Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/dc3d2a5e-253d-44d5-958b-73b117b3f0ee/210f5da1-4dae-32bf-a885-331ed12df066.roa
File:                     210f5da1-4dae-32bf-a885-331ed12df066.roa (raw, json)
Hash identifier:          9s+YejZhsnDBkOCGAl9UdYX/be1cjlt/gcAmNl7gRsw=
Subject key identifier:   58:71:9E:5B:AC:B9:0B:14:7F:1D:2C:E8:88:CA:1A:D6:05:B5:1E:36
Certificate issuer:       /CN=dc3d2a5e-253d-44d5-958b-73b117b3f0ee
Certificate serial:       010D0C9F4328584E9954FAEDF5AABEA160424980
Authority key identifier: CA:BD:1B:2C:06:C2:42:13:7B:CF:0C:5F:51:5D:2E:2C:6F:CC:48:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/dc3d2a5e-253d-44d5-958b-73b117b3f0ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/dc3d2a5e-253d-44d5-958b-73b117b3f0ee/210f5da1-4dae-32bf-a885-331ed12df066.roa
Signing time:             Thu 23 Jul 2026 22:58:25 +0000
ROA not before:           Thu 23 Jul 2026 22:58:25 +0000
ROA not after:            Wed 21 Oct 2026 22:58:25 +0000
asID:                     396982
IP address blocks:        170.105.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/dc3d2a5e-253d-44d5-958b-73b117b3f0ee/dc3d2a5e-253d-44d5-958b-73b117b3f0ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/dc3d2a5e-253d-44d5-958b-73b117b3f0ee/dc3d2a5e-253d-44d5-958b-73b117b3f0ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/dc3d2a5e-253d-44d5-958b-73b117b3f0ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:99:54:fa:ed:f5:aa:be:a1:60:42:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc3d2a5e-253d-44d5-958b-73b117b3f0ee
        Validity
            Not Before: Jul 23 22:58:25 2026 GMT
            Not After : Oct 21 22:58:25 2026 GMT
        Subject: CN=de7a9c5b-697d-4cb2-9fb7-54ece99dc92e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:80:95:54:16:98:e6:25:af:19:ba:14:69:bc:
                    0f:dd:1d:76:fb:e2:cd:d2:0a:11:ad:01:61:f7:c7:
                    1a:5f:01:9a:20:3c:25:be:b0:56:fb:d4:c7:29:82:
                    29:6d:10:6f:2a:25:c2:10:42:93:e4:7c:e9:51:a1:
                    b2:88:a3:32:36:d1:62:11:ed:a4:87:ea:7d:6e:96:
                    ef:0d:72:a7:4e:77:dc:77:a8:0a:dd:11:f0:2e:b1:
                    44:61:2a:99:4d:c6:80:e1:cb:0c:10:dc:bd:16:b4:
                    70:54:10:fa:6d:f6:33:cd:d8:c5:f3:39:3a:59:d4:
                    d9:6a:e0:f0:b5:ce:e4:db:c9:f9:fc:6f:a3:0f:89:
                    5a:c4:5d:73:3c:4a:60:11:44:b5:26:d9:01:3f:f5:
                    89:1b:a0:5e:ef:e0:c2:5a:77:bd:53:b0:a1:b4:69:
                    79:cb:99:a5:63:d2:88:bc:54:26:ad:fb:91:f9:89:
                    3c:2d:37:eb:38:9d:83:3f:e8:b7:ea:af:91:91:4a:
                    7c:7c:a3:c4:55:32:19:cf:de:b8:86:cc:d2:be:ae:
                    44:3f:24:54:85:33:fc:38:38:5f:d7:e7:ef:15:76:
                    26:fa:11:1b:45:6a:92:c9:16:c8:b3:09:31:47:05:
                    60:67:b2:5f:42:21:58:01:17:c9:66:4d:50:01:25:
                    2c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:71:9E:5B:AC:B9:0B:14:7F:1D:2C:E8:88:CA:1A:D6:05:B5:1E:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/dc3d2a5e-253d-44d5-958b-73b117b3f0ee/210f5da1-4dae-32bf-a885-331ed12df066.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/dc3d2a5e-253d-44d5-958b-73b117b3f0ee/dc3d2a5e-253d-44d5-958b-73b117b3f0ee.crl

            X509v3 Authority Key Identifier:
                keyid:CA:BD:1B:2C:06:C2:42:13:7B:CF:0C:5F:51:5D:2E:2C:6F:CC:48:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/dc3d2a5e-253d-44d5-958b-73b117b3f0ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.105.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:c6:12:36:8a:b9:37:93:40:e4:a5:56:36:b7:1b:d7:c2:5c:
         de:ca:e1:ee:70:4c:bc:9f:74:39:25:ec:f1:0c:0d:c5:3d:d0:
         fb:f3:58:8e:30:fc:9a:fc:36:a5:ee:6a:1f:84:fd:0b:e2:23:
         a0:60:d4:97:11:38:f8:fb:73:1b:cc:9e:42:de:67:c3:de:b8:
         27:70:6a:73:43:51:2b:9c:e2:e2:62:a9:c6:a6:b1:8e:47:82:
         68:4d:28:af:e0:74:b7:68:9d:e0:88:1b:ec:94:2e:16:2b:8f:
         8b:cd:36:7c:e5:df:63:38:ae:d4:dd:2f:42:39:66:b2:39:06:
         ea:e5:b7:13:b1:db:79:b1:29:5b:30:7a:31:4f:29:9b:b7:d4:
         82:66:d3:05:f5:3a:1a:b9:d0:5f:35:e5:61:af:6c:6a:a5:ab:
         53:99:aa:7a:87:d3:48:e5:1a:b2:53:cf:04:ae:d9:e5:8f:ad:
         89:dc:32:74:eb:a0:36:66:b1:cf:bc:a9:23:9a:e0:6d:77:4f:
         4d:0c:d5:1e:33:b4:7f:a9:fe:a8:0d:7c:e2:64:99:d9:96:17:
         69:56:16:f0:a7:75:74:17:d1:26:e5:ce:c6:cc:ef:7d:95:68:
         37:ba:6e:e2:c7:23:16:7c:25:41:48:ac:e1:10:e0:96:ac:34:
         f5:33:1c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:41:18 2026 by rpki-client