Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/dd23a297-9090-3b2d-9314-1ec32fcaff2e.roa
File:                     dd23a297-9090-3b2d-9314-1ec32fcaff2e.roa (raw, json)
Hash identifier:          RO1tYAQ/jIO7IGREdkgalQDu3im1Zm9WO69q2Rr4H5w=
Subject key identifier:   92:AD:4D:BD:09:F6:A8:F4:04:F5:67:04:1E:AC:D5:1D:4F:A4:8E:A0
Certificate issuer:       /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5
Certificate serial:       010D0C9F4328584D67DFC4BAB0FD2007243FE800
Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/dd23a297-9090-3b2d-9314-1ec32fcaff2e.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     5744
IP address blocks:        151.207.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:c4:ba:b0:fd:20:07:24:3f:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=bce56cb9-66d2-4bb5-9479-efe0ea9c8c56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0c:9f:e7:5e:af:f7:58:69:0a:00:6f:4f:c1:
                    bf:5c:53:55:43:e7:cc:26:2b:1b:fc:35:6c:2e:db:
                    dc:63:35:55:7d:0b:c2:25:79:32:12:e2:cd:e1:51:
                    cf:24:ee:6d:83:01:3e:b2:d7:f2:60:8f:8c:63:51:
                    3e:bd:d8:0b:75:28:15:35:af:22:e3:50:be:fe:39:
                    b5:bf:e7:d7:02:86:3c:13:a5:5a:3c:a0:7f:ad:dd:
                    45:18:01:c9:89:d1:d2:c1:e4:c6:5d:bb:53:3b:1e:
                    36:f9:64:5d:1e:30:50:52:0b:07:20:72:11:1f:c0:
                    c3:5f:08:14:38:a1:ce:0f:cc:f3:79:8b:4e:f4:4a:
                    5e:1a:95:62:94:10:29:76:92:2d:12:4b:33:4e:b9:
                    4b:39:fb:b6:db:9d:89:11:29:58:bc:0f:bf:5f:f4:
                    5f:d2:3a:9d:e2:23:30:89:3a:b1:b0:3a:56:65:9d:
                    c4:7d:2e:ae:9d:a3:f5:79:af:24:67:28:48:8e:23:
                    6b:a9:71:69:23:4e:cf:fa:7f:cd:d5:9a:8c:de:af:
                    4f:3a:87:33:e5:bc:c5:d7:02:85:0c:af:c2:49:95:
                    38:3d:58:41:9e:1c:57:78:76:85:78:68:d6:62:cc:
                    a1:58:87:ad:2e:15:1b:82:99:38:26:de:dc:62:d3:
                    4a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:AD:4D:BD:09:F6:A8:F4:04:F5:67:04:1E:AC:D5:1D:4F:A4:8E:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/dd23a297-9090-3b2d-9314-1ec32fcaff2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl

            X509v3 Authority Key Identifier:
                keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.207.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:1f:b5:ef:a0:5a:30:cc:90:9a:b6:d8:0c:5a:e7:41:fd:c6:
         ec:ee:f8:77:3c:fc:ec:1b:30:97:94:4a:29:87:03:5b:96:f1:
         71:1e:03:3d:73:87:91:42:31:51:14:e3:14:e0:2b:7c:c1:66:
         48:5d:dc:94:7d:9b:41:4d:b5:c2:78:cb:20:c3:35:7b:d5:54:
         42:3e:78:b7:5b:8b:92:42:23:7e:a1:8e:e2:60:84:01:6b:06:
         64:90:e7:7d:17:be:7a:ed:2b:d9:4f:af:a5:0b:b3:fa:5b:19:
         7e:f5:8e:ed:e1:de:05:5e:07:89:2b:7e:97:34:06:8f:49:66:
         5d:f3:f9:70:ae:92:b6:8e:63:23:ba:26:02:c3:6b:72:f9:5e:
         fa:69:35:53:aa:c1:d5:0f:6d:f9:4e:22:b1:c1:b8:18:60:39:
         fe:e9:d2:3f:cb:f9:85:14:70:51:d5:da:0d:50:b4:2e:11:60:
         0f:6d:3e:25:5a:f2:6b:1f:6d:d2:0c:c1:2e:8b:58:33:19:70:
         31:f9:87:3c:fd:99:94:fd:8b:c2:ea:96:21:83:72:97:5e:43:
         a6:4c:62:28:59:38:f7:b4:92:5a:a5:00:09:25:14:ac:b3:8a:
         9c:61:4e:47:cb:11:5b:6e:bb:71:9c:e0:bd:58:f9:68:8f:f2:
         6e:c9:c3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:53:12 2026 by rpki-client