Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/7b22a67b-1fd0-31ab-a89c-2bd76f5577e4.roa
File:                     7b22a67b-1fd0-31ab-a89c-2bd76f5577e4.roa (raw, json)
Hash identifier:          ASqOcYB12cqMcVzvG5l1fKdZZpLDZIYPsfzMhFPG/Q4=
Subject key identifier:   4E:00:F5:9F:E1:31:59:D6:A0:C4:51:7C:91:8F:6F:1D:59:16:73:2F
Certificate issuer:       /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial:       010D0C9F4328584D492A679F7BAD5D7C6B64ED80
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/7b22a67b-1fd0-31ab-a89c-2bd76f5577e4.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     13807
IP address blocks:        173.240.80.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:67:9f:7b:ad:5d:7c:6b:64:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=9c811415-bb0a-4385-ab7e-1b3d7c6330a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:48:66:9a:09:e0:cb:9f:9a:44:73:a3:3c:dd:
                    3e:bd:4f:fc:2c:03:17:23:3b:f1:fa:3b:22:a6:03:
                    ee:56:a8:9e:e8:48:a8:cc:c2:07:1f:86:d7:ef:63:
                    de:a2:2d:21:60:52:8e:89:e2:ae:a5:f5:21:de:5a:
                    c9:e7:c4:be:5c:15:d6:97:f9:40:99:54:ac:fd:42:
                    ff:66:ab:19:f8:ab:76:e8:59:c2:bc:a6:77:1d:1c:
                    d8:1b:01:48:0c:f8:a5:e6:4d:04:13:5d:1e:6c:6c:
                    5b:e1:fa:43:35:a3:a9:f2:72:f8:9b:9f:4c:5a:25:
                    dc:ea:eb:88:73:6c:f2:1d:b1:e2:ef:39:3b:37:39:
                    e3:b3:57:88:73:1f:8c:3d:97:e8:a7:0f:7d:34:d7:
                    77:8e:da:ea:8e:20:f7:a5:ca:f3:f9:bc:2b:ea:ae:
                    92:6c:0f:12:25:61:e4:98:98:5a:29:17:f7:0a:0a:
                    86:75:11:8e:d8:b7:a6:cc:2e:d6:b1:4e:c3:64:dd:
                    5c:71:3a:0b:d1:8f:35:59:fb:20:ed:b5:95:27:62:
                    2a:a7:d8:31:27:1f:05:16:09:b1:de:d5:28:20:dd:
                    a7:20:2c:55:0c:79:b0:4c:5e:60:f1:df:57:4b:d0:
                    e6:06:17:48:35:7d:b7:33:7e:b0:77:dc:24:11:cf:
                    2b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:00:F5:9F:E1:31:59:D6:A0:C4:51:7C:91:8F:6F:1D:59:16:73:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/7b22a67b-1fd0-31ab-a89c-2bd76f5577e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl

            X509v3 Authority Key Identifier:
                keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.240.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:f8:97:88:cb:9a:f2:e7:25:e3:ba:86:17:36:c6:89:86:0c:
         19:bb:35:ba:36:8a:5a:1b:f9:d5:b7:79:e0:8e:5e:73:5e:d8:
         36:00:d6:52:a8:a7:31:a4:ff:26:9d:70:2c:5c:97:7f:97:a6:
         cb:a0:28:b8:53:5a:48:c4:7c:17:98:66:a8:a8:d6:7f:4b:0d:
         f6:d7:13:16:24:79:65:4b:a3:b6:4d:77:db:c4:48:d0:34:5d:
         8a:56:95:fb:75:82:db:46:bb:cf:5e:e1:bd:c1:41:f3:14:56:
         53:eb:0f:39:7b:12:54:d5:4c:8c:74:65:fa:95:ec:37:fd:f8:
         d6:c0:d0:9f:4d:64:3e:54:c9:a3:e2:51:70:65:7c:53:65:3c:
         f8:cf:28:2e:a3:cb:31:9c:af:bf:f0:26:84:87:9e:ca:d1:0e:
         85:30:b4:c0:2b:d0:86:22:40:e3:a9:da:9b:cc:90:0f:36:1f:
         b6:58:32:b4:17:73:28:65:c0:2f:95:30:4c:d7:a2:c9:6f:c7:
         59:04:1c:04:76:53:e4:8f:84:c9:88:27:de:c2:e4:27:10:c7:
         56:c9:34:84:11:58:4d:e8:d4:cc:a9:5b:0a:b6:e4:7c:0d:c0:
         3f:1a:fe:91:10:d0:a2:f9:9b:d8:47:f7:2b:d6:5e:00:31:5b:
         81:1f:e4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:41:50 2026 by rpki-client