Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/754d1fde-4f2d-37de-b78b-07af0d248855.roa
File:                     754d1fde-4f2d-37de-b78b-07af0d248855.roa (raw, json)
Hash identifier:          Z8CeZgHtRQD9oNgEqUIYarKPpAlSxojxK+Dd/Ugkpgc=
Subject key identifier:   C3:93:07:2B:68:B6:A3:AD:6F:27:2C:B2:AB:EE:B2:7D:FC:6B:06:C2
Certificate issuer:       /CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08
Certificate serial:       010D0C9F4328584CDFEB305DBFEFB38C62449340
Authority key identifier: 7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/754d1fde-4f2d-37de-b78b-07af0d248855.roa
Signing time:             Sun 15 Feb 2026 20:13:47 +0000
ROA not before:           Sun 15 Feb 2026 20:13:47 +0000
ROA not after:            Sat 16 May 2026 19:13:47 +0000
asID:                     216138
IP address blocks:        207.180.30.0/24 maxlen: 24
                          207.180.56.0/24 maxlen: 24
                          207.180.59.0/24 maxlen: 24
                          207.180.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:eb:30:5d:bf:ef:b3:8c:62:44:93:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08
        Validity
            Not Before: Feb 15 20:13:47 2026 GMT
            Not After : May 16 19:13:47 2026 GMT
        Subject: CN=2c28bce9-1b06-496a-8ef3-d683a643a08d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:dc:12:78:3c:bb:f3:da:ab:6f:1e:4c:05:9b:
                    fb:87:4d:d1:3e:00:d7:f7:db:8f:40:f8:71:3d:78:
                    06:ac:98:df:50:69:6a:f8:de:17:02:7a:f6:a6:0a:
                    19:90:b1:36:e6:80:1e:fb:f6:4d:03:b0:b4:5d:76:
                    42:23:01:c2:60:b4:2f:aa:a8:10:36:74:3f:60:c9:
                    ed:4a:ac:12:89:7f:3d:7c:88:66:23:e8:a5:40:b4:
                    68:00:f5:02:84:3d:6d:e2:a5:4c:19:ba:41:01:ec:
                    2c:ee:b0:4d:1a:ef:9a:06:e5:97:9c:33:bd:0d:e2:
                    b9:84:f8:16:3a:cc:29:ae:55:45:36:d3:8c:41:a3:
                    ec:0a:47:56:52:94:96:11:9e:18:63:ef:5d:6c:fd:
                    10:04:34:a8:37:00:fd:95:6b:db:5b:b1:73:a8:55:
                    9c:a5:93:13:0c:96:25:25:f9:9d:56:77:43:01:ff:
                    27:84:33:8c:20:d8:78:c9:f1:bc:5f:c5:1e:d0:d2:
                    c3:68:17:43:03:1e:d0:3a:b3:b6:4f:3e:1a:8c:5e:
                    3f:dc:10:20:ee:98:8a:ef:4d:2d:73:38:04:06:5e:
                    67:5f:16:e8:ec:11:d2:5e:78:3d:c9:c3:43:3a:4d:
                    f8:51:38:b8:69:24:99:fe:c3:72:5f:25:cb:b0:10:
                    c4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:93:07:2B:68:B6:A3:AD:6F:27:2C:B2:AB:EE:B2:7D:FC:6B:06:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/754d1fde-4f2d-37de-b78b-07af0d248855.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl

            X509v3 Authority Key Identifier:
                keyid:7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.30.0/24
                  207.180.56.0/24
                  207.180.59.0/24
                  207.180.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:c0:8c:f6:85:a6:39:e2:b8:2b:68:e3:f3:93:a2:ab:b7:5c:
         0c:91:88:5f:0f:73:ec:45:e4:db:13:d4:26:07:71:90:aa:a2:
         22:7c:cc:4b:22:cf:ed:44:73:8f:2d:f6:41:53:af:18:99:ea:
         71:b6:f3:54:02:74:9f:be:7e:e6:78:b0:fa:7a:9e:08:37:7f:
         96:de:2e:56:52:be:d5:a1:8f:a8:7f:a2:bd:bc:bc:d2:fc:76:
         26:18:59:78:db:45:a0:5e:c3:e1:e0:92:1d:39:e9:50:9f:18:
         02:a7:0e:d6:24:31:26:9c:7e:f9:94:d4:b1:ed:d4:4f:84:86:
         10:be:fd:2b:90:4a:60:98:6b:d2:85:a4:7b:b0:2d:17:7c:51:
         46:bf:dc:14:37:dc:fe:56:45:e9:87:ed:ee:0d:cb:22:dd:44:
         d0:f2:b9:bb:2a:4d:14:85:f4:fc:4c:8f:28:67:1d:3b:2a:27:
         a0:4d:a5:6c:55:21:af:02:ec:e4:f4:a8:e3:80:bb:1f:ac:b4:
         8f:91:8f:ad:4a:25:14:6f:c8:6e:45:cc:69:9d:de:91:72:cd:
         f0:1c:c3:4f:33:77:cb:8f:84:b1:22:06:61:16:3f:4d:bd:1d:
         a4:34:5d:4a:94:73:d7:32:b6:60:c4:8a:20:56:8f:ff:aa:35:
         85:6f:bf:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:50:05 2026 by rpki-client