Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/219376ab-fa5c-31b1-ae6a-b08dcd0c68bf.roa
File:                     219376ab-fa5c-31b1-ae6a-b08dcd0c68bf.roa (raw, json)
Hash identifier:          /Gl1UlWMG2XXHH+jY2fB6oo0HWHbrdtmgkurOAr+hCQ=
Subject key identifier:   FC:EE:1B:02:08:07:31:8C:61:CE:D8:FA:BE:49:89:2C:B0:B4:6B:F8
Certificate issuer:       /CN=7daa4589-66d8-4675-8538-e075ba80ecd3
Certificate serial:       010D0C9F4328584D4EBFA3D996D31B9CABE09900
Authority key identifier: BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/219376ab-fa5c-31b1-ae6a-b08dcd0c68bf.roa
Signing time:             Fri 27 Mar 2026 13:00:40 +0000
ROA not before:           Fri 27 Mar 2026 13:00:40 +0000
ROA not after:            Thu 25 Jun 2026 13:00:40 +0000
asID:                     7029
IP address blocks:        170.39.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4e:bf:a3:d9:96:d3:1b:9c:ab:e0:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7daa4589-66d8-4675-8538-e075ba80ecd3
        Validity
            Not Before: Mar 27 13:00:40 2026 GMT
            Not After : Jun 25 13:00:40 2026 GMT
        Subject: CN=ec21a179-8735-4879-bfb7-a8868b61e845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:71:ca:8f:ba:97:6e:36:06:6b:01:3a:79:a9:
                    fe:c0:5f:ec:05:f3:59:fb:df:b7:fa:34:43:d0:a7:
                    bd:87:ba:5d:f3:f2:c4:94:ed:30:8d:63:a3:6c:13:
                    ae:f4:48:4e:58:23:58:a4:40:a9:bd:87:be:3d:60:
                    62:a9:b1:64:40:34:23:a8:26:54:3a:97:86:8f:c9:
                    45:1a:3a:a9:29:e1:8b:f1:8b:2e:c5:a4:ff:c2:cd:
                    2a:82:ca:90:28:d7:ed:e8:72:f1:7f:26:a0:bf:ba:
                    cb:62:8a:e9:2d:5d:03:83:8c:6d:6d:70:00:01:ae:
                    d3:ef:1e:cd:f0:f4:27:c9:f7:ae:2c:e4:7e:f8:70:
                    3d:e6:06:14:fb:48:7a:00:02:b3:01:79:8d:ad:a4:
                    c2:bd:68:16:36:9b:67:7f:0f:7c:e5:92:60:d6:c6:
                    34:7f:9e:c5:aa:f2:96:37:65:ae:fa:63:6e:2d:ec:
                    a3:a4:d2:93:30:e0:29:e0:8b:0f:b2:0a:74:9b:db:
                    3a:87:91:59:65:a1:f5:6a:0c:c1:b0:18:cb:a7:77:
                    8c:c9:51:b4:89:8a:2d:6d:d0:1c:62:86:28:44:7a:
                    ca:51:68:04:ac:1d:e1:93:d5:af:01:7e:bd:1c:05:
                    94:2d:cb:c1:c6:4d:ad:86:94:76:79:94:be:ff:4c:
                    7b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:EE:1B:02:08:07:31:8C:61:CE:D8:FA:BE:49:89:2C:B0:B4:6B:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/219376ab-fa5c-31b1-ae6a-b08dcd0c68bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl

            X509v3 Authority Key Identifier:
                keyid:BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:f0:f6:06:09:73:8f:78:d2:40:d4:56:db:d2:4e:95:01:64:
         80:ff:02:05:f0:9f:e5:81:fb:44:2c:df:cd:94:02:53:c3:41:
         0f:a0:0b:13:ac:b3:89:5d:ea:64:23:f9:45:b0:93:bd:13:4d:
         ca:d4:3c:d9:5f:51:c1:44:e2:3d:82:66:aa:d1:cc:3f:b1:b7:
         40:4e:75:d3:b6:aa:3d:e9:34:d6:ed:79:50:46:d9:36:46:d6:
         a7:6a:37:cc:b1:ad:dc:cf:c5:99:45:94:e3:d9:f8:80:61:b2:
         58:85:8a:a3:6d:e3:21:e0:dc:5a:81:31:fc:95:c5:48:d4:ab:
         06:e5:bb:c2:31:0b:d6:57:1a:76:f5:e6:c9:23:9c:0f:61:36:
         98:fa:90:7d:ed:3d:53:01:8c:04:1c:7e:0b:a2:68:bd:88:ff:
         2b:9d:6b:ed:37:3c:4d:f9:7a:84:23:dd:5a:5e:a4:0a:e3:55:
         86:09:9e:64:6e:ad:4d:ef:2c:4f:81:46:32:84:be:25:41:67:
         4f:b9:04:7f:65:e4:3a:a3:05:03:e1:cb:c7:a4:bf:37:08:2c:
         c6:da:7c:b6:b7:11:6c:6e:f5:9d:aa:fa:bd:d7:a3:0e:7b:9f:
         2d:7d:bd:0f:48:a2:e7:45:91:63:46:42:06:d7:1b:ee:99:5e:
         ae:87:b3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:49:49 2026 by rpki-client