Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e08d2f6-4149-4115-a0f1-81e24ff55cac/1caa057a-5dd5-331e-920c-18a8bc208d96.roa
File:                     1caa057a-5dd5-331e-920c-18a8bc208d96.roa (raw, json)
Hash identifier:          GcIXgipUduWsktoPl+2ZIBF7pJwWsu4wwbmuentpM2o=
Subject key identifier:   3B:3D:0F:09:D5:D4:19:B8:68:3A:1D:5E:24:19:AB:49:B4:A8:E3:3C
Certificate issuer:       /CN=2e08d2f6-4149-4115-a0f1-81e24ff55cac
Certificate serial:       010D0C9F4328584D19B4DB8CB6E4C2E45EBA9600
Authority key identifier: 8D:7D:FF:CE:D0:A6:26:E3:10:E8:96:C3:B1:D2:D4:54:BA:7A:2A:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e08d2f6-4149-4115-a0f1-81e24ff55cac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e08d2f6-4149-4115-a0f1-81e24ff55cac/1caa057a-5dd5-331e-920c-18a8bc208d96.roa
Signing time:             Sun 08 Mar 2026 13:00:40 +0000
ROA not before:           Sun 08 Mar 2026 13:00:40 +0000
ROA not after:            Sat 06 Jun 2026 13:00:40 +0000
asID:                     27623
IP address blocks:        198.161.203.0/24 maxlen: 24
                          2620:5c:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e08d2f6-4149-4115-a0f1-81e24ff55cac/2e08d2f6-4149-4115-a0f1-81e24ff55cac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e08d2f6-4149-4115-a0f1-81e24ff55cac/2e08d2f6-4149-4115-a0f1-81e24ff55cac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e08d2f6-4149-4115-a0f1-81e24ff55cac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:19:b4:db:8c:b6:e4:c2:e4:5e:ba:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e08d2f6-4149-4115-a0f1-81e24ff55cac
        Validity
            Not Before: Mar  8 13:00:40 2026 GMT
            Not After : Jun  6 13:00:40 2026 GMT
        Subject: CN=e6d159f3-bc28-413e-80a5-545ca7ef1ede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0c:ba:8b:6f:52:6a:1e:09:17:9b:d6:da:99:
                    74:69:f4:d0:d3:1d:ce:ac:c3:fc:4c:bd:ce:78:ec:
                    d0:7c:8d:04:60:98:8c:6f:aa:64:05:c2:eb:c2:e8:
                    80:ca:1a:b3:62:5d:9a:4a:c3:46:d3:07:31:0e:df:
                    d1:66:e3:f4:c1:57:a4:cb:19:00:ba:71:05:02:f5:
                    30:e7:ab:78:a1:d2:4f:45:7b:51:f2:b3:b1:8a:08:
                    b4:45:00:19:00:6f:5c:bc:e0:94:75:6c:83:d2:4d:
                    ae:11:93:d8:ac:65:77:7a:39:de:2a:0f:ec:eb:1c:
                    e2:be:cd:b0:b5:29:fc:a7:bf:13:94:fc:6c:cf:22:
                    15:cc:14:1c:4d:15:cc:92:d4:b0:a8:f0:80:f3:7f:
                    5d:b8:54:c1:c7:b5:6b:95:61:fe:f1:2a:07:eb:9b:
                    9d:2a:3f:96:a3:a8:20:fb:4b:cb:af:8b:a1:73:4f:
                    f0:9b:e4:b3:b1:c3:20:89:48:ea:9d:b5:c2:4e:e6:
                    b5:e6:31:f8:ac:6e:ce:8a:cd:6c:1f:f9:e2:1f:74:
                    c2:6a:54:ab:b9:24:b1:c4:a3:a5:a0:b3:45:2a:99:
                    23:3f:3c:51:84:dc:41:50:2c:25:44:63:17:99:5a:
                    6e:a9:76:40:cc:49:38:25:b5:da:88:5e:f5:2e:46:
                    4b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:3D:0F:09:D5:D4:19:B8:68:3A:1D:5E:24:19:AB:49:B4:A8:E3:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e08d2f6-4149-4115-a0f1-81e24ff55cac/1caa057a-5dd5-331e-920c-18a8bc208d96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e08d2f6-4149-4115-a0f1-81e24ff55cac/2e08d2f6-4149-4115-a0f1-81e24ff55cac.crl

            X509v3 Authority Key Identifier:
                keyid:8D:7D:FF:CE:D0:A6:26:E3:10:E8:96:C3:B1:D2:D4:54:BA:7A:2A:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2e08d2f6-4149-4115-a0f1-81e24ff55cac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.161.203.0/24
                IPv6:
                  2620:5c:6000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:a9:a1:63:5d:d2:d4:5d:9f:3e:31:33:4f:42:60:5d:25:9a:
         2f:ef:a0:20:85:75:30:89:fb:69:f4:12:9a:c5:dd:28:db:37:
         00:b5:65:b7:53:e5:6a:08:d5:a2:94:b5:02:81:74:67:6c:e8:
         d8:8a:10:c0:6c:41:7e:a3:af:66:04:41:a3:f4:3e:f3:ab:6b:
         90:cf:81:30:13:cc:b5:b3:36:16:ac:2f:de:0b:60:dd:8c:96:
         aa:76:54:20:5c:7e:30:11:cf:86:e0:77:ad:4f:0d:29:da:f1:
         d6:23:2b:d2:64:25:09:66:b9:21:76:10:04:86:44:71:62:89:
         03:94:a1:e6:a1:ce:6c:81:db:99:19:75:05:14:a9:0b:49:45:
         7f:45:ee:2a:cc:50:bb:3b:01:24:da:ee:0b:c7:39:7b:ce:67:
         c9:8f:1c:84:d6:7d:aa:1e:df:d6:12:76:6e:51:2c:ce:0a:9a:
         d1:2d:33:39:6d:fe:f1:91:e1:85:45:04:8b:0f:6a:eb:42:46:
         f6:83:09:1f:c9:87:ca:69:a8:e4:1c:c7:3d:f2:ce:c4:93:9a:
         dd:f2:5f:9f:f1:29:b0:28:7b:24:0d:af:8a:f7:89:23:ed:88:
         0f:fd:36:03:ba:ae:b3:d2:53:ff:82:64:04:c1:24:6b:b3:7d:
         c0:22:22:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:03:44 2026 by rpki-client