Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3/8ff51c7e-6d24-3e09-b5e2-2e7323efd1ec.roa
File:                     8ff51c7e-6d24-3e09-b5e2-2e7323efd1ec.roa (raw, json)
Hash identifier:          yvZsYTraBH5IXlpW25/pIYUtn9Tx/aRz8GCW+/QRyG0=
Subject key identifier:   E9:7A:68:3F:3A:78:19:64:4F:A2:0F:CD:C4:50:20:15:1C:21:D5:58
Certificate issuer:       /CN=9cc943d8-e468-4794-9399-2ba32cf0dad3
Certificate serial:       010D0C9F4328584D4D5A57EE94BEB6C4F1B6E680
Authority key identifier: 88:6B:99:8B:24:2C:6A:9F:82:E4:47:37:A2:2A:06:D3:D5:4D:4F:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3/8ff51c7e-6d24-3e09-b5e2-2e7323efd1ec.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     397833
IP address blocks:        185.77.142.0/24 maxlen: 24
                          192.95.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3/9cc943d8-e468-4794-9399-2ba32cf0dad3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3/9cc943d8-e468-4794-9399-2ba32cf0dad3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:57:ee:94:be:b6:c4:f1:b6:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cc943d8-e468-4794-9399-2ba32cf0dad3
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=09f77e3e-adc0-4f07-882d-919d0e9b8dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8e:33:dd:46:0c:a8:5d:1a:37:d1:96:71:b4:
                    d2:9e:db:48:0e:25:dd:6c:59:1a:65:ad:2e:bd:92:
                    ba:c4:f5:89:2a:85:8a:5c:82:95:c4:db:5d:91:5f:
                    e6:e3:34:c9:02:b0:8b:97:df:25:74:3e:b5:01:11:
                    3c:03:e7:d5:0d:db:a7:c9:58:e7:fd:61:df:78:8e:
                    a0:e2:a7:d8:d0:d9:6f:3d:07:d5:08:10:b8:84:32:
                    7c:e1:c9:3f:f4:5d:6c:65:9c:e5:db:0d:86:16:7c:
                    f2:56:78:08:8e:43:72:20:49:49:c8:0c:a2:2d:26:
                    77:3e:2a:89:cf:91:0e:3c:03:6e:20:36:e0:6b:7a:
                    0e:90:ef:04:70:40:52:77:d0:c4:2c:cd:fb:94:6c:
                    51:1e:fe:58:21:4c:4d:51:54:f5:34:ea:8d:56:de:
                    dd:6d:be:3b:e4:e9:7e:22:a4:59:3d:6f:cd:c7:26:
                    3f:5b:df:d8:17:3f:45:9b:68:d0:53:3c:a6:e7:18:
                    24:4b:b0:4c:fa:8f:44:3b:db:b6:8e:fd:88:88:db:
                    92:4f:a1:2b:9d:bf:61:9e:b9:73:20:f3:e7:d7:ce:
                    a0:c5:e9:72:1a:75:a5:32:83:21:3d:30:0a:5e:92:
                    ab:3a:72:16:86:76:ec:3a:02:fe:ea:25:46:03:4b:
                    b0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:7A:68:3F:3A:78:19:64:4F:A2:0F:CD:C4:50:20:15:1C:21:D5:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3/8ff51c7e-6d24-3e09-b5e2-2e7323efd1ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3/9cc943d8-e468-4794-9399-2ba32cf0dad3.crl

            X509v3 Authority Key Identifier:
                keyid:88:6B:99:8B:24:2C:6A:9F:82:E4:47:37:A2:2A:06:D3:D5:4D:4F:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.77.142.0/24
                  192.95.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:2a:76:83:66:52:ea:df:6f:92:36:b3:6c:a2:e6:ba:13:13:
         71:ac:e5:ce:94:1a:0f:81:4a:e4:cd:73:de:e7:24:8a:78:ea:
         64:5b:25:4b:ac:03:29:10:e2:e0:fc:6b:d5:15:79:9f:8a:d9:
         22:be:0c:e6:78:e2:36:bb:bf:d4:46:31:21:af:01:31:d2:ad:
         68:60:41:b6:dd:fa:7d:50:3a:72:44:fb:af:f2:a4:ed:19:46:
         4c:91:c2:4d:ae:65:38:6f:e0:d8:3a:63:3e:06:17:36:d4:68:
         db:3b:93:25:2a:3b:ad:fa:c1:f4:22:10:77:75:fd:08:15:fa:
         0d:e0:e3:b6:9f:cc:4a:24:34:3f:90:aa:19:15:bb:9a:f6:38:
         2f:81:86:23:0c:62:0c:cc:fd:0f:a9:aa:48:69:0a:31:66:a9:
         5e:82:fd:4a:12:16:04:dd:dd:09:72:50:50:b6:9b:2d:76:75:
         a4:df:bb:4b:c6:d0:2d:c2:2a:5d:36:84:8e:d2:ae:c5:8a:82:
         00:3e:c2:9c:2e:18:01:17:34:2a:25:65:40:58:1f:b6:d8:bd:
         2d:41:5d:e4:59:36:f8:a4:8b:a7:8d:4e:5e:28:b0:fe:05:44:
         52:f1:ac:9f:55:a1:9e:bc:9a:d8:6e:d4:47:ac:28:d6:33:c3:
         94:16:20:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:24:38 2026 by rpki-client