Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/679482f3-81c1-31cd-a4db-6bedbb6072a4.roa
File:                     679482f3-81c1-31cd-a4db-6bedbb6072a4.roa (raw, json)
Hash identifier:          xy0fu5K0uR0k0ksP2gRiz0xAPOvWwq8YY2IJGGxOtgs=
Subject key identifier:   9E:D6:A1:59:9B:38:9C:8C:87:C0:1F:07:23:B4:2F:76:46:56:AC:2B
Certificate issuer:       /CN=34b715b9-211f-4bf7-ace9-03b3446775ab
Certificate serial:       010D0C9F4328584D4D5A73D5D062F7D88D4927C0
Authority key identifier: A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/679482f3-81c1-31cd-a4db-6bedbb6072a4.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     10317
IP address blocks:        204.155.126.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:73:d5:d0:62:f7:d8:8d:49:27:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b715b9-211f-4bf7-ace9-03b3446775ab
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=eef183d1-3d85-4c61-963e-56e4797fe5d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bc:1b:e5:63:0d:db:16:9c:16:33:55:ba:d5:
                    76:ba:34:f5:75:58:57:53:92:78:c4:54:c4:58:31:
                    fe:0a:99:e1:a1:53:d5:34:74:b2:41:f2:34:8f:b7:
                    27:88:78:fe:2f:f4:df:eb:06:68:da:97:7d:1e:4c:
                    ae:93:86:9b:09:a9:c8:50:68:58:4f:52:50:f7:a1:
                    14:df:9f:ff:77:42:eb:df:67:b3:0a:ae:bd:d5:92:
                    3b:cd:5c:b8:b2:3b:0f:56:10:af:69:09:71:15:56:
                    ef:44:58:20:4a:0e:a2:1a:30:35:23:8d:80:a8:41:
                    55:16:0a:6e:5e:5d:23:9d:f4:fe:30:9c:6a:38:26:
                    5b:cb:70:20:34:c1:ed:d1:97:62:a8:7d:6b:d6:68:
                    a5:ba:d6:9b:73:98:e7:08:a6:20:10:e6:f1:91:37:
                    45:55:e4:18:7b:45:ae:ce:c8:45:f1:dc:0b:ad:39:
                    e9:49:fd:fc:98:58:af:d5:91:1a:ea:52:8e:f1:16:
                    73:c9:e5:d8:df:86:07:fe:1d:78:65:7e:e2:0a:f5:
                    e0:52:1e:e7:16:fe:d1:48:b2:39:7c:20:df:2d:40:
                    28:e4:ec:22:29:91:97:6d:74:de:6e:1b:3c:b6:bb:
                    eb:ec:e5:2f:b1:58:2b:c1:00:98:95:bd:94:e9:e1:
                    e1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D6:A1:59:9B:38:9C:8C:87:C0:1F:07:23:B4:2F:76:46:56:AC:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/679482f3-81c1-31cd-a4db-6bedbb6072a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl

            X509v3 Authority Key Identifier:
                keyid:A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.155.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:d6:11:96:73:1f:19:3c:c9:c4:49:95:53:4a:1a:56:8b:5d:
         e9:1f:74:da:fb:65:d4:01:d2:ab:9a:ff:5c:63:e0:b6:02:80:
         c7:a1:1b:92:11:b4:d0:c0:7c:51:de:50:a0:9e:4c:ba:58:af:
         52:28:3d:aa:46:51:7d:7b:a1:c0:7a:e1:da:82:8e:11:a2:af:
         ab:68:b2:e0:85:81:ac:7f:31:23:ce:18:9c:61:cb:a0:17:24:
         f4:e8:83:bc:a4:b2:1d:16:e6:c3:fc:75:97:6e:1e:6a:2b:20:
         e5:50:8e:31:e7:a0:b4:9e:22:5c:b4:3e:64:87:1b:7a:66:a9:
         25:83:6e:92:c5:40:04:d4:47:f7:18:17:27:a8:a2:28:03:eb:
         5b:db:55:12:03:e2:2c:43:f2:77:bb:67:23:6b:83:97:76:09:
         a7:79:fc:ff:90:4b:32:ad:00:7a:e9:2f:e6:42:ba:71:18:e0:
         91:e7:5a:03:59:95:3b:71:cf:6f:5e:a7:eb:5c:04:92:dd:aa:
         c7:f3:93:6f:00:4d:c0:03:1b:93:59:8e:8a:0b:ce:24:74:84:
         67:d1:45:9a:0b:e7:b9:83:d0:3c:1b:2b:d7:0a:3b:de:bf:aa:
         16:d0:84:0a:0e:4f:6b:93:a9:60:b2:3d:54:33:41:75:5f:76:
         67:c8:66:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:52:03 2026 by rpki-client