Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f40e4177-8831-4c30-83f0-fa2c74173aff/31fbfac3-3eee-330b-b4fc-6a494f86a985.roa
File:                     31fbfac3-3eee-330b-b4fc-6a494f86a985.roa (raw, json)
Hash identifier:          8Dr0qOiHXHckw45VlnKjVfvbY9lJAykwUmtb+km901c=
Subject key identifier:   48:6D:FF:3D:C7:F5:9D:00:A9:DF:36:EF:1C:32:9A:5D:62:FF:AF:B5
Certificate issuer:       /CN=f40e4177-8831-4c30-83f0-fa2c74173aff
Certificate serial:       010D0C9F4328584D07AD207ACE4A9B0BF4E46000
Authority key identifier: 19:D9:FD:6D:F5:8C:FE:30:7D:D1:9A:39:59:39:DC:F3:7B:81:68:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f40e4177-8831-4c30-83f0-fa2c74173aff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f40e4177-8831-4c30-83f0-fa2c74173aff/31fbfac3-3eee-330b-b4fc-6a494f86a985.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     400860
IP address blocks:        207.166.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f40e4177-8831-4c30-83f0-fa2c74173aff/f40e4177-8831-4c30-83f0-fa2c74173aff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f40e4177-8831-4c30-83f0-fa2c74173aff/f40e4177-8831-4c30-83f0-fa2c74173aff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f40e4177-8831-4c30-83f0-fa2c74173aff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ad:20:7a:ce:4a:9b:0b:f4:e4:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f40e4177-8831-4c30-83f0-fa2c74173aff
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=bc6bed6f-7c5e-479b-a7a4-779029bbc058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:16:19:f3:77:70:5d:f3:24:59:fa:7d:cd:3b:
                    4b:2b:aa:9e:2e:df:21:e0:65:85:f6:0b:ac:04:6e:
                    84:70:42:34:41:ff:82:b5:29:d3:ca:22:33:99:4a:
                    08:b9:ba:58:51:96:2b:ec:99:c5:4f:7b:4c:54:27:
                    1e:4d:c7:3a:5f:15:d8:51:e5:95:95:82:05:78:3c:
                    78:51:40:45:68:5c:93:c9:a9:46:8b:27:a7:34:21:
                    25:44:57:59:46:a9:69:22:25:e4:82:39:e9:76:e6:
                    4c:7c:5a:2a:71:35:fe:0a:c9:1d:48:32:9d:5a:27:
                    7a:e1:38:b4:d8:11:fd:46:f0:37:3c:ee:b3:e1:76:
                    6c:5d:ad:2b:e3:63:f4:6e:db:3b:29:41:f9:ef:32:
                    93:a8:a0:5f:de:19:c1:2c:71:33:52:8f:4e:10:64:
                    5d:9b:e1:87:54:16:1c:ad:a7:57:70:f6:2d:5c:be:
                    26:49:62:16:a7:d8:d4:d3:a1:4f:48:61:9c:b7:6a:
                    d4:93:a3:ea:e2:99:c5:74:5d:93:55:1f:61:0d:da:
                    76:b7:df:af:60:6f:67:9b:89:ec:0a:8b:c8:27:43:
                    4c:d4:8d:d7:a0:e4:59:f3:22:5d:cd:55:25:76:b4:
                    8e:24:a1:4a:10:f5:0c:cb:fb:97:e6:45:a7:59:95:
                    8f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:6D:FF:3D:C7:F5:9D:00:A9:DF:36:EF:1C:32:9A:5D:62:FF:AF:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f40e4177-8831-4c30-83f0-fa2c74173aff/31fbfac3-3eee-330b-b4fc-6a494f86a985.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f40e4177-8831-4c30-83f0-fa2c74173aff/f40e4177-8831-4c30-83f0-fa2c74173aff.crl

            X509v3 Authority Key Identifier:
                keyid:19:D9:FD:6D:F5:8C:FE:30:7D:D1:9A:39:59:39:DC:F3:7B:81:68:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f40e4177-8831-4c30-83f0-fa2c74173aff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.166.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:de:de:5e:63:69:ab:2e:39:04:e0:9d:32:2d:25:d3:39:7a:
         c9:93:33:65:70:c1:c9:ed:60:0c:b9:7c:d1:51:e5:ea:e6:63:
         2c:6a:93:03:87:c6:74:3c:07:25:94:f0:ef:58:02:3e:a5:88:
         7b:9b:1d:3f:fc:7c:86:03:8d:9a:af:52:63:78:d9:e1:af:76:
         26:86:7d:ca:a7:54:18:c3:1c:b7:11:59:4f:81:19:40:29:2b:
         dd:2a:eb:22:76:87:31:fb:64:05:b6:33:79:d0:b0:2f:18:9b:
         ca:6e:46:63:3c:69:93:7f:ff:25:2e:19:6f:5c:0d:53:3d:bb:
         fb:75:e1:11:c6:26:2b:18:6c:ed:ba:c4:81:8f:2b:2f:37:ba:
         58:cd:ae:b2:7b:74:aa:e6:c3:2f:9e:09:a4:60:d5:51:b4:40:
         aa:9d:67:a5:ab:b3:96:d7:fb:00:0d:6d:13:36:b9:e8:3b:5e:
         6f:3d:ba:6e:f5:d2:45:08:16:ee:cc:00:cd:86:21:04:b4:8e:
         f8:83:7c:24:d1:69:25:28:15:6f:24:a5:a1:38:f2:a1:42:a6:
         95:92:59:d3:89:7c:76:03:a1:5d:6c:c6:fb:dc:1c:6e:f0:de:
         90:cb:cf:3e:91:b6:3e:e4:5d:ff:06:a2:5a:e0:ef:10:d3:83:
         dd:ac:34:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:25:24 2026 by rpki-client