Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c45cb1c-e77b-45f7-82cb-f77570cda8d0/3079d6ed-b0fc-3c12-974f-76ff221748f6.roa
File:                     3079d6ed-b0fc-3c12-974f-76ff221748f6.roa (raw, json)
Hash identifier:          WGND6mmj/nYtCG8R9ikoMc1tpo8HHr2eF7zYUN6P0eQ=
Subject key identifier:   34:28:CF:EB:D7:81:0E:A0:15:12:03:0B:95:73:A4:F9:85:E0:12:DF
Certificate issuer:       /CN=4c45cb1c-e77b-45f7-82cb-f77570cda8d0
Certificate serial:       010D0C9F4328584CAA27350A44823705F9820180
Authority key identifier: 2C:0F:BA:E1:41:15:7F:2B:DA:83:D8:AB:E9:28:0C:CB:5A:D6:E5:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c45cb1c-e77b-45f7-82cb-f77570cda8d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c45cb1c-e77b-45f7-82cb-f77570cda8d0/3079d6ed-b0fc-3c12-974f-76ff221748f6.roa
Signing time:             Tue 27 Jan 2026 14:00:36 +0000
ROA not before:           Tue 27 Jan 2026 14:00:36 +0000
ROA not after:            Mon 27 Apr 2026 13:00:36 +0000
asID:                     63023
IP address blocks:        216.39.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c45cb1c-e77b-45f7-82cb-f77570cda8d0/4c45cb1c-e77b-45f7-82cb-f77570cda8d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c45cb1c-e77b-45f7-82cb-f77570cda8d0/4c45cb1c-e77b-45f7-82cb-f77570cda8d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c45cb1c-e77b-45f7-82cb-f77570cda8d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:aa:27:35:0a:44:82:37:05:f9:82:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c45cb1c-e77b-45f7-82cb-f77570cda8d0
        Validity
            Not Before: Jan 27 14:00:36 2026 GMT
            Not After : Apr 27 13:00:36 2026 GMT
        Subject: CN=2886d8e5-70b6-4dd2-a66c-f283c3221317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e2:3d:73:8c:f8:08:b1:52:f7:c5:d5:9f:e3:
                    04:30:0d:7b:0d:3d:21:a3:c7:67:22:05:1f:cb:ff:
                    00:a5:92:79:ac:b9:e9:19:40:80:c5:77:15:9c:3e:
                    c9:0e:58:2b:ec:74:1d:99:22:47:d5:9e:7d:e8:df:
                    71:de:03:21:9f:90:bd:6c:36:76:5d:a2:40:e3:68:
                    bd:d0:95:68:a0:c8:1f:d3:c6:09:08:b9:99:70:31:
                    7d:80:c2:1b:b0:de:2b:8e:ee:a9:f2:44:31:6e:78:
                    12:46:bc:f7:f6:ea:6d:b2:63:bb:26:7b:ce:61:01:
                    c6:df:ad:04:ba:84:4c:af:c2:5f:8a:01:7a:96:16:
                    a9:4f:0f:68:f6:34:9e:f4:10:3d:fe:78:c9:5b:a8:
                    33:9c:4d:e9:ab:5c:fc:aa:59:12:7c:3f:1d:4e:f9:
                    1b:14:b8:d5:29:d5:a4:1d:f9:34:3f:fe:bc:e1:cc:
                    06:50:28:03:1c:23:4d:eb:88:7d:3a:43:38:bd:69:
                    85:50:88:82:cf:6b:a6:81:05:8d:de:17:ad:e3:40:
                    5c:77:66:15:f8:52:31:83:81:10:59:75:29:fa:2b:
                    7e:b7:8e:6d:bd:82:f2:aa:02:96:a1:dd:94:8d:16:
                    56:ba:43:2c:95:b8:a1:6d:4f:f4:da:8e:cc:58:15:
                    35:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:28:CF:EB:D7:81:0E:A0:15:12:03:0B:95:73:A4:F9:85:E0:12:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c45cb1c-e77b-45f7-82cb-f77570cda8d0/3079d6ed-b0fc-3c12-974f-76ff221748f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c45cb1c-e77b-45f7-82cb-f77570cda8d0/4c45cb1c-e77b-45f7-82cb-f77570cda8d0.crl

            X509v3 Authority Key Identifier:
                keyid:2C:0F:BA:E1:41:15:7F:2B:DA:83:D8:AB:E9:28:0C:CB:5A:D6:E5:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4c45cb1c-e77b-45f7-82cb-f77570cda8d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.39.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:f9:2b:bc:72:b1:27:c8:b0:ec:64:88:99:bd:57:f5:9f:4f:
         49:4c:8b:a5:a3:4a:e5:e0:f2:ef:b6:29:88:9f:cf:d3:23:1a:
         c9:09:8d:6e:93:58:60:74:1d:99:a0:38:cf:ae:0e:c5:c5:68:
         7b:00:cf:e4:17:9e:96:d9:c3:b5:64:6f:bd:2f:84:b6:66:ac:
         bc:d3:77:20:be:58:4a:77:fa:36:14:64:56:58:b0:d3:cd:fc:
         02:5e:85:69:9d:15:94:24:a8:78:c5:1a:27:e8:bc:60:f6:b9:
         58:66:3d:ac:ab:55:ba:08:bf:29:18:10:07:71:51:f1:11:31:
         04:69:f9:51:dd:4d:15:f5:f2:7d:28:67:fd:93:df:09:6a:4e:
         fd:ad:0d:ad:b4:3a:cc:b5:97:30:c1:4e:b5:ba:07:16:82:c6:
         51:9c:3e:8d:a4:78:27:11:e3:f8:19:89:0c:ce:b9:98:ab:af:
         51:4e:04:f7:fc:5c:3b:cf:6a:74:ec:87:88:14:f2:00:8c:03:
         e0:27:35:e3:3a:23:1d:29:3e:b8:a2:38:41:aa:6b:0f:1b:e6:
         62:27:c8:7d:7a:9f:70:82:18:03:aa:46:ae:f1:36:e7:89:ed:
         9e:8e:a6:06:b4:13:5c:a4:e2:73:91:97:1d:3f:7a:e3:bd:ba:
         ab:11:52:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:26:47 2026 by rpki-client