Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/63284bd2-12fb-4094-b79d-d52c0f6a5a9d/3b48b098-dd59-3a7d-bba7-bff42f496d3e.roa
File:                     3b48b098-dd59-3a7d-bba7-bff42f496d3e.roa (raw, json)
Hash identifier:          MEMfBCg9OZfLRePQ5gCVWXBgDebpa6tzTl3w8oyWQLU=
Subject key identifier:   F4:F3:BE:DA:C1:24:95:93:12:B0:F2:F3:4C:3F:A4:F5:30:F6:CB:3D
Certificate issuer:       /CN=63284bd2-12fb-4094-b79d-d52c0f6a5a9d
Certificate serial:       010D0C9F4328584D4499202366FA5530FC602B80
Authority key identifier: CA:BF:30:60:DC:47:25:2D:5F:DF:15:19:D0:7B:25:39:C5:36:4A:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/63284bd2-12fb-4094-b79d-d52c0f6a5a9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/63284bd2-12fb-4094-b79d-d52c0f6a5a9d/3b48b098-dd59-3a7d-bba7-bff42f496d3e.roa
Signing time:             Mon 23 Mar 2026 21:45:04 +0000
ROA not before:           Mon 23 Mar 2026 21:45:04 +0000
ROA not after:            Sun 21 Jun 2026 21:45:04 +0000
asID:                     401470
IP address blocks:        198.202.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/63284bd2-12fb-4094-b79d-d52c0f6a5a9d/63284bd2-12fb-4094-b79d-d52c0f6a5a9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/63284bd2-12fb-4094-b79d-d52c0f6a5a9d/63284bd2-12fb-4094-b79d-d52c0f6a5a9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/63284bd2-12fb-4094-b79d-d52c0f6a5a9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:99:20:23:66:fa:55:30:fc:60:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63284bd2-12fb-4094-b79d-d52c0f6a5a9d
        Validity
            Not Before: Mar 23 21:45:04 2026 GMT
            Not After : Jun 21 21:45:04 2026 GMT
        Subject: CN=88275701-7694-4e0e-ab75-232137081994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6c:7e:66:a3:4d:cf:af:a4:bd:21:ee:38:27:
                    cd:78:6a:bd:63:9f:a0:fd:00:0a:3f:29:84:f8:7b:
                    2d:7b:5d:99:ac:94:1e:a5:12:02:c6:6e:98:8f:4c:
                    be:b0:17:79:22:b4:13:17:47:70:c6:f9:54:de:0d:
                    d3:dd:be:35:db:ba:f4:f2:77:a4:30:e1:e2:f1:a2:
                    c6:66:66:6c:d9:96:cc:0a:b6:d5:e9:70:20:c1:db:
                    10:63:be:d6:8e:51:c9:d2:8d:2d:8e:c7:f8:12:d7:
                    70:56:8e:14:00:fa:a0:d0:2b:e0:a5:fe:d4:57:eb:
                    e7:fc:c3:04:1b:ab:96:08:85:24:06:30:9c:b3:80:
                    ca:c5:d8:04:f1:3c:ff:4f:c1:12:6b:80:46:25:0d:
                    cc:d0:08:cf:85:5f:ec:5f:5b:14:c8:ef:18:62:28:
                    11:63:d8:f8:86:56:33:3d:16:33:cb:69:e2:28:f3:
                    25:34:e9:ec:9f:86:0e:ca:1d:6c:02:c1:35:12:cf:
                    4e:79:07:b4:b2:99:b7:4b:35:91:da:71:b5:ff:fe:
                    5a:5b:b6:4d:f2:b4:80:8c:09:ae:86:51:58:21:c1:
                    e2:80:ca:b4:9d:f6:fe:7e:9b:b9:10:6e:33:4b:78:
                    f8:39:41:7b:16:43:2d:20:6c:ad:44:0a:f1:c1:80:
                    dc:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F3:BE:DA:C1:24:95:93:12:B0:F2:F3:4C:3F:A4:F5:30:F6:CB:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/63284bd2-12fb-4094-b79d-d52c0f6a5a9d/3b48b098-dd59-3a7d-bba7-bff42f496d3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/63284bd2-12fb-4094-b79d-d52c0f6a5a9d/63284bd2-12fb-4094-b79d-d52c0f6a5a9d.crl

            X509v3 Authority Key Identifier:
                keyid:CA:BF:30:60:DC:47:25:2D:5F:DF:15:19:D0:7B:25:39:C5:36:4A:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/63284bd2-12fb-4094-b79d-d52c0f6a5a9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.202.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:f0:3d:0f:4f:e2:b1:f4:b6:7c:e6:a9:ad:28:a8:b4:da:ce:
         6c:f1:e8:b7:8a:82:36:1a:54:82:43:b7:bf:ec:4c:50:9e:58:
         06:b6:64:18:12:1f:0d:a3:3b:35:14:36:0c:b4:0a:92:e5:34:
         62:85:94:2f:49:96:56:3a:c1:91:af:4c:8a:ca:b6:ce:9b:c8:
         29:f5:23:d5:34:5f:a6:72:80:02:a3:44:45:bc:16:55:f1:88:
         3f:27:8f:eb:79:73:d4:da:16:8a:a0:74:da:1c:9e:dd:e5:4e:
         b3:0a:db:b4:4d:56:14:db:4d:9c:f7:51:7f:da:56:fa:bd:92:
         33:62:17:60:04:dd:c5:39:84:c8:dc:15:0d:33:bc:93:ff:53:
         99:1d:b0:5d:02:06:cd:3e:a3:ec:ef:9e:dd:0e:c4:99:e4:a8:
         d6:a9:54:fd:ea:da:c3:32:d7:6d:b5:dc:e0:45:7d:8e:69:6b:
         a5:f1:ef:8e:a2:e7:08:c0:bd:51:15:be:b8:02:10:02:54:c0:
         d8:ae:bb:1e:44:b6:5a:64:a8:0f:f1:5e:1f:9c:1d:3e:f5:ff:
         26:cd:a7:0c:05:ca:4f:68:9a:98:9d:d4:59:1d:bf:2e:0a:3c:
         59:72:79:50:99:69:68:e0:80:f6:0f:f0:d8:ca:fc:81:f2:e4:
         70:b1:c5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:16:07 2026 by rpki-client