Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/b95b81d1-8202-323e-b222-9be2fa53333c.roa
File:                     b95b81d1-8202-323e-b222-9be2fa53333c.roa (raw, json)
Hash identifier:          aiQ9SIFbUKJI98KCptqivlV8XrIN84MKnfSPsiOfO90=
Subject key identifier:   D8:6A:2E:A9:82:07:09:1B:FC:D2:E6:F2:2B:92:23:0D:C0:14:59:4D
Certificate issuer:       /CN=21adcbb8-b500-460f-90cb-bca0525aabcb
Certificate serial:       010D0C9F4328584D44FA32B78CD64E4394B43B00
Authority key identifier: 62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/b95b81d1-8202-323e-b222-9be2fa53333c.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     14618
IP address blocks:        170.176.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:32:b7:8c:d6:4e:43:94:b4:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21adcbb8-b500-460f-90cb-bca0525aabcb
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=3b4b1ddd-005f-4b16-8514-b6e919049c9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f9:a4:c8:e7:c5:ba:4b:53:24:57:d3:ca:d6:
                    4a:10:f7:e5:59:38:27:b3:77:ce:fd:9f:1b:20:47:
                    20:d8:53:a9:38:f2:18:c9:13:5b:94:ab:79:dd:f3:
                    3a:43:16:6a:0f:bd:a4:3b:c6:ce:fe:84:5b:ff:25:
                    8a:5d:b5:8d:f1:83:1b:9b:e6:3c:cc:f5:2e:33:4f:
                    1c:05:30:7c:97:92:f5:db:56:31:25:2d:8e:b8:38:
                    84:ca:42:ef:b3:34:35:b4:f4:ab:2d:be:61:31:80:
                    7e:e6:d8:78:ed:d5:ea:6b:9f:26:d1:fb:5a:2b:45:
                    c7:bd:14:51:a3:47:42:11:f9:e6:36:9c:7f:bf:06:
                    ce:3b:f1:5a:af:c9:b3:43:db:63:d7:36:80:a7:93:
                    de:15:2c:91:bd:1c:0e:d3:f4:81:04:fb:83:e3:61:
                    34:7f:a9:f8:a9:55:00:d1:16:af:fd:7d:b9:1f:d7:
                    b0:4f:44:83:71:f0:11:30:a8:27:c7:b4:af:96:22:
                    5a:a8:c7:4e:58:ec:ba:e7:68:14:80:95:91:74:9b:
                    b6:5c:ed:18:d8:35:31:87:47:5c:2f:5d:b1:ac:b4:
                    ec:dc:05:c8:b7:d3:84:17:56:b8:67:6c:81:f6:6c:
                    77:e1:98:e5:df:d1:ee:8f:ca:ab:db:a7:0d:d8:62:
                    2c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:6A:2E:A9:82:07:09:1B:FC:D2:E6:F2:2B:92:23:0D:C0:14:59:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/b95b81d1-8202-323e-b222-9be2fa53333c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.crl

            X509v3 Authority Key Identifier:
                keyid:62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.176.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:74:b4:26:36:58:e6:a2:83:f4:79:d7:d0:2b:2a:21:a0:c5:
         b1:99:91:6b:92:c3:b5:dc:5c:48:44:90:ac:72:6e:63:41:b1:
         86:01:a3:17:20:4e:1d:61:7e:99:fd:90:46:2c:f3:91:c0:54:
         09:b8:de:e6:6d:09:5d:31:b9:99:4f:87:32:14:e2:67:85:e6:
         28:b7:7e:b3:96:73:aa:e6:30:a0:99:bf:30:68:80:b1:17:90:
         a3:08:e6:75:7a:10:f2:67:75:8b:a0:46:35:65:95:44:8f:a9:
         bc:17:68:7b:d7:ac:85:1a:b1:00:ca:07:dc:4f:ed:5c:b8:a2:
         52:cc:53:a9:24:cc:73:f2:74:32:55:73:ce:9a:71:28:07:09:
         6b:8e:72:85:4f:64:59:47:1c:7e:cd:b9:39:be:c1:21:e5:d7:
         f1:5b:fc:0b:9e:bf:9f:9d:4e:b0:d6:d9:f7:f2:67:ab:b4:73:
         ee:40:a8:a9:04:55:59:04:9f:28:9f:bf:ae:bd:d4:53:69:38:
         c1:1b:a7:40:bc:b3:77:03:90:cb:23:85:89:04:d0:d5:69:b9:
         60:2f:47:e0:41:ea:97:70:5e:eb:bf:e8:45:71:21:22:33:22:
         f0:76:2a:6c:18:b7:60:0e:9b:c9:1d:70:36:da:30:ad:69:1b:
         80:11:00:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:05:07 2026 by rpki-client