Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/c2d4ec79-6007-3311-ba02-f70eac46f6c5.roa
File:                     c2d4ec79-6007-3311-ba02-f70eac46f6c5.roa (raw, json)
Hash identifier:          GmHnP1zcV3h6/scgRtrqiSNj399aopLVNU7by4r2cHE=
Subject key identifier:   C3:55:6F:00:A1:87:1C:AF:AA:DB:FF:4E:A6:31:2C:A4:CD:B7:17:9A
Certificate issuer:       /CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
Certificate serial:       010D0C9F4328584D6C0FB7F922FFADB27DABC240
Authority key identifier: B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/c2d4ec79-6007-3311-ba02-f70eac46f6c5.roa
Signing time:             Tue 07 Apr 2026 01:00:23 +0000
ROA not before:           Tue 07 Apr 2026 01:00:23 +0000
ROA not after:            Mon 06 Jul 2026 01:00:23 +0000
asID:                     30041
IP address blocks:        207.171.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6c:0f:b7:f9:22:ff:ad:b2:7d:ab:c2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343
        Validity
            Not Before: Apr  7 01:00:23 2026 GMT
            Not After : Jul  6 01:00:23 2026 GMT
        Subject: CN=10cf20fd-cd2b-410c-870b-3960ba4cec54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c3:d8:56:cb:de:6c:33:de:0a:5b:53:0b:56:
                    9e:8a:2f:77:d2:46:9a:02:16:50:7b:3c:1f:11:2d:
                    a0:6f:db:f7:7c:e0:f8:51:3e:2e:d1:db:d5:95:bc:
                    65:52:67:20:c5:ba:fa:8b:a8:7e:f2:79:35:59:ee:
                    2d:92:36:d2:d7:f5:df:02:ac:02:eb:81:ac:09:9d:
                    69:6d:d3:60:2c:e6:d5:7c:95:0c:a1:6b:87:42:25:
                    d7:8c:f0:34:3c:0f:54:d3:43:49:7b:83:b5:47:f3:
                    7f:d8:71:a2:6d:45:3d:97:9e:04:f4:c9:02:4d:af:
                    91:cc:88:1f:08:ea:b8:90:5f:7a:1d:82:2e:ed:16:
                    d7:00:8e:42:16:1f:93:af:56:34:86:fa:a2:bf:c6:
                    61:4c:af:f7:22:25:06:1b:a4:01:db:fb:0b:9f:5d:
                    47:36:fe:05:e1:47:c2:02:ba:6d:bc:00:48:b1:88:
                    02:7c:a8:e2:bd:bb:44:23:ae:6e:eb:13:64:9a:db:
                    0f:7c:1f:8e:59:e7:40:f1:2a:e0:ef:6f:00:ab:59:
                    90:90:a7:18:29:f5:51:d2:51:8a:22:38:88:4a:a6:
                    c1:02:ca:cb:de:ef:c0:80:d6:f9:3d:bb:e5:d7:07:
                    cd:9f:10:c2:a8:2f:93:08:40:ff:3e:ae:4f:d5:a2:
                    19:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:55:6F:00:A1:87:1C:AF:AA:DB:FF:4E:A6:31:2C:A4:CD:B7:17:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/c2d4ec79-6007-3311-ba02-f70eac46f6c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl

            X509v3 Authority Key Identifier:
                keyid:B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.171.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:0c:3d:c0:dc:aa:98:12:a1:37:c1:01:81:ba:b5:d0:72:cb:
         92:26:6c:2e:f1:eb:59:61:ec:7d:c1:ab:35:02:b2:44:2e:7b:
         6a:33:fa:7b:cd:d0:77:53:3c:9b:27:7e:3c:5c:31:94:bc:04:
         42:d2:dc:78:cb:48:ef:66:80:a0:81:66:68:7e:90:46:9e:c5:
         80:15:a6:58:77:6c:75:83:d2:de:c6:95:74:73:4e:79:fc:92:
         1b:b7:b5:1e:70:0b:47:b6:46:04:62:a8:74:40:27:a7:ea:78:
         42:22:6b:36:2f:2c:c0:69:44:e0:37:56:96:0e:c2:f2:bd:36:
         6c:28:10:db:bf:44:a6:87:19:c8:3c:3e:09:6d:85:60:ab:3c:
         9c:3f:ca:fd:cb:31:5b:33:8a:26:ce:f3:1e:64:22:b9:63:7f:
         c3:0b:ab:08:60:53:cf:b4:84:bd:b4:30:36:fa:eb:56:f8:b5:
         9d:ed:c3:dd:b5:57:98:38:34:50:4e:43:e3:d9:c4:34:50:93:
         11:20:d1:01:f6:c5:df:67:14:7c:d0:b5:07:c0:7a:aa:42:b5:
         83:0b:29:f7:04:54:24:09:b2:b1:6e:9e:94:28:e2:b9:e1:ab:
         57:ea:18:46:5b:63:bb:7a:5f:54:49:04:35:1c:cf:2f:68:95:
         e7:9d:13:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:43:06 2026 by rpki-client