Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/30f87a7d-64ce-318f-85a0-b9500c3737a3.roa
File:                     30f87a7d-64ce-318f-85a0-b9500c3737a3.roa (raw, json)
Hash identifier:          n2UlsHFnUvFovwMzychupJZ1VkINaU8i52//VWaQeP8=
Subject key identifier:   32:45:0F:F1:1B:BA:FD:BF:43:EB:AA:4F:C4:03:AB:8B:91:7B:D3:DA
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584CF6ECDA978B0110A0CCBF8AC0
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/30f87a7d-64ce-318f-85a0-b9500c3737a3.roa
Signing time:             Tue 24 Feb 2026 02:00:31 +0000
ROA not before:           Tue 24 Feb 2026 02:00:31 +0000
ROA not after:            Mon 25 May 2026 01:00:31 +0000
asID:                     13768
IP address blocks:        209.15.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f6:ec:da:97:8b:01:10:a0:cc:bf:8a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Feb 24 02:00:31 2026 GMT
            Not After : May 25 01:00:31 2026 GMT
        Subject: CN=39744b98-056d-4869-977d-a9a81300413f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c8:3d:19:b1:83:69:c5:71:e9:80:71:f0:b5:
                    d7:aa:27:0a:24:96:a3:bf:6e:6a:36:65:3c:e8:3d:
                    c5:b6:c5:94:93:58:05:6a:ec:8c:d6:35:32:e2:74:
                    47:68:49:f7:8d:65:4a:c6:c4:d9:b9:ea:f2:04:bd:
                    34:8d:10:30:df:7c:cc:1b:3a:8f:17:48:2a:d1:a5:
                    e0:e8:f6:b3:9c:b3:2a:4a:44:cf:f4:0e:c7:95:32:
                    84:e9:69:0f:b3:1d:16:84:ee:81:e1:42:cd:8f:19:
                    8e:1c:b6:62:30:4f:81:8f:c9:78:a2:e1:71:77:0c:
                    54:b4:d5:0b:64:fc:c7:00:50:8a:98:c5:f1:f7:7f:
                    0a:ac:8a:aa:73:be:81:bf:82:e9:6e:f7:9c:e3:80:
                    dd:37:be:26:0c:ed:4e:5a:db:35:27:08:cd:b2:ab:
                    da:52:1a:e4:36:06:30:3c:fa:51:c6:9e:49:c7:1c:
                    aa:c2:e2:0d:ec:30:3f:55:56:bc:58:dd:2d:12:88:
                    51:3f:d6:83:a8:24:48:54:7b:53:3e:0c:6e:a0:4b:
                    30:b9:55:17:63:46:6b:1d:54:4a:24:50:80:3c:1a:
                    00:1e:b0:db:bd:b9:d2:3f:92:70:f8:a8:d5:f1:d2:
                    c9:aa:4b:08:da:ed:9a:bc:12:5e:85:b0:99:0d:2e:
                    f7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:45:0F:F1:1B:BA:FD:BF:43:EB:AA:4F:C4:03:AB:8B:91:7B:D3:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/30f87a7d-64ce-318f-85a0-b9500c3737a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.15.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:57:6f:b9:1f:93:01:9e:f5:d6:0b:06:cc:4f:f8:29:86:ce:
         39:50:e2:ee:60:6e:ba:1f:c7:09:1c:a7:1c:2d:b0:5f:31:99:
         af:2d:4b:a5:48:82:70:fa:c0:2c:05:7a:dd:b0:3b:e5:d9:13:
         a3:c2:c0:0e:f1:55:a1:d3:3a:59:d6:f6:03:c5:b3:30:1b:09:
         55:d0:e8:57:fc:19:e1:29:96:8f:2f:a4:f2:32:6d:92:6d:c8:
         bb:62:7a:90:2a:03:ba:e6:13:2d:88:0e:27:da:88:65:d5:b8:
         1c:f8:34:b9:18:fd:d4:0a:5d:5b:2a:16:b3:f9:66:80:58:74:
         5a:7b:b0:a6:c2:87:78:6c:76:20:b0:c5:6c:34:b3:e0:01:1b:
         72:eb:86:c9:41:db:bb:15:ff:01:ac:94:34:fe:df:98:22:74:
         ac:ec:a8:00:a0:1f:54:50:ff:57:3c:9f:73:b7:2c:26:84:28:
         de:d0:a0:a1:74:ee:dd:1b:f0:97:33:67:c5:ce:f5:d3:5d:f4:
         a5:a2:b2:de:e4:17:ca:28:c5:61:3f:69:94:df:d3:1f:32:5e:
         6a:a6:2d:31:85:07:4d:da:ee:78:ef:de:b2:d8:4b:0b:0e:21:
         90:5b:7a:4f:ab:0d:3a:61:4e:f5:44:6c:bd:c2:cd:af:55:cc:
         1a:67:89:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:56:39 2026 by rpki-client