Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/ca34aa1c-f17e-32f0-b867-7983c54f8cf0.roa
File:                     ca34aa1c-f17e-32f0-b867-7983c54f8cf0.roa (raw, json)
Hash identifier:          0vnoXEqTftox/ulZmuk1EQLY6udbsr/ImeieIBWIeIY=
Subject key identifier:   8C:93:FA:86:B2:E0:E8:9E:5E:36:BC:51:4F:82:F4:7A:DF:37:4D:A4
Certificate issuer:       /CN=291133eb-e436-4803-adab-f37835fc18e3
Certificate serial:       010D0C9F4328584D83CA9F923FE1D099BAEBCB63
Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/ca34aa1c-f17e-32f0-b867-7983c54f8cf0.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     11300
IP address blocks:        207.241.170.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:9f:92:3f:e1:d0:99:ba:eb:cb:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=2df3d3e0-b154-4e08-822d-e7205d33b985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ae:61:03:f2:5c:5b:25:58:7c:b0:eb:f5:10:
                    43:30:82:ba:9e:33:e4:de:97:f6:80:f4:13:5d:a3:
                    0d:b9:2e:52:59:3c:08:19:34:b7:41:c0:71:d5:84:
                    7a:15:a3:5e:eb:69:ae:38:aa:f0:c3:95:70:ce:38:
                    f4:aa:df:de:69:a7:b9:bc:1c:a2:d0:2c:21:12:1f:
                    53:fb:cc:8b:40:43:5a:43:1b:7a:84:60:f6:ba:c3:
                    c7:df:ac:b1:08:8e:7b:b2:3b:29:bd:1f:41:8b:f0:
                    02:87:d2:f0:90:1f:b4:30:57:dc:fd:0c:99:32:9c:
                    f4:11:b3:80:19:a8:6a:c3:a6:66:64:28:7c:32:04:
                    86:af:6f:91:8e:ff:06:6f:d2:3b:d9:4e:b0:de:17:
                    32:8d:9c:7e:aa:bf:1f:f0:46:bf:3d:75:43:fc:79:
                    64:7f:69:8e:96:63:32:43:8c:9e:9d:c1:d8:51:54:
                    0a:fd:d2:d4:f4:63:a2:11:dd:74:54:05:65:46:2e:
                    95:e7:b1:3e:99:cd:a3:4f:d4:b5:58:04:51:38:6e:
                    28:14:a5:2b:37:6d:80:72:9a:71:4a:75:c8:f2:95:
                    c5:d5:69:e3:48:1f:69:61:d5:d4:de:41:b2:f1:24:
                    3b:8b:40:e5:ef:6e:d4:02:a2:e8:ad:27:c2:dc:c6:
                    e7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:93:FA:86:B2:E0:E8:9E:5E:36:BC:51:4F:82:F4:7A:DF:37:4D:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/ca34aa1c-f17e-32f0-b867-7983c54f8cf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl

            X509v3 Authority Key Identifier:
                keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.241.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:4f:6f:e4:6b:e2:92:e9:e2:55:58:bf:f1:07:4c:29:83:3c:
         2c:38:71:d9:f5:90:ef:65:7f:1c:1c:b8:b5:05:02:f8:06:c2:
         ca:dd:6c:ef:8e:b0:e1:cc:b6:01:a7:3f:ff:66:89:db:b2:d9:
         cc:81:dc:c3:4e:1b:0d:ae:d5:18:c8:26:cb:62:be:75:0b:a7:
         f0:bb:24:61:18:6f:68:3a:30:ef:cc:ab:3a:1e:ee:8e:13:03:
         c9:4d:51:8c:d7:02:f0:71:cd:6b:fc:aa:06:c5:b1:ea:03:c9:
         03:87:3a:31:50:ba:b2:61:a6:c2:cf:ec:13:ee:be:6b:2a:e6:
         e4:2e:81:bd:d8:06:c9:fe:17:f6:76:f2:46:42:79:ca:d9:e1:
         fe:5a:b7:64:f6:06:1f:15:8e:ba:79:f8:3a:63:d0:3a:43:dc:
         18:11:c3:5a:23:16:56:49:e9:e6:9e:18:05:27:5b:c2:43:13:
         93:66:bf:e7:dc:64:59:f4:54:83:0b:f4:57:de:9e:66:e5:7d:
         c5:82:45:37:2b:a9:c4:9d:87:4b:2e:09:fb:37:4f:00:d7:82:
         b5:d6:1e:c5:90:78:fa:9b:0f:d9:8a:04:04:c1:4b:70:fe:81:
         ff:39:26:f3:be:c2:ff:8b:43:d8:a4:70:66:4a:93:8d:22:9c:
         e1:5c:c9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:49:10 2026 by rpki-client