Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9/f3ba6911-6f7e-3fd6-b1c9-05bcfdeab5a1.roa
File:                     f3ba6911-6f7e-3fd6-b1c9-05bcfdeab5a1.roa (raw, json)
Hash identifier:          yuwLTP4NnlwDg74m6d8ibbr4m7tywpp5pPS81wV/n6s=
Subject key identifier:   6D:7C:EF:B9:44:03:5D:87:72:E2:30:12:07:2D:A4:5E:4F:95:F0:30
Certificate issuer:       /CN=69182550-6727-45f4-8b5c-c13c70b39cf9
Certificate serial:       010D0C9F4328584D571F9B310C14FCC8269EFD00
Authority key identifier: 7E:A7:A0:1F:72:2F:B7:AF:97:66:CB:DA:6A:FB:48:58:EE:3C:FA:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9/f3ba6911-6f7e-3fd6-b1c9-05bcfdeab5a1.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     14618
IP address blocks:        207.207.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9/69182550-6727-45f4-8b5c-c13c70b39cf9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9/69182550-6727-45f4-8b5c-c13c70b39cf9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:9b:31:0c:14:fc:c8:26:9e:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69182550-6727-45f4-8b5c-c13c70b39cf9
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=ca06888e-805a-4f25-a727-8102c0684ece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ce:3d:37:69:36:fc:1f:32:a9:b6:8d:95:11:
                    b5:0e:5a:e5:88:73:54:d1:20:0a:7c:0d:d5:6c:ff:
                    7b:2a:b4:d3:dc:d9:f9:c1:ee:d9:45:e3:40:1a:39:
                    6c:c0:be:a3:49:d7:86:0f:c4:98:63:30:96:0f:7f:
                    97:75:3a:b2:e7:de:4d:82:fe:d4:75:bb:19:2c:15:
                    e9:2c:af:f7:7b:b3:3a:63:52:a0:4f:02:23:2a:96:
                    80:d7:ac:cc:d1:bc:4e:7b:b9:63:e9:00:5f:21:53:
                    e2:3a:70:c7:13:cc:09:23:37:bb:1f:3b:07:24:5d:
                    c6:30:7a:ba:b7:30:9d:a3:86:68:68:1a:30:1a:1b:
                    f5:71:01:47:36:fa:6f:69:31:11:46:ef:77:a6:f3:
                    63:d6:1e:1c:8c:f6:1f:62:f7:59:51:af:b6:46:b1:
                    92:f5:89:05:3a:50:38:a0:ae:8b:9a:04:f2:bd:ec:
                    6a:5f:0d:26:7c:d1:41:a7:47:3a:cc:c8:33:c3:95:
                    2d:a4:5f:8a:fb:02:89:10:38:4d:fe:35:54:fc:af:
                    57:ff:25:50:b1:6a:fa:a9:d4:b1:96:0b:1a:b2:d3:
                    55:5c:f0:6d:ef:8e:ce:f9:1c:12:37:41:ca:d9:49:
                    0a:9f:cc:82:6d:45:32:b7:9c:16:97:5c:e1:d3:c3:
                    1c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:7C:EF:B9:44:03:5D:87:72:E2:30:12:07:2D:A4:5E:4F:95:F0:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9/f3ba6911-6f7e-3fd6-b1c9-05bcfdeab5a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9/69182550-6727-45f4-8b5c-c13c70b39cf9.crl

            X509v3 Authority Key Identifier:
                keyid:7E:A7:A0:1F:72:2F:B7:AF:97:66:CB:DA:6A:FB:48:58:EE:3C:FA:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/69182550-6727-45f4-8b5c-c13c70b39cf9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.207.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:9f:83:37:ff:5b:6e:95:49:17:bf:1b:81:40:3c:97:d8:56:
         e7:a2:59:f5:69:a8:e8:d5:9c:66:26:40:f1:e3:de:69:d8:10:
         81:38:6a:73:39:82:b4:05:a8:25:6a:64:3b:5e:fc:7b:5a:6d:
         d2:33:91:47:ce:e6:08:a0:79:38:07:ed:22:bc:5f:93:bb:ed:
         db:c3:b7:37:27:f1:51:65:9a:77:80:e1:a8:dc:b7:b3:74:4b:
         d4:d1:5a:df:16:93:4e:5f:a6:50:5a:ca:40:00:3a:53:52:fa:
         da:af:79:d8:a4:2b:03:f8:4b:09:f4:fd:f1:55:8a:e4:0b:ca:
         ba:50:01:37:09:60:35:7c:a6:04:4b:75:d4:f4:2c:03:90:f2:
         4f:1f:7f:e2:cd:31:d4:1e:29:c4:c5:1b:e6:1c:a9:cd:b8:d7:
         a8:e5:f1:59:7c:31:9e:95:f1:01:6b:d1:92:0a:06:f2:92:97:
         4a:c8:69:7f:9a:a6:5f:39:46:c2:ea:09:e7:bf:a4:8e:fc:46:
         dd:8e:97:ea:55:8b:3a:bb:a8:5d:d6:e4:cf:34:10:ae:f6:cc:
         77:9a:f2:c7:a7:e8:ab:82:c7:c7:45:fd:78:40:c2:2f:af:c3:
         5a:c2:47:01:04:6c:39:cc:54:8f:75:40:8e:31:fc:ef:0e:b3:
         11:12:12:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:27:07 2026 by rpki-client