Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7997a51b-ca8d-4bb7-a3e4-7db0ea68690f/b3a343da-d267-3e5a-ad11-e1cd417c2011.roa
File:                     b3a343da-d267-3e5a-ad11-e1cd417c2011.roa (raw, json)
Hash identifier:          Wm+4y9jMNed2xKFj3NqgMmatguIw3StzSRDK3i6Wess=
Subject key identifier:   3B:EF:4A:6E:12:69:37:3E:E0:65:F6:13:6F:2A:1E:A0:7D:42:7C:AC
Certificate issuer:       /CN=7997a51b-ca8d-4bb7-a3e4-7db0ea68690f
Certificate serial:       010D0C9F4328584D746FBC93CA1E1EB5C79290E0
Authority key identifier: 53:A6:C1:14:E6:5F:FD:B6:57:2D:DC:BA:8A:87:9B:51:E7:03:67:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7997a51b-ca8d-4bb7-a3e4-7db0ea68690f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7997a51b-ca8d-4bb7-a3e4-7db0ea68690f/b3a343da-d267-3e5a-ad11-e1cd417c2011.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     1239
IP address blocks:        167.14.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7997a51b-ca8d-4bb7-a3e4-7db0ea68690f/7997a51b-ca8d-4bb7-a3e4-7db0ea68690f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7997a51b-ca8d-4bb7-a3e4-7db0ea68690f/7997a51b-ca8d-4bb7-a3e4-7db0ea68690f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7997a51b-ca8d-4bb7-a3e4-7db0ea68690f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:bc:93:ca:1e:1e:b5:c7:92:90:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997a51b-ca8d-4bb7-a3e4-7db0ea68690f
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=8a4f5916-b9ef-4ece-963b-c47f1f9cace1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b5:ca:fb:ec:f2:38:6f:83:9e:63:81:a4:77:
                    b0:aa:4d:16:55:6d:e2:39:c4:8d:e6:0e:1e:96:a0:
                    0b:b2:f0:f2:d1:be:d1:ce:43:04:b9:53:33:fe:90:
                    6a:24:f4:f6:9f:9b:33:96:12:40:9d:1a:db:fc:dc:
                    74:da:b1:cb:66:8c:39:a0:84:97:f1:d0:f4:8a:f1:
                    57:42:5f:5c:c5:8d:06:36:41:2b:c4:00:c8:73:b7:
                    b4:3c:f1:be:81:e6:62:56:d0:38:ad:eb:5a:8d:b2:
                    6c:2b:cb:4d:8f:5e:55:e6:c4:25:ac:ec:c3:63:04:
                    17:28:bd:44:b8:3b:53:7a:60:8b:6f:b5:d6:c9:f0:
                    10:2e:9d:a2:d0:b3:30:06:f8:b4:3b:dc:9e:ec:bb:
                    db:af:75:73:37:c9:ce:e0:3a:9f:d8:07:a3:b6:ae:
                    3c:87:01:3f:a1:5e:c0:71:f3:0c:e9:86:78:76:07:
                    d6:bf:95:59:bb:4e:f9:2c:89:cf:5e:37:33:78:8c:
                    75:50:6b:b2:27:81:cf:da:00:c3:96:5d:a3:e2:50:
                    47:c4:85:56:2d:07:23:af:5c:60:9b:39:fb:ae:7a:
                    9b:e9:a2:3d:06:de:f2:fb:1b:27:fb:c7:15:ef:3b:
                    4b:18:ff:4f:7d:3a:9e:78:22:4c:de:ec:bb:91:1e:
                    91:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:EF:4A:6E:12:69:37:3E:E0:65:F6:13:6F:2A:1E:A0:7D:42:7C:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7997a51b-ca8d-4bb7-a3e4-7db0ea68690f/b3a343da-d267-3e5a-ad11-e1cd417c2011.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7997a51b-ca8d-4bb7-a3e4-7db0ea68690f/7997a51b-ca8d-4bb7-a3e4-7db0ea68690f.crl

            X509v3 Authority Key Identifier:
                keyid:53:A6:C1:14:E6:5F:FD:B6:57:2D:DC:BA:8A:87:9B:51:E7:03:67:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7997a51b-ca8d-4bb7-a3e4-7db0ea68690f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.14.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:f8:74:d6:d4:bf:ac:47:bc:22:e2:67:17:19:a1:b2:e9:c0:
         51:b5:16:aa:78:d7:52:95:98:24:86:12:f7:7d:28:b2:90:12:
         00:31:74:d0:08:74:9a:1f:3d:66:9f:ed:a7:69:7f:9a:c3:bd:
         6e:1b:66:be:40:6a:0e:25:a8:ee:43:e3:2c:ed:28:18:9e:3f:
         ae:d9:1b:03:1c:8e:00:bb:18:84:e3:d8:12:da:27:8c:78:0f:
         95:f2:52:9d:dc:6b:53:0f:8e:4b:25:79:61:a3:ec:52:47:11:
         30:87:64:c0:2e:2d:f0:fd:03:37:57:3c:36:02:bf:5c:65:6f:
         a1:43:33:f9:a0:35:5d:a8:41:a5:e7:b5:46:49:a2:9d:5c:1e:
         e8:9e:41:97:f3:cb:1b:3f:1b:18:03:40:e8:bf:cd:66:9e:22:
         c5:a4:74:cb:15:4d:da:9a:c0:78:66:4f:38:03:db:0a:b4:51:
         28:f7:86:53:83:01:6d:c0:b4:c8:9c:a3:4a:0d:64:db:c5:02:
         c2:2f:97:e5:0c:50:f9:be:09:e0:7c:6c:03:5e:a1:2a:83:62:
         50:d2:dd:ca:51:39:b0:e0:71:6a:08:53:00:67:72:fd:63:28:
         1b:0f:b3:3b:56:ab:13:af:71:24:bd:7b:ab:f5:28:84:55:bc:
         64:d4:c6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:58:02 2026 by rpki-client