Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4/b3605098-d7c2-360c-bde8-edada095bc10.roa
File:                     b3605098-d7c2-360c-bde8-edada095bc10.roa (raw, json)
Hash identifier:          WjPtcuVY4sepoXTIfh6KwUEx4IwjeBRYF6MPfIr8Qqk=
Subject key identifier:   70:F5:43:50:78:B5:51:40:14:DD:B7:EB:C0:34:D0:76:01:A8:E6:C8
Certificate issuer:       /CN=37df7b6b-4b0b-49ae-b674-a5a88d9280f4
Certificate serial:       010D0C9F4328584D6AAAB090B9B06C56B8CA6180
Authority key identifier: C2:87:47:C5:56:BF:DA:59:33:08:2B:B6:1B:8A:14:6B:15:F3:23:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4/b3605098-d7c2-360c-bde8-edada095bc10.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     398862
IP address blocks:        206.183.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4/37df7b6b-4b0b-49ae-b674-a5a88d9280f4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4/37df7b6b-4b0b-49ae-b674-a5a88d9280f4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:b0:90:b9:b0:6c:56:b8:ca:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37df7b6b-4b0b-49ae-b674-a5a88d9280f4
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=b602a828-efbe-4e12-83f0-000b3e201997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1a:be:3f:07:b5:ff:8e:8c:11:fd:5a:47:30:
                    8d:d5:ff:91:9a:40:5c:52:ea:0d:57:35:71:77:d2:
                    d0:f1:fc:a7:f0:6c:e2:e6:9e:f2:63:82:6d:0c:09:
                    dc:f1:73:23:6c:8a:2a:be:fa:9f:74:5a:c6:6d:16:
                    ef:c7:73:fd:d7:be:16:07:66:fa:8e:d8:3a:72:36:
                    64:63:c1:45:df:54:9d:1a:67:13:4a:d1:bd:b3:0b:
                    ce:a8:56:2c:d9:63:c2:d3:bb:71:db:dd:09:b9:e3:
                    db:8c:d2:60:7c:e9:7f:dc:e5:97:22:b5:05:0e:33:
                    f3:52:e3:ac:97:c9:98:c9:2c:79:48:d8:95:65:c4:
                    47:d5:89:8b:0f:0b:2b:6f:dd:83:41:cc:ed:f2:67:
                    e4:20:b9:6f:ad:2e:0d:8b:39:7a:59:77:d9:1d:2c:
                    50:71:0f:d6:fe:16:b3:06:d8:75:2f:9d:14:50:ff:
                    e6:c5:c6:0f:99:54:1b:56:ea:9d:fc:a6:f3:15:1e:
                    47:c8:87:30:08:ee:fa:ec:8c:75:4b:8f:cb:88:1d:
                    a8:ea:c6:23:ac:0b:03:4b:dd:9c:9f:05:6b:d5:66:
                    bd:62:c5:d7:9e:84:6b:4a:46:b4:ce:4f:1a:88:19:
                    0b:c3:db:29:1e:3f:a5:56:bc:fe:b3:13:0a:50:37:
                    3b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F5:43:50:78:B5:51:40:14:DD:B7:EB:C0:34:D0:76:01:A8:E6:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4/b3605098-d7c2-360c-bde8-edada095bc10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4/37df7b6b-4b0b-49ae-b674-a5a88d9280f4.crl

            X509v3 Authority Key Identifier:
                keyid:C2:87:47:C5:56:BF:DA:59:33:08:2B:B6:1B:8A:14:6B:15:F3:23:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/37df7b6b-4b0b-49ae-b674-a5a88d9280f4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.183.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:bb:be:48:51:2c:fa:b8:aa:dd:3d:c5:8b:82:fa:96:36:3d:
         fc:42:8e:bf:42:1b:ec:e9:fb:b1:09:a7:1d:34:2f:93:3b:c1:
         84:31:8b:54:91:3d:3d:64:b1:ab:c9:ef:39:94:be:86:4e:00:
         e3:08:97:45:90:8d:55:eb:05:fb:25:5d:0c:61:24:94:d7:1f:
         6a:02:e2:47:28:47:21:bc:af:0b:eb:61:a5:78:ec:2b:62:3d:
         fd:be:bc:da:81:59:e4:c8:ac:5d:af:b7:ab:e7:df:01:80:36:
         ea:ea:94:31:32:f4:cb:19:67:9b:e2:e1:a5:a4:9a:48:46:85:
         02:af:e9:a0:b4:5a:72:37:39:51:8b:24:a3:84:db:92:75:76:
         29:d1:f1:21:12:c3:5c:45:8c:07:fe:aa:d7:df:d4:ce:e2:6e:
         58:c8:a6:c0:02:e3:5f:50:ab:43:1d:3e:96:7d:48:c4:41:42:
         a3:ab:7b:ba:a2:7d:81:37:86:16:eb:b7:c8:3a:c6:d0:3d:f4:
         0a:f5:02:b4:7b:40:e1:40:42:5e:b0:57:a1:a8:81:f0:7b:cb:
         60:db:8f:03:96:dd:8f:e0:cd:a8:92:3b:d2:e1:0b:5c:b4:c4:
         b6:73:67:8a:73:86:c2:8d:90:7c:de:e1:5d:23:09:78:24:68:
         6d:7d:8c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:03:32 2026 by rpki-client