Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/3abd4f17-fc8b-3c35-9510-409340c39206.roa
File:                     3abd4f17-fc8b-3c35-9510-409340c39206.roa (raw, json)
Hash identifier:          c/5e588rXsTDQRuiyRl5gVQYoNHKhIT59k6nBsoryqM=
Subject key identifier:   5D:DD:88:F5:2D:51:2D:62:48:7B:65:12:16:B5:69:56:A4:23:7D:21
Certificate issuer:       /CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
Certificate serial:       010D0C9F4328584D26982F9122FA3667272A04E8
Authority key identifier: 31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/3abd4f17-fc8b-3c35-9510-409340c39206.roa
Signing time:             Fri 13 Mar 2026 03:48:56 +0000
ROA not before:           Fri 13 Mar 2026 03:48:56 +0000
ROA not after:            Thu 11 Jun 2026 03:48:56 +0000
asID:                     214640
IP address blocks:        207.2.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:98:2f:91:22:fa:36:67:27:2a:04:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
        Validity
            Not Before: Mar 13 03:48:56 2026 GMT
            Not After : Jun 11 03:48:56 2026 GMT
        Subject: CN=b6850713-9456-4dd7-8f54-a0e08c4ce574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5d:cb:bd:76:e4:10:67:37:4d:0f:a7:ad:6b:
                    29:de:cf:20:47:43:c4:c3:89:aa:71:8b:4d:bb:0c:
                    69:32:1e:9d:dd:6f:87:d3:d6:4f:79:4c:c2:c7:a6:
                    dd:99:0f:ce:32:af:52:a9:35:c6:a4:3a:34:c4:98:
                    e1:b3:b4:8f:d9:25:c2:29:60:10:7b:c2:ad:64:aa:
                    22:a5:a0:2d:fa:6b:48:6d:84:b8:fb:25:11:a6:9b:
                    01:a9:75:d3:0e:7a:0d:49:10:7f:1c:89:2f:fd:93:
                    dc:3e:f5:00:da:3c:5d:f2:16:57:d0:59:15:f8:2c:
                    b7:5d:27:2d:84:4d:3d:0b:72:28:98:48:f3:08:6b:
                    db:ff:e6:42:f3:13:c1:15:57:8e:8f:1f:61:47:94:
                    3c:03:44:d9:b5:a6:33:8d:b0:0f:d7:49:9a:13:62:
                    f6:5f:03:56:97:e9:69:bf:e8:ab:c4:b4:bb:70:02:
                    60:e1:3b:5a:ec:cc:78:1a:64:f1:e6:7c:8e:9d:10:
                    33:95:0e:d0:63:9e:0a:59:87:b4:77:eb:08:76:85:
                    00:54:d3:16:94:9d:b1:2a:67:8f:99:ea:1d:77:00:
                    5c:15:74:e1:1d:1f:76:d5:f9:f8:81:e4:3a:49:f2:
                    65:0f:61:66:ad:a7:42:7f:c4:f9:d3:ac:b2:25:5c:
                    1a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:DD:88:F5:2D:51:2D:62:48:7B:65:12:16:B5:69:56:A4:23:7D:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/3abd4f17-fc8b-3c35-9510-409340c39206.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.crl

            X509v3 Authority Key Identifier:
                keyid:31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.2.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:00:59:23:03:88:5a:27:d7:b1:64:e7:62:3e:21:af:cc:39:
         16:85:08:60:1a:3b:c2:d6:c0:f3:a8:b4:66:23:8d:2d:a5:b4:
         4b:51:56:de:81:8c:33:4e:f5:7b:68:70:de:59:fa:b7:8d:40:
         ff:86:61:dd:59:be:b6:77:bb:7c:ad:b4:1e:70:aa:f3:a2:a0:
         58:4a:61:11:b6:a2:b6:d3:4f:d1:78:90:4f:4c:ca:55:c8:79:
         b0:54:1b:6a:0a:66:c4:ab:52:c6:4d:be:99:66:61:7d:56:68:
         b6:5b:ea:0b:81:d2:3a:ad:11:8b:43:07:f7:d9:ea:ad:ef:4b:
         54:8b:3d:eb:06:c2:58:2e:08:5e:2f:47:e8:2f:96:e0:d8:30:
         f6:fb:93:f7:11:66:85:03:bc:fe:d3:bc:f2:6f:f8:de:1f:85:
         7f:3e:f9:4a:ba:4e:9c:5c:72:c5:69:9f:e4:31:9a:c3:2e:69:
         48:45:6c:b3:cb:1c:17:60:85:96:af:62:bf:32:4d:2c:a6:8f:
         ec:5a:15:4d:ee:20:f2:d8:de:c8:ee:77:fc:ef:7c:e8:67:2f:
         a8:52:ea:6e:bb:a3:f5:75:fd:22:76:dc:88:9e:8d:2a:d1:c8:
         da:81:c0:61:64:fa:75:25:77:e9:82:95:1f:ad:d5:e6:9f:7e:
         d3:22:9e:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mmC+RIvo2ZycqBOgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdhNjM0MWItNWE1ZS00YWMwLWE3NjAtNWE1NDE5MGFm
OTEzMB4XDTI2MDMxMzAzNDg1NloXDTI2MDYxMTAzNDg1NlowLzEtMCsGA1UEAxMk
YjY4NTA3MTMtOTQ1Ni00ZGQ3LThmNTQtYTBlMDhjNGNlNTc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqV3LvXbkEGc3TQ+nrWsp3s8gR0PEw4mqcYtN
uwxpMh6d3W+H09ZPeUzCx6bdmQ/OMq9SqTXGpDo0xJjhs7SP2SXCKWAQe8KtZKoi
paAt+mtIbYS4+yURppsBqXXTDnoNSRB/HIkv/ZPcPvUA2jxd8hZX0FkV+Cy3XSct
hE09C3IomEjzCGvb/+ZC8xPBFVeOjx9hR5Q8A0TZtaYzjbAP10maE2L2XwNWl+lp
v+irxLS7cAJg4Tta7Mx4GmTx5nyOnRAzlQ7QY54KWYe0d+sIdoUAVNMWlJ2xKmeP
meoddwBcFXThHR921fn4geQ6SfJlD2FmradCf8T506yyJVwalwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF3diPUtUS1iSHtlEha1aVakI30hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lN2E2
MzQxYi01YTVlLTRhYzAtYTc2MC01YTU0MTkwYWY5MTMvM2FiZDRmMTctZmM4Yi0z
YzM1LTk1MTAtNDA5MzQwYzM5MjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTdhNjM0MWItNWE1ZS00YWMwLWE3
NjAtNWE1NDE5MGFmOTEzL2U3YTYzNDFiLTVhNWUtNGFjMC1hNzYwLTVhNTQxOTBh
ZjkxMy5jcmwwHwYDVR0jBBgwFoAUMaKt48OVDcaXQR4vjLH8a7eDJcIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lN2E2MzQxYi01YTVlLTRhYzAtYTc2MC01YTU0
MTkwYWY5MTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzwJ4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADsAWSMDiFon17Fk52I+Ia/MORaFCGAaO8LWwPOotGYjjS2ltEtRVt6B
jDNO9XtocN5Z+reNQP+GYd1ZvrZ3u3yttB5wqvOioFhKYRG2orbTT9F4kE9MylXI
ebBUG2oKZsSrUsZNvplmYX1WaLZb6guB0jqtEYtDB/fZ6q3vS1SLPesGwlguCF4v
R+gvluDYMPb7k/cRZoUDvP7TvPJv+N4fhX8++Uq6TpxccsVpn+QxmsMuaUhFbLPL
HBdghZavYr8yTSymj+xaFU3uIPLY3sjud/zvfOhnL6hS6m67o/V1/SJ23IiejSrR
yNqBwGFk+nUld+mClR+t1eafftMinsw=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:03:23 2026 by rpki-client