d:14:c3:
                    0d:c0:2a:d3:42:8e:07:5a:16:9f:6c:c6:93:aa:98:
                    18:10:17:d4:73:62:5a:eb:a6:ab:78:70:a5:74:ec:
                    9d:70:47:48:74:ec:ba:d3:c7:0a:c0:cc:11:04:f4:
                    2c:f4:46:29:7a:86:40:78:cc:8a:dd:bb:71:93:6f:
                    77:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:BD:7D:93:33:61:12:33:3E:6A:F6:E2:71:D8:58:63:6A:2D:D1:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/40955f70-e0e8-32ca-b95b-cce7dae74ec0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756/58520fc1-e07b-4b1b-ad59-5756198c9756.crl

            X509v3 Authority Key Identifier:
                keyid:8B:68:5A:47:96:D3:96:D1:F9:A1:5F:E7:38:95:E0:29:83:E6:D4:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58520fc1-e07b-4b1b-ad59-5756198c9756.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.181.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:51:c5:93:80:5b:1e:b9:bf:ac:d9:89:45:0c:48:6f:35:8c:
         20:db:da:5e:43:9a:d8:81:04:b0:fb:7f:e2:84:00:26:37:c4:
         f6:44:72:c2:79:0b:bc:1b:ac:82:a6:2b:e3:fd:71:1f:4f:37:
         3a:2d:18:69:44:d2:3e:a0:b5:02:b6:a1:a6:f2:6b:a3:96:cc:
         16:98:e2:43:34:fe:25:1c:46:7b:62:8b:c3:1a:9b:9d:06:d6:
         bb:f9:29:0d:12:c5:4b:5d:97:e7:bb:42:e3:b4:4f:52:d5:7e:
         70:51:29:45:70:b0:62:0a:a8:99:c3:3b:dc:7e:7a:ae:04:32:
         21:fa:46:49:b3:4c:73:ab:8e:59:d0:03:bc:db:e1:63:b4:f4:
         db:56:b6:b2:51:e7:11:37:9d:68:9c:8a:34:3d:9d:e3:ef:0e:
         81:71:5e:17:1d:8b:04:61:58:94:7f:5f:ca:72:05:52:4d:f1:
         9b:c8:58:59:ce:e7:cf:9e:84:b0:ef:3d:20:b2:78:16:60:fe:
         ac:ac:0f:f5:17:49:56:0c:28:7b:8a:25:ca:2d:58:79:94:89:
         08:87:bb:47:51:5f:e0:6f:67:fa:fd:ea:fd:6e:ee:ca:6b:fa:
         0d:e1:b7:18:2d:00:52:4f:99:a0:34:b3:36:b5:e8:56:11:8a:
         be:68:c4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:39 2026 by rpki-client