Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/75fee2d3-6e8d-43c2-9ea5-5793ea941503/625dc02a-33d9-3ccc-a8cb-6cc6c0fa6d2c.roa
File:                     625dc02a-33d9-3ccc-a8cb-6cc6c0fa6d2c.roa (raw, json)
Hash identifier:          r/OlTteRSPbiyd+OyRT7pwiq/+fpngOnX8ARItg1GvM=
Subject key identifier:   3D:D2:A3:2E:5F:89:47:45:25:B2:84:7A:6A:43:A3:EE:8C:F2:D1:68
Certificate issuer:       /CN=75fee2d3-6e8d-43c2-9ea5-5793ea941503
Certificate serial:       010D0C9F4328584D32D4D4BB041416C52CFD0260
Authority key identifier: 7A:E2:14:B6:24:CE:02:38:2C:55:2B:F0:12:DC:9C:3C:30:89:44:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/75fee2d3-6e8d-43c2-9ea5-5793ea941503.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/75fee2d3-6e8d-43c2-9ea5-5793ea941503/625dc02a-33d9-3ccc-a8cb-6cc6c0fa6d2c.roa
Signing time:             Tue 17 Mar 2026 13:00:41 +0000
ROA not before:           Tue 17 Mar 2026 13:00:41 +0000
ROA not after:            Mon 15 Jun 2026 13:00:41 +0000
asID:                     399393
IP address blocks:        198.140.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/75fee2d3-6e8d-43c2-9ea5-5793ea941503/75fee2d3-6e8d-43c2-9ea5-5793ea941503.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/75fee2d3-6e8d-43c2-9ea5-5793ea941503/75fee2d3-6e8d-43c2-9ea5-5793ea941503.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/75fee2d3-6e8d-43c2-9ea5-5793ea941503.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:32:d4:d4:bb:04:14:16:c5:2c:fd:02:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75fee2d3-6e8d-43c2-9ea5-5793ea941503
        Validity
            Not Before: Mar 17 13:00:41 2026 GMT
            Not After : Jun 15 13:00:41 2026 GMT
        Subject: CN=7932f5e4-7b79-492d-ae08-0fee32a2b7c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:70:d5:37:4a:12:7d:4d:be:35:6b:65:e8:32:
                    23:27:88:38:3c:06:78:dc:2c:4f:f9:0f:09:34:03:
                    eb:e8:13:f4:3b:ee:96:5a:9b:02:a0:31:65:16:7e:
                    9a:c7:b3:4c:68:58:f7:06:28:df:24:e9:55:bd:46:
                    e0:02:a2:35:2d:4c:db:a6:3c:34:a1:37:60:ea:5c:
                    c4:d8:0f:c1:5b:8c:6d:de:dc:9e:dc:3d:a2:a2:c4:
                    36:fe:ad:f0:83:5e:74:d9:ac:37:cf:10:14:b6:1f:
                    64:b0:40:d7:8e:1e:94:c0:ea:26:2a:bb:24:0e:5e:
                    db:06:a0:fd:4d:2d:63:f7:4d:a8:3c:69:d6:a7:4d:
                    f3:29:59:08:9a:9e:52:6c:66:c5:c2:11:96:b2:3e:
                    b9:0d:1f:66:c9:3d:d6:e1:6b:b1:d9:0f:a3:58:1d:
                    e4:24:87:22:32:40:4b:62:de:84:04:c4:3e:17:23:
                    e3:f6:e1:d1:3e:a1:32:e3:88:a7:08:d4:87:a0:5b:
                    18:5e:b0:88:06:e9:8f:31:25:1a:f8:50:c4:bb:34:
                    2b:e2:76:f6:28:00:94:37:29:0b:f9:df:a3:66:10:
                    b3:b6:20:19:5c:a0:6e:65:69:64:c5:d6:79:e5:46:
                    44:3e:83:20:42:6d:2d:06:15:d2:d4:bd:2c:9c:19:
                    43:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D2:A3:2E:5F:89:47:45:25:B2:84:7A:6A:43:A3:EE:8C:F2:D1:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/75fee2d3-6e8d-43c2-9ea5-5793ea941503/625dc02a-33d9-3ccc-a8cb-6cc6c0fa6d2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/75fee2d3-6e8d-43c2-9ea5-5793ea941503/75fee2d3-6e8d-43c2-9ea5-5793ea941503.crl

            X509v3 Authority Key Identifier:
                keyid:7A:E2:14:B6:24:CE:02:38:2C:55:2B:F0:12:DC:9C:3C:30:89:44:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/75fee2d3-6e8d-43c2-9ea5-5793ea941503.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.140.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:61:5f:c4:e6:a0:9a:f2:c0:eb:3f:d3:b5:f4:4a:1c:43:8f:
         87:d0:4f:66:95:f7:a4:9f:63:f6:20:4b:67:df:bf:b9:16:df:
         0c:02:cd:ec:b7:80:53:ca:40:e0:e2:31:c8:9f:b3:58:39:13:
         5b:5f:f5:cd:c0:3d:d0:52:39:78:d4:22:8c:7f:16:a1:f4:30:
         06:dc:24:f3:c5:2d:c3:55:0c:ee:1d:26:e7:7f:6b:02:b9:76:
         23:8a:b7:00:47:ed:11:72:11:b7:53:b7:45:bc:f8:2a:45:b4:
         25:be:48:ef:f3:33:a6:4f:f1:88:ff:b7:b3:93:39:b5:79:76:
         b6:35:a0:94:27:69:60:ef:a0:52:27:52:67:30:d1:03:c7:b8:
         17:fc:3e:9b:74:aa:25:20:a2:19:0c:40:72:ce:7f:30:b5:b8:
         ac:ea:85:9d:54:d1:60:36:9c:b0:88:21:33:6b:a8:62:8b:ed:
         27:39:bb:04:ac:24:36:76:b3:b3:05:e8:a7:ee:f2:e3:29:89:
         d5:d2:49:da:3c:b5:a7:28:60:79:6c:21:8c:73:07:be:fd:eb:
         6f:7c:c3:cf:d4:2c:1f:f1:0e:5b:68:89:04:28:d8:08:ba:8e:
         98:80:52:c2:02:d9:03:56:0b:7d:fe:72:5b:6c:b9:c5:fb:31:
         fb:22:eb:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:41:04 2026 by rpki-client