Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c91b1bde-04b8-3c76-b6f5-35877a5ed073.roa
File:                     c91b1bde-04b8-3c76-b6f5-35877a5ed073.roa (raw, json)
Hash identifier:          /iU6mO1UsWMAh11p7qFkVe0BV8q+nmegOQfYS/tk7B4=
Subject key identifier:   11:20:AD:80:3C:E6:97:15:5C:3B:F8:63:E3:E2:94:29:D0:80:89:83
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584D60E5075AC23EB19A322CE840
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c91b1bde-04b8-3c76-b6f5-35877a5ed073.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     20014
IP address blocks:        209.151.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e5:07:5a:c2:3e:b1:9a:32:2c:e8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=00a0f023-749b-4b17-9c7f-da450661086c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7b:ed:2b:09:e7:3a:ff:b1:4f:3c:4b:48:58:
                    19:ff:28:a6:3d:d5:e0:9d:7e:d7:80:35:09:b4:43:
                    97:72:9b:73:44:a9:f7:34:b3:97:0e:0e:fc:f2:50:
                    15:9f:be:c9:94:dc:3b:32:be:79:fe:b6:e0:77:fe:
                    72:4a:6f:6d:d7:8b:c9:26:7e:ce:3d:0e:93:4a:0a:
                    2f:6a:e0:16:bc:bb:27:24:de:30:dd:c4:16:81:43:
                    0b:76:7d:31:84:43:2d:78:06:90:1b:3d:5c:d3:77:
                    c3:c4:25:60:d7:dc:c4:4b:33:91:f8:f9:46:8c:d1:
                    c6:05:00:fa:2e:dd:91:af:ad:4e:5b:5c:7a:a0:c7:
                    9a:ac:d0:fa:0d:35:87:7d:58:d2:14:ce:89:86:10:
                    f7:09:49:ee:9e:5e:3b:94:4d:55:cc:45:64:33:2b:
                    4f:c0:7b:2a:85:16:b6:3a:d6:ae:1c:e1:b2:d8:f1:
                    5d:38:b0:b6:d6:e3:49:9b:43:c7:96:da:fb:17:9b:
                    95:d8:0c:2f:74:cd:b2:9a:7e:64:35:b4:48:f7:b9:
                    37:f2:13:7f:78:ca:6d:3d:db:eb:8f:b5:5f:dc:e7:
                    01:36:52:cf:e7:89:7e:cc:17:30:b6:2d:7d:49:be:
                    f5:29:d3:a9:6f:3f:58:e2:c6:22:3a:26:bf:4c:f4:
                    95:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:20:AD:80:3C:E6:97:15:5C:3B:F8:63:E3:E2:94:29:D0:80:89:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/c91b1bde-04b8-3c76-b6f5-35877a5ed073.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.151.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:21:e7:b2:90:3d:96:f3:57:23:b5:73:cc:99:24:97:cc:ca:
         b0:b4:a0:76:1e:b4:3a:93:83:f4:b5:95:f0:29:cd:99:18:31:
         9e:80:fd:e9:49:5d:d8:69:30:f8:1b:5c:40:28:8e:20:51:97:
         f9:7f:6a:ec:db:91:cd:4c:ba:e3:61:54:f9:c1:1e:f0:59:d6:
         de:7a:34:90:38:09:b6:d4:e2:3f:21:2a:83:e0:c9:21:70:c6:
         18:53:f3:06:11:db:a4:d8:bd:3b:9e:ba:9d:dd:3f:e9:6d:c3:
         9f:8d:bf:7f:6d:bd:23:2b:d4:2e:c8:8c:11:0c:47:df:b6:42:
         22:b8:cc:5f:99:2c:6f:5b:ec:fd:d6:fc:72:70:1a:0e:10:de:
         7e:88:13:aa:6c:f5:21:b1:9b:f3:bb:84:41:ed:0b:81:8e:42:
         83:e5:61:b5:31:6f:2a:43:b8:e7:f7:99:0c:10:86:85:b7:3f:
         d8:a5:57:68:58:dc:0e:05:71:ca:a7:6e:28:9e:2e:05:dd:7a:
         a0:c4:33:03:5c:83:7d:52:9b:1f:8e:42:64:48:a0:79:c0:7c:
         12:e1:63:4f:38:44:d1:c2:ae:20:6d:d8:6f:6d:74:93:f4:c3:
         e9:d9:67:29:99:9b:92:b0:2c:98:dd:21:1b:40:ac:a6:2c:f4:
         de:b4:ac:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:37:56 2026 by rpki-client