Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/7ccb006b-c200-3c5d-a001-e3f917a695e2.roa
File:                     7ccb006b-c200-3c5d-a001-e3f917a695e2.roa (raw, json)
Hash identifier:          x+z0WtONnDzy1jHVq1jlHELJ261DyIMSjaxJLKMG4iU=
Subject key identifier:   3F:A1:F0:88:A8:92:EF:F2:D9:D3:EA:92:09:83:F0:A5:F6:94:BF:2A
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584D59EA515032B63D8C8A79BD80
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/7ccb006b-c200-3c5d-a001-e3f917a695e2.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     16509
IP address blocks:        134.224.176.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:51:50:32:b6:3d:8c:8a:79:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=cde8ab30-8325-4477-9889-83d8c2a17ced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1c:25:38:0a:fa:9b:19:d4:1f:f5:cf:96:b7:
                    76:b9:3a:fb:79:46:3d:e6:71:1e:00:93:21:68:79:
                    39:22:63:30:e5:cf:75:37:ce:0a:e4:ef:d6:4a:14:
                    64:6d:7c:0f:54:51:be:7b:45:b2:a5:9f:2a:16:c4:
                    d1:e5:ab:13:94:a3:4e:36:b2:95:16:c6:aa:a6:46:
                    02:80:fa:37:22:fc:57:be:40:d9:28:48:cc:f3:d3:
                    e8:a9:47:b8:66:43:4b:0d:c6:ef:aa:6e:45:ed:a1:
                    eb:fa:e6:da:46:1c:f9:af:c6:1d:91:6b:8c:b6:12:
                    c9:26:ad:5c:3c:e7:ea:50:00:c9:08:82:0a:ca:03:
                    42:b0:08:d8:ba:1a:25:c4:5c:75:49:a8:bb:9f:3a:
                    3e:12:e4:ab:4b:7a:a0:10:e5:04:2b:b6:61:33:66:
                    d2:ef:d8:a5:5c:d2:89:74:14:b6:61:3a:d0:d4:43:
                    53:ce:12:9f:af:d6:2a:a6:fe:ca:5c:9a:f5:64:40:
                    2d:f3:31:cf:07:74:6c:89:a9:8e:36:67:1d:ea:29:
                    17:84:ad:4b:c6:4c:32:09:6b:e0:cd:c7:d2:bc:ea:
                    83:77:6e:b0:ba:fe:68:72:15:64:b1:44:93:d3:06:
                    d7:2f:ff:12:94:bc:8d:60:e8:c7:a9:8f:7f:ea:a9:
                    32:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:A1:F0:88:A8:92:EF:F2:D9:D3:EA:92:09:83:F0:A5:F6:94:BF:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/7ccb006b-c200-3c5d-a001-e3f917a695e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.224.176.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:c7:d3:bc:1c:4b:88:f7:51:c8:6d:f1:40:4d:63:27:1b:00:
         7c:80:4d:db:f6:e1:c2:a5:1c:74:e5:21:e2:bc:ff:ce:7c:0f:
         0d:88:be:77:76:ab:39:1a:8b:7b:79:a9:ec:2a:44:23:01:a3:
         fe:47:97:80:56:eb:dd:eb:13:92:02:f8:da:bd:2f:a6:d7:cf:
         82:73:64:f4:ea:b3:d0:74:d3:f6:44:a8:4f:ef:32:08:9b:ee:
         a7:24:c7:26:8b:54:6b:bb:a1:cb:2b:82:e2:6b:f2:dc:7d:e6:
         9a:5a:62:fe:fd:b4:31:b5:b7:af:54:c9:3b:ed:91:cf:2e:c9:
         10:97:36:2f:3c:da:4b:05:6b:69:8b:88:50:e3:0e:93:69:01:
         c4:3a:ff:57:f4:3c:f2:72:cf:c9:65:7c:d2:c4:40:19:e9:16:
         52:b7:8e:1b:60:bb:fc:c6:26:d5:24:36:21:c9:09:a5:e2:6c:
         99:6e:33:eb:53:90:19:d5:40:90:d4:a3:6b:84:99:58:30:11:
         87:f0:60:c6:55:03:97:14:9a:a0:d8:53:ea:6e:bb:c7:4d:6a:
         00:f6:bf:cf:e7:eb:f7:52:dc:e4:5d:88:4a:05:b9:b2:7e:09:
         ed:4c:81:22:a4:9f:13:a9:2f:0d:8e:80:69:23:cc:4b:4a:08:
         e1:3f:9d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:04:39 2026 by rpki-client