Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/50839927-59e2-3289-ac48-074418a325c8.roa
File:                     50839927-59e2-3289-ac48-074418a325c8.roa (raw, json)
Hash identifier:          /Qc5wj5AMzz63jI5ZeFts/DilzaCqB0+uTQeZkdscwk=
Subject key identifier:   33:C4:AE:5B:39:A3:42:30:1B:8B:8B:D9:8C:40:4B:EC:85:79:9D:8C
Certificate issuer:       /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Certificate serial:       010D0C9F4328584D44FA332F5247470923F25730
Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/50839927-59e2-3289-ac48-074418a325c8.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     14618
IP address blocks:        209.169.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:33:2f:52:47:47:09:23:f2:57:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=631eefae-0261-48e2-870a-e5f9a8f8384e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9d:78:5c:1b:3a:e7:5c:21:80:d3:39:07:b9:
                    a8:8f:76:77:6a:b0:8b:6f:65:59:e6:0e:1b:8e:9a:
                    1d:ee:06:62:30:86:32:70:39:f9:4b:22:fb:55:98:
                    bf:4a:c2:d6:ac:aa:ff:5d:45:cc:29:76:be:a3:2f:
                    d8:31:7b:ae:ec:25:72:9a:a8:cf:ac:5e:9c:b3:cf:
                    63:2a:a5:df:0a:a6:03:44:36:96:77:95:df:8e:8c:
                    3b:8f:15:80:35:3a:59:a8:27:d3:b4:fb:ae:3a:04:
                    df:15:85:6f:62:c9:e5:03:94:1f:e4:f0:a0:e1:e1:
                    72:03:2b:6e:dd:2d:57:6b:28:e7:88:07:a5:6b:72:
                    6e:73:0e:ac:69:58:d9:27:ea:f8:a1:9c:8c:df:20:
                    d8:76:a7:af:2f:bf:d3:e4:94:77:cb:ff:45:47:3a:
                    03:17:6e:f9:31:23:b4:ae:69:46:5f:da:34:70:25:
                    fa:39:7e:b8:28:4a:0f:77:7e:cc:ec:8d:25:6b:2b:
                    22:16:0e:91:fb:ca:9d:23:40:61:fb:30:17:4a:51:
                    22:53:6f:af:86:c3:e5:b7:d6:50:d3:50:35:68:b7:
                    79:44:98:f6:be:f2:ba:a2:8e:ae:00:71:63:3e:28:
                    d9:b9:1f:e2:f9:23:d5:ac:0f:3c:f0:1b:f4:78:e0:
                    84:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C4:AE:5B:39:A3:42:30:1B:8B:8B:D9:8C:40:4B:EC:85:79:9D:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/50839927-59e2-3289-ac48-074418a325c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl

            X509v3 Authority Key Identifier:
                keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.169.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:d1:bd:f0:d0:a4:93:3a:e9:c3:bf:a7:c9:2a:cc:eb:58:46:
         d4:86:d9:f1:94:a2:3a:a8:0f:93:dc:6c:24:29:3d:72:53:c6:
         f5:75:32:12:62:6a:11:cc:dd:c8:ad:51:ec:76:75:b7:b2:b9:
         be:92:91:40:9f:b0:e9:d2:20:c1:35:c1:dc:7b:7e:98:24:ac:
         00:92:3e:da:05:4e:9c:50:5d:9e:29:37:ef:26:03:5b:2c:41:
         fa:2e:25:e9:e5:ec:e2:f0:3d:9a:09:eb:f3:f9:40:bd:e6:cd:
         3e:ca:e5:68:0e:a3:a4:dd:91:23:b4:67:18:da:3e:87:b6:73:
         01:72:11:0f:d3:a1:cc:88:82:86:81:60:67:19:b0:98:3f:cb:
         7e:a6:07:1e:57:76:75:ee:99:99:f5:f5:84:b5:63:c2:84:7c:
         cc:80:36:e2:f5:cf:ca:f9:7f:8d:2b:08:09:be:bc:39:e5:f4:
         33:9e:4b:87:52:60:13:48:5c:26:34:e9:72:e2:3a:19:15:7e:
         66:ee:f1:45:7f:6b:99:89:52:a3:8f:9b:26:e6:80:c4:0d:de:
         65:76:18:4a:16:9c:3e:1c:da:43:07:6d:54:05:9b:17:fa:d4:
         56:40:86:67:05:9f:47:b2:45:17:f8:8c:b2:03:c0:c6:63:14:
         05:cb:97:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:55:57 2026 by rpki-client