Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/d9bc6089-2f3b-372e-bdd7-8835f3475eed.roa
File:                     d9bc6089-2f3b-372e-bdd7-8835f3475eed.roa (raw, json)
Hash identifier:          McWLcxpqeN8P6xTqAPYIgY29h++dl+B8Rv3APnCWHAo=
Subject key identifier:   9D:B4:10:4A:E6:BA:69:E7:1A:A4:D1:59:EE:D7:2F:40:42:7D:2A:63
Certificate issuer:       /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial:       010D0C9F4328584CC777498568FDEE56DDAAC340
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/d9bc6089-2f3b-372e-bdd7-8835f3475eed.roa
Signing time:             Sat 07 Feb 2026 02:00:31 +0000
ROA not before:           Sat 07 Feb 2026 02:00:31 +0000
ROA not after:            Fri 08 May 2026 01:00:31 +0000
asID:                     206216
IP address blocks:        170.205.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:77:49:85:68:fd:ee:56:dd:aa:c3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
        Validity
            Not Before: Feb  7 02:00:31 2026 GMT
            Not After : May  8 01:00:31 2026 GMT
        Subject: CN=1b0a35f0-0d56-44cb-a086-352df8b1abb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:52:33:77:b9:11:6a:42:d3:21:8d:81:57:ac:
                    3b:b6:5d:e3:bf:77:2e:38:6c:98:5b:7a:72:11:af:
                    48:b4:16:37:cd:42:37:bb:73:40:9a:35:18:12:a1:
                    0a:d0:d2:a1:b0:1d:fd:d5:21:97:86:5d:06:6f:68:
                    34:54:98:f1:4d:dd:31:ad:c6:93:c2:d8:5b:1b:76:
                    d6:ce:a4:7c:9d:e5:3f:c1:32:c9:04:6c:78:c6:ff:
                    3f:22:d4:9b:fd:9e:f1:92:76:94:6b:87:52:ec:3e:
                    aa:c3:43:5b:f7:8d:40:77:cb:64:9d:60:47:9d:d0:
                    37:cf:bc:46:02:50:68:50:4f:10:1f:8d:c2:7f:42:
                    f2:59:af:6e:57:86:4a:85:c3:0a:92:a8:0e:56:3c:
                    98:6b:7e:7f:38:15:d9:2c:f9:87:dc:22:93:83:d0:
                    28:30:d5:f2:24:c3:2f:94:c1:5a:a6:ef:0a:7c:86:
                    4c:28:0a:49:26:c5:ed:a6:56:38:c2:a8:db:ed:f9:
                    30:f2:8a:5c:43:3b:12:36:fd:72:0c:a3:0c:ee:83:
                    1c:9d:9a:2a:46:63:c2:64:cc:dc:29:62:8c:8c:32:
                    08:43:61:67:17:7d:43:0f:8f:ca:98:c3:ee:2e:92:
                    e7:3a:47:d9:fc:7e:7a:28:fd:3f:c7:98:2e:bd:93:
                    1d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B4:10:4A:E6:BA:69:E7:1A:A4:D1:59:EE:D7:2F:40:42:7D:2A:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/d9bc6089-2f3b-372e-bdd7-8835f3475eed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl

            X509v3 Authority Key Identifier:
                keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.205.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:fe:e9:41:0b:f5:95:cf:f2:85:0b:4a:3a:3e:8c:cf:55:18:
         cb:0c:fe:14:88:b5:bf:d8:39:55:47:b8:26:9a:1a:8c:9d:3e:
         8d:0d:05:4f:81:a6:e2:c8:98:a8:77:0b:94:b5:80:67:fd:fe:
         a0:6a:59:4d:f0:b6:b6:0b:a0:26:7d:5a:c9:2b:90:1a:4c:6e:
         8f:00:e0:13:d3:53:3d:87:6a:ca:3a:fc:d4:6f:9c:23:fd:34:
         94:a2:0f:3c:77:61:9a:3f:ae:30:e9:58:22:a7:17:6e:94:b0:
         94:88:af:e8:e3:67:8b:eb:b3:ab:77:f9:18:1b:34:40:14:d6:
         c9:a5:2c:36:8c:c3:54:4b:1a:8a:02:ee:b7:fb:8e:a5:ea:cd:
         e0:cb:c7:69:c8:9e:8d:6d:db:e6:5f:dc:9f:dc:3c:0c:e7:4a:
         82:fd:e5:8b:45:cf:f4:22:81:b0:fb:b7:2a:59:ae:55:12:54:
         31:32:50:b6:94:a1:ee:4e:5a:87:42:13:01:67:ee:62:b8:56:
         f4:a5:2c:3e:7b:49:ab:65:1a:0d:61:0c:c8:71:2a:91:18:a8:
         01:a0:6c:80:51:d3:11:ae:dc:4e:35:1d:51:16:d1:3d:3d:d0:
         00:be:17:c9:55:b1:cb:cf:9f:e2:12:b5:f2:18:1c:1d:b6:c1:
         c2:da:f4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:27:49 2026 by rpki-client