Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/09685784-f7f7-3436-990f-6353d789309c.roa
File:                     09685784-f7f7-3436-990f-6353d789309c.roa (raw, json)
Hash identifier:          jq/lac7j9I3JDJR2TmBjd83lGAppRbgB3wIXmJyvP8M=
Subject key identifier:   4D:90:07:EA:60:1A:68:CC:12:A4:DD:2D:20:AA:3C:1A:30:76:14:8F
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D65152351DB74B42BD9644A00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/09685784-f7f7-3436-990f-6353d789309c.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     30036
IP address blocks:        107.167.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:23:51:db:74:b4:2b:d9:64:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=df6e0bbb-4219-42b3-901e-203141ca45ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bf:d3:08:61:95:cf:a4:70:66:43:82:14:fe:
                    fc:1e:8c:8e:a5:8b:df:c6:df:5b:a2:7d:30:fc:3c:
                    9e:e5:ed:26:d8:c3:10:35:c8:e9:0f:11:5d:0b:7e:
                    ed:d8:95:14:1c:5b:17:03:b0:e8:32:41:4d:7b:8b:
                    97:c3:03:f2:db:83:3c:9f:4e:b8:0e:79:9e:82:6b:
                    f6:58:97:95:d0:63:2c:3f:29:56:27:60:80:00:21:
                    c1:59:ae:45:2f:39:c5:7d:93:ac:6f:d6:6d:c8:99:
                    b4:e2:61:6d:8f:c8:a9:dd:88:07:71:4b:38:7d:26:
                    62:2f:42:4f:8e:0b:2a:a4:1d:34:35:50:29:57:74:
                    d1:2e:69:73:20:c2:07:8f:d2:4c:13:6a:6a:7d:dd:
                    13:b1:ba:1f:ab:c9:2d:70:01:9a:4c:cb:3e:d3:ab:
                    77:54:9f:b6:97:2d:b2:89:4c:df:78:35:e0:f3:dc:
                    6d:18:d3:82:e0:8a:57:5d:76:6b:2d:96:2c:33:f2:
                    07:3b:a4:60:28:66:c2:8b:b3:38:f7:fc:c9:b4:c5:
                    31:54:5f:1b:82:52:73:bc:b4:2f:dd:0a:cc:5f:2d:
                    05:84:d1:3a:a5:53:95:67:f2:a7:6d:31:ba:b4:17:
                    62:3b:d0:3f:13:a8:66:bc:2c:a5:9a:9e:dc:9a:43:
                    fd:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:90:07:EA:60:1A:68:CC:12:A4:DD:2D:20:AA:3C:1A:30:76:14:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/09685784-f7f7-3436-990f-6353d789309c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.167.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:58:7d:46:5a:d8:99:d2:02:52:2f:30:a0:56:85:10:70:eb:
         d4:f9:49:f4:87:a7:3a:50:39:fb:74:6b:10:9b:f5:39:4f:30:
         da:31:c7:4d:a7:1a:f7:ec:71:18:14:37:83:95:a4:f2:cf:5a:
         4d:aa:51:5a:74:f2:8e:07:14:e0:01:3f:e1:38:a0:47:6e:10:
         38:19:68:60:b4:1e:11:00:05:f2:81:f2:cc:a2:03:b8:c9:2e:
         d6:3f:72:fa:04:7c:86:7c:bc:21:0c:e5:e2:62:e8:de:7f:86:
         a9:8e:7c:da:76:13:a6:d6:2c:90:9d:27:67:e7:af:db:c0:56:
         cf:6a:02:3b:e3:5c:0c:bc:2c:20:c8:eb:42:09:a0:ea:1d:e8:
         f2:7b:68:a3:a0:3a:46:b5:5c:af:26:c0:e5:60:25:67:80:e9:
         03:aa:e1:b8:7f:40:af:f6:7e:69:32:d6:1a:fd:c4:c7:70:c5:
         35:f7:f2:2a:f7:fc:fc:e1:70:6e:3d:ca:12:b3:84:86:3e:ce:
         e6:d3:dd:d5:f8:ab:f9:cc:1e:20:d7:0e:04:2c:ef:07:c8:40:
         25:96:d1:82:76:c9:ae:0e:19:88:1a:4e:b8:2e:d6:bb:d3:e8:
         5e:63:d0:cf:4b:e3:ba:31:a9:2b:b2:ee:d7:9c:2b:d3:f1:77:
         66:40:63:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:42:39 2026 by rpki-client