Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/44c6fcf9-c61d-380b-9437-839e38fa9818.roa
File:                     44c6fcf9-c61d-380b-9437-839e38fa9818.roa (raw, json)
Hash identifier:          98nPm5DNA/jQaeGR2MVXTyRIakpXNg4th+TV9VS7VfY=
Subject key identifier:   6B:AF:DB:C4:1F:9C:B6:3B:DD:4D:5A:30:1F:80:63:27:B1:B8:27:CD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D07AD1A80FAC3AC145C602498
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/44c6fcf9-c61d-380b-9437-839e38fa9818.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     14618
IP address blocks:        207.176.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ad:1a:80:fa:c3:ac:14:5c:60:24:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=9c2570ea-f137-430b-92d3-d03aa47a132b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:af:bc:63:61:74:d9:c3:e0:14:57:f6:1d:2d:
                    0e:fe:76:69:8f:37:5a:8d:d5:13:ab:44:bf:4b:10:
                    79:03:ca:a1:5b:a5:84:43:2a:51:6e:51:ca:52:ce:
                    91:2c:b6:a2:3f:39:3c:71:4d:86:2f:59:00:21:5f:
                    f8:7a:a8:a6:2c:a1:7e:bd:ca:00:54:a0:1f:de:1c:
                    c4:3d:bb:73:25:c6:5c:ca:46:c0:f7:ea:e9:8d:c2:
                    d2:ac:69:59:0c:8c:bd:7b:c8:f7:d0:b8:fe:42:6d:
                    36:d6:52:8b:c1:6c:1d:a2:1e:b5:78:b6:13:d6:63:
                    ec:ca:0a:35:a2:66:b7:b2:4d:b9:a7:d3:4a:dc:e8:
                    3a:c7:be:ec:71:75:02:b3:39:cb:31:bd:48:63:38:
                    13:84:65:1c:ea:72:cc:ee:79:25:15:34:67:2f:92:
                    bb:40:c5:97:a3:b1:24:ef:6a:4d:7a:8a:92:61:b0:
                    ce:66:c2:ce:42:24:7b:2d:35:d6:c0:9f:8a:88:96:
                    d6:8f:67:97:a2:9e:28:b8:f2:f7:84:db:d7:17:6a:
                    b8:99:0d:ca:d6:31:d1:8d:cb:45:05:60:1d:3c:7c:
                    cc:aa:b9:21:a6:cf:c2:63:14:0d:c1:7b:c4:97:30:
                    44:52:31:b7:79:9c:9c:8e:dc:b1:e4:b2:52:95:99:
                    f2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:AF:DB:C4:1F:9C:B6:3B:DD:4D:5A:30:1F:80:63:27:B1:B8:27:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/44c6fcf9-c61d-380b-9437-839e38fa9818.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.176.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:4f:4c:34:ca:92:c8:2c:24:d8:53:9d:88:ec:c9:b6:21:75:
         28:bb:c4:f4:9f:06:90:cf:27:7b:ad:b1:33:38:c3:fc:37:1f:
         0a:e7:00:1c:ba:ae:57:67:74:4c:27:30:fa:e1:c3:b0:4d:8c:
         b5:ef:ca:66:30:77:d4:46:0f:54:65:f7:83:a3:46:a1:28:72:
         08:45:e7:14:c8:41:f5:e8:0e:c9:6f:63:26:7a:d3:2f:03:96:
         92:a3:65:6b:66:64:be:ff:65:e4:c7:60:df:ec:4e:99:25:42:
         8c:8f:6d:a6:0f:f2:9c:ed:c4:eb:a7:d7:f4:11:28:aa:af:19:
         6a:5d:5d:1f:3a:1c:70:38:a2:fd:a2:d0:56:34:3b:1c:dc:99:
         b7:01:2c:07:07:07:31:e5:a8:86:04:71:79:c4:66:76:c6:21:
         3c:25:f0:a5:6f:7f:25:cc:11:a6:28:0f:84:92:ca:34:a3:12:
         ca:2d:ec:21:0d:56:0f:3c:62:8d:d2:eb:79:d1:33:44:d8:7f:
         7d:3f:3c:89:94:c5:de:20:d2:11:fa:91:6e:bb:c9:4d:1c:ac:
         d4:cb:fa:08:1c:3f:57:b9:85:2b:98:ac:1f:71:15:6d:aa:7c:
         ab:86:91:b1:b6:6c:5f:91:42:43:92:be:c7:d5:c6:8a:26:fa:
         d1:16:15:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:09:16 2026 by rpki-client