Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/e9672cd5-6bae-3f8e-8427-88ed3d0a3bd2.roa
File:                     e9672cd5-6bae-3f8e-8427-88ed3d0a3bd2.roa (raw, json)
Hash identifier:          RKH0otPxdDIB4v9a1LCpmSWmECQ0N1ijCK5tU8x7eI4=
Subject key identifier:   3B:CA:58:F9:56:05:CD:5E:9D:62:B2:6D:6C:99:0A:EB:D1:C3:84:07
Certificate issuer:       /CN=58da445d-8c6c-4299-9e2c-45c75e8a6425
Certificate serial:       010D0C9F4328584D33D2E117632163085A899300
Authority key identifier: 9F:07:EB:7C:BE:E3:94:25:F3:04:B9:BB:42:B0:79:31:3E:63:D4:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/e9672cd5-6bae-3f8e-8427-88ed3d0a3bd2.roa
Signing time:             Tue 17 Mar 2026 21:32:42 +0000
ROA not before:           Tue 17 Mar 2026 21:32:42 +0000
ROA not after:            Mon 15 Jun 2026 21:32:42 +0000
asID:                     14312
IP address blocks:        204.16.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/58da445d-8c6c-4299-9e2c-45c75e8a6425.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/58da445d-8c6c-4299-9e2c-45c75e8a6425.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:33:d2:e1:17:63:21:63:08:5a:89:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58da445d-8c6c-4299-9e2c-45c75e8a6425
        Validity
            Not Before: Mar 17 21:32:42 2026 GMT
            Not After : Jun 15 21:32:42 2026 GMT
        Subject: CN=ebfbd4b3-89a7-4956-8888-46566ee8516b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:87:68:53:7d:3e:8d:58:ff:46:34:54:1b:95:
                    e1:1b:85:3e:2c:4c:89:25:e4:ba:53:72:2f:5d:f0:
                    39:02:25:4e:be:15:a7:74:87:c3:7d:36:c5:ba:56:
                    53:5d:11:56:2d:bc:5b:9c:d5:fe:2e:dc:7f:df:75:
                    9a:09:c5:92:09:d7:9a:0e:ec:9f:57:1f:13:80:85:
                    ff:bc:ec:68:12:34:f0:15:59:f5:9c:d1:a2:37:f3:
                    09:7b:b8:65:10:32:8d:1e:67:b8:9f:6a:42:e4:14:
                    b8:21:85:2a:d9:5b:f2:40:4a:2b:bf:b0:29:41:ce:
                    db:27:0c:32:a5:1a:b1:ee:a4:36:7f:25:b5:9d:45:
                    82:1c:93:e3:8a:ea:50:ee:b7:2b:b3:27:08:b1:9e:
                    04:f4:ee:66:41:71:72:2e:ff:f1:60:73:91:95:87:
                    6e:bb:12:47:8b:ec:f9:87:2d:6e:c4:c2:75:0d:11:
                    69:b9:be:ae:ae:59:78:3b:90:6c:1b:3f:79:00:a1:
                    62:d0:33:d2:ca:c2:d8:d9:fa:ea:6c:f2:55:9a:eb:
                    cc:df:12:7f:cd:d2:02:a8:fe:af:80:6f:28:6b:a2:
                    21:d2:a3:c7:0d:fc:05:9f:6f:ed:f1:19:90:13:1d:
                    c0:f4:07:ee:65:72:bf:07:92:c6:b1:7b:dc:75:8f:
                    ad:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:CA:58:F9:56:05:CD:5E:9D:62:B2:6D:6C:99:0A:EB:D1:C3:84:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/e9672cd5-6bae-3f8e-8427-88ed3d0a3bd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425/58da445d-8c6c-4299-9e2c-45c75e8a6425.crl

            X509v3 Authority Key Identifier:
                keyid:9F:07:EB:7C:BE:E3:94:25:F3:04:B9:BB:42:B0:79:31:3E:63:D4:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/58da445d-8c6c-4299-9e2c-45c75e8a6425.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.16.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:9d:b6:ae:d3:b3:ee:75:52:e9:ca:d0:94:e5:aa:b4:eb:d7:
         2f:8e:a9:1f:81:fc:91:ad:91:ab:b6:16:ce:d0:55:52:85:72:
         03:5f:af:9f:30:5b:a7:35:82:ad:7a:e0:bf:af:91:9b:f4:3e:
         48:7d:26:68:9a:c6:7b:ed:b3:c3:2f:34:45:d8:fc:ee:8c:4c:
         64:eb:82:01:05:5b:a7:9a:89:e6:26:0d:65:dd:8f:a3:2b:9f:
         31:41:74:3d:3f:d8:28:6b:fd:f7:42:c0:fd:4e:2d:ba:ac:53:
         55:be:8a:57:cc:c7:d6:76:37:0c:74:49:27:97:ca:c6:82:cb:
         17:b2:47:9a:2f:b0:22:94:6a:35:ef:97:0c:0d:d8:df:d1:40:
         4d:2e:07:2e:77:b3:e2:2d:e6:cc:c4:08:7f:25:e9:7d:4b:13:
         8f:ed:33:17:57:ab:04:98:86:c6:7a:1c:b4:4c:bf:af:e3:af:
         1e:83:f8:2e:10:d2:9c:71:1f:02:7d:66:41:4c:83:df:bc:3a:
         f2:c3:93:72:40:7b:a2:fc:8d:4a:a3:30:af:e3:01:3c:2d:f7:
         72:f1:22:8e:4e:f8:4d:13:94:24:f1:bb:5e:3f:b6:d6:fe:5e:
         38:d0:c0:ac:56:12:52:1a:3b:f1:a1:2e:60:b2:70:45:8f:20:
         2d:f7:55:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:11:09 2026 by rpki-client