Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/543825cf-ce20-3eed-975f-4c895b7598e1.roa
File:                     543825cf-ce20-3eed-975f-4c895b7598e1.roa (raw, json)
Hash identifier:          GvgKnUU+DJApyJ7yc7L1KOVVPNqU4AiWljs4Mx8TYfI=
Subject key identifier:   7C:19:D0:91:86:3F:75:CC:52:77:C4:78:7C:12:D9:53:ED:C0:FA:0A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D09124F523E56D0A4DCB91E00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/543825cf-ce20-3eed-975f-4c895b7598e1.roa
Signing time:             Mon 02 Mar 2026 14:00:41 +0000
ROA not before:           Mon 02 Mar 2026 14:00:41 +0000
ROA not after:            Sun 31 May 2026 13:00:41 +0000
asID:                     200005
IP address blocks:        96.7.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:09:12:4f:52:3e:56:d0:a4:dc:b9:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  2 14:00:41 2026 GMT
            Not After : May 31 13:00:41 2026 GMT
        Subject: CN=ba27216f-2bef-47e9-9b78-ca7e925bd648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:57:0a:ce:e0:f3:c0:a4:3c:41:1b:7f:a4:23:
                    44:41:0f:1c:09:a4:46:2c:80:13:d9:3f:fe:65:64:
                    65:90:f1:7f:ba:38:58:b3:08:ca:05:ec:14:ec:54:
                    e9:21:3f:c5:7f:66:cf:6e:9a:19:d8:dd:89:e3:9f:
                    50:15:ed:79:cf:ec:a7:62:8a:dd:0d:08:ad:4e:e5:
                    a4:cd:f0:bd:f2:d5:63:f3:2f:7f:cf:b8:e3:07:e8:
                    9f:f8:c8:e9:53:4e:b0:fc:d1:e6:59:33:1c:37:1f:
                    2c:b4:b4:54:ae:3c:60:88:39:a7:ed:e1:be:92:f2:
                    d4:34:5e:1d:ee:ae:9f:92:e3:42:a6:46:a4:aa:46:
                    c6:d4:2a:4c:8a:b1:91:1c:af:ba:5f:c4:f8:98:08:
                    38:86:01:79:64:1a:a6:22:52:df:01:08:5a:cc:1a:
                    5e:bb:58:19:e1:39:43:7f:a4:c2:c5:e8:4a:01:48:
                    be:80:8f:4f:db:09:12:23:74:e3:b1:a4:05:e8:cb:
                    82:a8:c5:86:d9:5e:df:18:b7:d0:26:4d:33:b2:e9:
                    e0:0f:1d:0c:cd:24:43:67:b8:05:d3:dd:0e:50:8b:
                    c8:65:21:c4:c3:2c:e6:80:0b:7f:4f:ea:cf:07:f5:
                    dc:88:b1:4e:ab:f5:b0:62:c0:e1:39:12:b9:a6:b3:
                    d2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:19:D0:91:86:3F:75:CC:52:77:C4:78:7C:12:D9:53:ED:C0:FA:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/543825cf-ce20-3eed-975f-4c895b7598e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.7.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:29:08:e3:98:e5:b1:9a:c5:b1:fe:a1:8c:9d:aa:55:c6:38:
         c3:2f:36:a6:30:5b:1f:b7:33:ab:f0:91:ee:4b:c4:3d:f1:66:
         d3:cc:17:ed:58:d4:89:b2:57:95:c2:f1:16:93:7f:b8:ac:9b:
         50:7c:e5:72:5e:ff:99:e2:83:6f:e1:67:92:60:77:d8:5d:7f:
         43:e6:ae:17:0f:e5:b4:cf:cc:f3:bc:4b:b7:b9:e3:1d:c3:0f:
         9c:0e:dd:82:96:4b:d6:d8:7e:4c:06:87:e3:ad:4e:9a:34:87:
         dd:71:89:0e:b1:9e:e2:c0:e6:b4:50:bf:be:7b:be:0c:04:74:
         a9:78:af:6a:4e:ca:69:1b:89:50:39:b0:d9:27:6b:41:62:f0:
         22:85:7a:c7:b5:20:46:f6:3f:fd:c6:4f:f9:96:d0:02:69:17:
         c7:84:9f:40:34:41:a0:69:68:22:81:59:f5:f2:5d:6f:e2:97:
         b3:68:85:a3:1e:e2:02:49:4e:25:d3:33:4f:91:9c:15:a8:3e:
         c0:90:81:43:69:91:77:6a:62:2f:72:24:60:83:cf:4d:b1:c3:
         ec:3e:18:97:e9:8d:26:b8:1f:ac:62:35:8d:de:f8:29:b9:1a:
         af:fc:e5:86:c8:4f:6a:f0:5f:b7:76:02:fe:81:2b:b8:25:3e:
         9b:11:9e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:47:19 2026 by rpki-client