Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086/252732c2-9eb6-36a7-8e3c-6253bb3ea470.roa
File:                     252732c2-9eb6-36a7-8e3c-6253bb3ea470.roa (raw, json)
Hash identifier:          dP7iY933raCEKQ6NPIljPCyLm+ntE11fHcv0yPPlk9s=
Subject key identifier:   8E:FA:97:CB:AB:8C:31:DC:89:31:6B:99:E3:85:C2:69:BC:2C:87:65
Certificate issuer:       /CN=bcebc8fa-2923-43fa-ba14-964e68a49086
Certificate serial:       010D0C9F4328584CD13CA1D3D82DAC9A374FA9A0
Authority key identifier: 4C:4A:30:C3:52:5B:42:48:A8:E2:9F:0E:3D:F8:23:9A:C6:A9:C5:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086/252732c2-9eb6-36a7-8e3c-6253bb3ea470.roa
Signing time:             Tue 10 Feb 2026 14:00:41 +0000
ROA not before:           Tue 10 Feb 2026 14:00:41 +0000
ROA not after:            Mon 11 May 2026 13:00:41 +0000
asID:                     19430
IP address blocks:        204.107.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086/bcebc8fa-2923-43fa-ba14-964e68a49086.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086/bcebc8fa-2923-43fa-ba14-964e68a49086.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d1:3c:a1:d3:d8:2d:ac:9a:37:4f:a9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcebc8fa-2923-43fa-ba14-964e68a49086
        Validity
            Not Before: Feb 10 14:00:41 2026 GMT
            Not After : May 11 13:00:41 2026 GMT
        Subject: CN=8af3627e-5dd8-4c1b-a5f9-e11453b36bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4f:dd:3d:59:83:3e:65:9b:e7:3f:70:b7:3c:
                    36:bb:fc:ff:36:44:a0:87:78:f6:fb:68:aa:d7:e2:
                    58:f2:2c:fa:4d:bd:f3:84:1c:8e:36:05:43:15:48:
                    41:9c:22:6e:72:66:b4:b0:1f:be:56:27:4c:c1:83:
                    3a:71:d4:08:98:87:c5:11:bc:e9:1d:b1:bf:ea:df:
                    f1:21:44:c5:a1:47:d1:93:b1:a1:c6:9a:2c:14:d1:
                    cd:16:f0:63:01:86:a7:d7:19:39:58:a1:ce:6e:d1:
                    80:d4:28:5d:fc:ef:38:45:04:1f:32:2b:53:6d:f6:
                    c1:12:cf:18:35:82:3c:f6:82:cd:41:0d:af:8c:1c:
                    71:5f:fe:53:65:eb:88:5e:3e:d6:38:f9:d7:1b:d2:
                    d7:60:ef:7a:76:03:e3:ef:33:ba:3b:6b:c1:de:0f:
                    26:ed:33:67:44:08:7f:ed:55:08:74:01:bd:9e:17:
                    7b:af:0e:e2:29:f1:29:8b:83:c6:03:43:1f:75:ce:
                    82:59:c9:66:af:cd:25:4b:8e:1a:1e:6e:8a:13:c1:
                    93:15:f7:f1:e0:5e:9f:52:ab:bc:ae:b1:83:dd:35:
                    c2:8c:7e:9c:10:42:c2:ad:8d:3f:89:f4:5c:04:a9:
                    7a:2e:23:1e:93:c0:b2:8b:3f:17:21:9b:40:85:a3:
                    ef:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:FA:97:CB:AB:8C:31:DC:89:31:6B:99:E3:85:C2:69:BC:2C:87:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086/252732c2-9eb6-36a7-8e3c-6253bb3ea470.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086/bcebc8fa-2923-43fa-ba14-964e68a49086.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:30:C3:52:5B:42:48:A8:E2:9F:0E:3D:F8:23:9A:C6:A9:C5:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bcebc8fa-2923-43fa-ba14-964e68a49086.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.107.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:41:07:be:b3:50:b1:15:71:4b:ec:30:4c:5c:34:ba:e8:0f:
         94:98:92:79:a2:f0:f8:4f:fc:74:e0:0f:7b:7a:ae:fd:3e:02:
         96:15:5b:e0:88:ba:37:51:37:7f:1e:1e:94:fb:18:d3:78:10:
         39:18:2d:cc:49:3e:72:4e:a0:45:c2:a8:24:83:5a:1c:a6:54:
         f8:bf:f1:72:cb:68:e8:7d:f8:34:fe:79:8b:3b:24:f9:c8:9f:
         b4:8e:8f:56:d3:12:ae:1d:97:b9:c6:bb:90:ed:9f:c9:85:60:
         6b:ff:aa:2c:f1:79:7c:27:6a:7b:7c:02:10:8c:f2:64:e9:63:
         6e:2f:9e:05:af:0d:94:af:77:21:93:53:d4:92:0c:95:2a:dd:
         f0:29:89:37:2a:2e:eb:72:6c:84:ee:58:bd:b5:bc:6e:f3:a2:
         25:59:53:ef:01:9b:21:5e:ce:89:f3:bf:3f:48:9c:dd:91:e6:
         46:44:5c:ce:9e:e0:2a:86:64:e8:ba:04:81:37:2a:83:23:8e:
         2a:06:4c:b4:ef:46:31:da:58:2c:ad:dc:cc:e7:84:2b:4d:16:
         ed:43:03:5d:8c:b4:3a:94:37:cb:7f:2b:1d:2d:b8:5c:c9:e0:
         f5:29:73:d9:2c:63:f4:c3:5a:f1:54:b2:4e:cd:72:26:8f:dc:
         bc:bf:3f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:44:02 2026 by rpki-client