Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/cc3f750d-0905-3e47-862f-b41ca36a1c13.roa
File:                     cc3f750d-0905-3e47-862f-b41ca36a1c13.roa (raw, json)
Hash identifier:          WULtrIC7nia3I4M8MZZmA548oJ91dKIdZwOH1JmYmd0=
Subject key identifier:   79:E3:7F:2A:77:5F:CB:80:78:6B:E2:DE:F0:B7:BD:D3:F0:0D:10:02
Certificate issuer:       /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6
Certificate serial:       010D0C9F4328584D492A689732EDE1598550E180
Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/cc3f750d-0905-3e47-862f-b41ca36a1c13.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        155.63.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:68:97:32:ed:e1:59:85:50:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=07229754-38b1-4dc6-bf6b-ac5a0dc897b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e2:1c:1d:05:9c:da:25:45:32:50:dc:74:2f:
                    92:56:a4:1b:cd:4d:aa:bd:c4:4a:33:8b:44:4e:46:
                    80:b7:22:5f:66:3d:54:52:c1:24:03:25:f1:39:03:
                    97:20:35:06:3f:e8:d5:10:b5:fc:e0:b1:30:b0:39:
                    5a:35:5f:bd:df:01:3e:3d:b9:71:7c:2c:fb:ad:4f:
                    79:72:38:15:b6:8d:f6:bc:eb:77:3f:f7:9f:91:a7:
                    f2:70:ac:35:4d:85:de:03:69:33:6b:1a:ed:70:c1:
                    fd:e6:5d:30:c2:1b:a2:61:d0:a7:96:bb:27:ad:d5:
                    28:29:e2:a3:7d:38:a6:3a:99:a9:6f:d3:e4:d0:03:
                    17:22:99:86:c0:0e:c6:7d:b1:6b:dc:61:56:66:d9:
                    b1:9f:97:55:55:0a:ed:76:8a:cb:6d:00:c2:af:93:
                    c4:ca:8d:8b:f6:a6:c8:ba:5d:03:f2:ef:e8:67:5e:
                    d5:75:ab:86:c5:bc:cc:ce:30:29:5d:0e:f3:96:33:
                    62:cb:1c:30:d9:37:50:38:c3:1f:f4:fe:02:1d:32:
                    61:9f:d2:7a:36:ff:7f:20:d1:99:8e:11:c2:c6:f2:
                    dd:e2:ed:78:7c:c8:dc:8f:2e:5d:4e:19:08:c3:7d:
                    9a:50:2b:26:be:98:31:46:5c:9d:b7:21:d2:5f:14:
                    15:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E3:7F:2A:77:5F:CB:80:78:6B:E2:DE:F0:B7:BD:D3:F0:0D:10:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/cc3f750d-0905-3e47-862f-b41ca36a1c13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl

            X509v3 Authority Key Identifier:
                keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.63.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:a6:02:30:14:5e:4d:a6:da:14:cd:13:87:2f:26:f7:92:8f:
         3a:0d:30:ec:0c:c5:a7:21:60:91:55:5f:4f:e8:41:dc:58:80:
         28:cf:92:34:dc:c8:df:a1:f7:f8:61:09:51:4c:e8:44:2b:35:
         b4:69:53:cb:86:29:8f:8a:98:05:e1:86:a3:08:a7:ca:3c:c5:
         9a:79:fe:2d:cd:3c:54:dd:87:63:37:d2:8a:9c:00:5c:c4:9d:
         63:72:02:63:1e:d0:8e:91:35:9d:98:c1:19:ac:88:6f:10:94:
         c0:0e:69:24:97:e9:57:3e:55:ae:10:c4:6e:bc:36:a3:c3:42:
         c4:08:38:9d:f0:af:02:9e:b7:0a:01:6e:cc:ed:1e:c4:03:eb:
         af:8d:28:9b:ea:87:69:ef:fc:e6:a6:9b:3d:d4:9f:38:3f:3b:
         da:04:ed:34:a9:5f:79:79:9e:d1:c2:48:91:e9:6f:6f:01:dd:
         f3:f4:a9:b4:77:99:1e:80:10:b9:db:77:3c:09:62:e2:9c:4e:
         94:4b:e2:28:ea:70:b1:2e:ad:cd:8c:d1:10:5f:b6:db:f2:7d:
         d1:88:27:23:f5:c4:0b:73:8f:fc:c1:f4:a2:88:d1:bc:18:df:
         70:ae:ec:c3:01:c8:41:c1:79:31:72:ce:80:1f:61:60:60:72:
         4d:da:bf:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:17 2026 by rpki-client