Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/8c2234ec-b3d4-38eb-b0f2-c2755e774182.roa
File:                     8c2234ec-b3d4-38eb-b0f2-c2755e774182.roa (raw, json)
Hash identifier:          nNJJsE6sNq2KE9te69euBxYwAO5KPWF/vW+wusZq7xo=
Subject key identifier:   1A:4E:CF:3E:DF:C5:8D:61:58:99:93:84:8C:A4:BA:B6:F0:AD:1F:5D
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F4328584D60E50AF82860D536B35AB680
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/8c2234ec-b3d4-38eb-b0f2-c2755e774182.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        207.202.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e5:0a:f8:28:60:d5:36:b3:5a:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=3ed8ad32-3580-4bfa-ad7d-0af42c1d6eab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e8:4a:ed:70:15:a9:23:3f:db:fa:57:62:39:
                    15:80:6b:98:a3:4f:4a:c4:50:3e:e5:0a:ee:c6:8b:
                    d2:a0:ea:66:62:72:b5:04:fe:c1:8f:c3:42:47:a6:
                    8f:20:5e:b7:30:9b:fb:91:05:4c:1f:fb:c3:55:35:
                    e2:8a:b4:41:79:cf:3f:83:a2:d3:13:e0:84:a8:54:
                    13:67:0f:33:a2:4e:97:30:ca:18:6c:c8:ef:39:8e:
                    e4:b3:6c:c1:59:fd:20:1a:2b:2c:84:a1:19:68:df:
                    f0:d5:6d:17:77:af:9d:8c:64:89:cf:09:d6:f6:62:
                    cf:8d:c0:27:ca:4e:d2:b8:cb:b3:a8:f9:91:5a:9a:
                    63:d0:e0:d1:c5:4f:81:ee:92:65:4e:c2:71:e7:b0:
                    aa:ca:9a:5c:32:6d:d3:51:05:cc:0a:cf:c0:da:99:
                    98:0c:47:6f:5e:3c:8e:98:f5:62:d1:a7:5d:d8:c4:
                    37:90:18:f8:34:91:67:b0:cb:84:c3:92:90:fc:25:
                    8e:f8:4c:13:28:3e:9f:af:af:b3:24:37:59:95:69:
                    81:b4:44:d0:36:0e:42:8c:c1:58:17:6d:f1:f7:18:
                    a0:0a:4a:64:2c:2d:88:dd:7c:3e:d4:05:02:8e:2c:
                    d4:07:bc:e9:02:f1:1d:cc:6b:fd:27:6f:1a:ef:bf:
                    c5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:4E:CF:3E:DF:C5:8D:61:58:99:93:84:8C:A4:BA:B6:F0:AD:1F:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/8c2234ec-b3d4-38eb-b0f2-c2755e774182.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.202.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:68:f6:a8:f9:18:59:4d:c2:ff:5b:24:b2:3a:1d:ef:79:ea:
         10:c0:90:2e:05:56:1b:15:75:f1:59:ac:9c:08:0e:88:e4:e2:
         cb:f1:4c:02:e8:07:8c:1a:41:8c:de:e1:72:b5:84:68:4a:1c:
         74:3d:76:0d:fe:bb:a3:85:08:b7:d0:e4:f1:da:6b:30:e6:aa:
         59:0d:6a:de:02:6d:b0:cc:13:91:a6:47:a0:69:96:0c:4a:61:
         b8:39:6f:43:9c:b8:95:68:bf:ff:84:32:a4:b7:ee:39:ab:10:
         8c:7f:b8:24:05:c3:88:95:6e:c6:c4:46:20:84:0a:aa:d7:bc:
         c1:28:38:fc:c8:74:bf:55:78:f2:62:07:4d:f5:11:79:16:77:
         47:39:e8:3a:78:d9:33:bc:22:4d:e4:1e:83:86:a5:d9:64:bc:
         32:40:73:5c:c8:6f:89:e6:5c:95:e5:bc:89:ad:9d:7a:7c:2b:
         d0:50:2e:9e:d1:68:c7:b0:4f:e9:bb:ca:de:0b:47:ff:ad:f6:
         6c:8f:37:3b:5d:bb:86:48:ea:0b:d9:01:a7:9c:12:fb:13:cb:
         d0:a7:33:ed:9b:9c:08:e8:2d:66:a5:51:94:d2:ab:7f:54:91:
         5c:96:48:cb:e2:d7:a8:1f:c3:48:95:3f:1f:79:18:60:2f:94:
         a2:b2:f8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:46:16 2026 by rpki-client