Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/83483f8d-57ce-3cf0-a60c-a3dfbb1bdce9.roa
File:                     83483f8d-57ce-3cf0-a60c-a3dfbb1bdce9.roa (raw, json)
Hash identifier:          UmHXtMgCTJJZ/6X+2ssuzYSPljMRBaawLx5h6yJYS2o=
Subject key identifier:   24:C0:4E:5C:C9:5C:DB:CE:ED:2A:5F:77:90:70:B4:F4:BD:51:66:41
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584CBDB1FDD55846271C6A224CF0
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/83483f8d-57ce-3cf0-a60c-a3dfbb1bdce9.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     15204
IP address blocks:        216.106.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b1:fd:d5:58:46:27:1c:6a:22:4c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=7f57464f-5c23-4738-9e6f-ab0bde00dc11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8e:9f:e1:54:e5:01:bb:bd:53:19:f2:bf:af:
                    48:6b:bd:40:0b:20:15:d5:61:6d:67:95:05:62:e0:
                    52:ea:38:c4:d1:ea:a0:3c:a5:0b:69:1c:3d:0d:9d:
                    02:36:6c:77:ff:ab:21:ee:37:2e:0c:94:2a:eb:91:
                    a3:8f:41:a5:83:19:1d:be:a8:ca:0e:48:2b:11:59:
                    87:25:77:15:7c:28:da:1d:df:fa:f5:e3:98:b9:ea:
                    c1:ea:01:57:fa:1e:1a:9f:16:5e:20:ce:31:6e:31:
                    cc:3e:56:13:a6:ea:03:1d:9b:3b:b2:e4:48:95:40:
                    03:a4:29:f3:ff:26:8c:1e:79:73:ad:72:07:33:8b:
                    0b:bb:8f:71:dd:5d:20:83:20:3c:bf:28:d6:fb:dc:
                    29:30:a2:d7:67:63:08:18:69:2e:4e:fe:f9:a8:60:
                    9d:8f:23:d1:5d:ae:89:be:4c:b9:6f:87:b7:37:fe:
                    fb:b0:d8:4b:1c:d1:97:98:3d:ac:1f:c2:e2:6a:e5:
                    30:cc:ca:c8:e7:34:95:dc:97:d2:30:c5:92:b8:c3:
                    87:78:fa:55:1d:ba:2f:8d:5e:a4:7d:ca:22:a4:60:
                    29:ae:a5:83:32:51:3f:30:e5:fe:8d:fa:e0:e1:23:
                    f1:b0:e8:16:43:80:2e:7b:73:f1:ee:d4:06:fb:39:
                    03:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C0:4E:5C:C9:5C:DB:CE:ED:2A:5F:77:90:70:B4:F4:BD:51:66:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/83483f8d-57ce-3cf0-a60c-a3dfbb1bdce9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.106.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:92:d5:88:ce:48:6d:21:2d:c2:b6:54:f8:28:83:7e:60:4c:
         0a:8c:9c:ea:4e:f5:39:0a:09:d3:25:d1:9b:d6:92:39:7d:92:
         8d:fa:74:8c:d6:9b:01:ca:54:63:fa:a1:52:75:d8:04:32:4e:
         7b:6e:23:a8:79:1b:71:31:83:22:a2:79:3b:5b:8c:80:c8:5c:
         01:4f:0b:ee:15:81:08:c7:8d:2b:8d:94:6a:13:ea:86:84:fb:
         f8:c5:10:55:45:20:d3:07:c4:79:0f:60:c8:cb:87:0a:2a:93:
         9d:2a:86:81:7b:02:38:fa:97:e8:08:02:83:2c:a3:68:4a:51:
         a7:f7:fe:d1:4f:0a:f4:44:82:32:d6:3a:92:a8:34:67:fd:36:
         31:dd:c9:31:9d:62:88:2f:5e:3c:b7:83:60:da:b5:a4:24:3f:
         f8:60:60:93:ad:b3:a4:a5:3b:68:88:d4:b2:16:29:74:f6:44:
         25:d9:95:54:de:e7:6c:7c:6b:92:e4:45:12:ab:fc:85:80:9e:
         94:13:87:d2:27:5a:6d:1e:8c:ce:84:1a:0a:03:a4:80:4f:22:
         70:18:f5:bd:aa:cb:9f:4b:40:28:86:2e:a1:d8:f4:5a:4b:c0:
         7b:11:7d:70:91:1e:e7:cb:da:2f:7d:04:1e:1d:f8:ca:e0:13:
         96:2c:84:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:12:44 2026 by rpki-client