Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/f1cdda9e-83f8-3ccb-b1c2-5a941832c8dd.roa
File:                     f1cdda9e-83f8-3ccb-b1c2-5a941832c8dd.roa (raw, json)
Hash identifier:          jNS1GnhJTRpc/i6ynzwfG33m5gWvaWGxqk7yZA+kk2Q=
Subject key identifier:   97:B3:46:62:D9:05:31:84:83:B9:9D:1A:1A:12:2C:FF:C4:60:EE:E2
Certificate issuer:       /CN=e3fada49-b353-4a69-9b32-1b6ab3729db1
Certificate serial:       010D0C9F4328584D869558415094848FD05B0F6C
Authority key identifier: 26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/f1cdda9e-83f8-3ccb-b1c2-5a941832c8dd.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     3855
IP address blocks:        204.13.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:58:41:50:94:84:8f:d0:5b:0f:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3fada49-b353-4a69-9b32-1b6ab3729db1
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=8a333756-3f26-43f6-99d8-c39e1f79bf27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b7:64:e4:6f:da:11:df:ba:2f:5b:5e:95:86:
                    e3:c5:0f:d6:b5:27:a1:46:90:8a:fd:90:6b:94:26:
                    9a:f7:07:cf:2a:2a:ee:02:fd:cc:83:46:f1:22:15:
                    0c:4b:b7:7b:06:45:31:77:f1:48:a6:14:73:93:cd:
                    b9:cd:4c:6f:16:72:e6:ac:82:ac:4f:c2:9c:45:33:
                    73:ba:2e:65:75:3c:67:cf:0e:8f:50:cf:62:7d:a5:
                    f9:6a:da:55:89:e7:d8:2b:b2:2f:4a:4a:b0:1c:56:
                    8d:73:b5:95:c2:fd:45:f5:7c:87:c7:39:c1:f4:42:
                    76:cd:81:e0:27:72:fc:9e:ab:17:86:c7:c9:8e:11:
                    25:dc:32:4b:e0:4d:b0:74:bd:02:39:00:fc:e5:34:
                    f1:12:1c:94:81:ee:fc:a2:13:54:e5:de:ec:8e:b5:
                    17:2d:45:38:9b:e5:f6:97:df:94:27:e2:87:a8:3e:
                    4b:66:aa:83:44:1d:aa:2c:31:69:0c:17:4c:a2:80:
                    42:c0:87:66:a8:ad:71:5a:b0:dd:19:49:bc:c4:37:
                    37:f9:fd:bc:e4:28:d2:81:9e:5e:db:d2:ae:21:51:
                    d3:3e:47:a6:0d:09:14:ee:8b:7d:e2:dc:38:9e:67:
                    eb:bf:a7:f6:15:8a:2b:2d:0c:44:6a:ab:99:7d:34:
                    bf:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B3:46:62:D9:05:31:84:83:B9:9D:1A:1A:12:2C:FF:C4:60:EE:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/f1cdda9e-83f8-3ccb-b1c2-5a941832c8dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl

            X509v3 Authority Key Identifier:
                keyid:26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.13.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:8f:3b:c9:86:8f:4a:9e:18:b9:71:11:c1:ba:b9:93:be:53:
         7e:3b:26:3d:81:fe:b9:79:dd:2f:3c:9e:d0:22:2c:50:0c:f3:
         b0:5a:34:66:0c:8c:7f:d2:f2:06:db:0c:d6:40:7e:0c:7e:84:
         18:04:51:f9:0c:e2:20:ac:c5:22:7f:24:7d:bf:64:57:c5:d4:
         27:2a:60:4d:38:78:0b:84:c9:99:09:a2:97:9e:f5:77:a6:b2:
         18:1b:a1:a5:07:51:64:57:43:b2:8b:89:da:be:b9:0f:54:1f:
         81:a4:f3:36:81:3f:00:f9:fd:1c:b4:b9:d2:1c:2b:fc:ff:a5:
         9e:ad:91:f1:b7:46:f4:09:ca:64:5d:dc:ff:a8:26:92:24:38:
         db:1e:d3:f2:fc:3c:90:f3:9b:0f:21:b4:13:b9:73:a1:3c:ed:
         03:8e:57:df:f0:51:1b:4b:0f:2a:70:84:40:0c:dc:e2:a6:f8:
         09:98:ae:fc:b9:00:1d:84:7b:a0:0b:26:af:91:c6:4b:83:57:
         60:77:a2:04:e6:c3:ba:e5:af:60:74:76:ba:7b:e9:26:34:91:
         8d:f5:e5:03:43:e7:4b:72:0e:04:71:9a:84:48:dc:b4:37:d6:
         b9:dd:69:59:49:a2:21:99:50:be:91:19:e7:cb:45:8a:b4:c4:
         0c:a9:0b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:08:36 2026 by rpki-client