Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/d71e6504-f412-3bfc-bc96-42b82ef726b0.roa
File:                     d71e6504-f412-3bfc-bc96-42b82ef726b0.roa (raw, json)
Hash identifier:          4UASFQgku3Ro9EKF1MvQoXs3YUxM4omoBoeQdkTvR6U=
Subject key identifier:   18:FB:31:3B:52:EF:C8:7A:88:2D:2A:EE:72:9E:68:6E:2C:9E:EA:01
Certificate issuer:       /CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08
Certificate serial:       010D0C9F4328584D62700A2CECFC504178A32F00
Authority key identifier: 7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/d71e6504-f412-3bfc-bc96-42b82ef726b0.roa
Signing time:             Fri 03 Apr 2026 14:16:32 +0000
ROA not before:           Fri 03 Apr 2026 14:16:32 +0000
ROA not after:            Thu 02 Jul 2026 14:16:32 +0000
asID:                     834
IP address blocks:        207.180.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:62:70:0a:2c:ec:fc:50:41:78:a3:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08
        Validity
            Not Before: Apr  3 14:16:32 2026 GMT
            Not After : Jul  2 14:16:32 2026 GMT
        Subject: CN=b4eddc2f-4e52-4c4c-83ea-46c9a9a1e6f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:91:f3:fc:31:16:7f:84:96:a2:54:39:cc:bf:
                    47:f2:06:70:a1:fc:70:8f:fa:48:e4:40:81:25:35:
                    66:da:a4:9f:68:66:f3:a4:d4:1c:b4:d9:99:fe:3a:
                    a2:6a:1d:60:9c:27:17:e2:83:00:9b:39:66:86:0b:
                    d9:14:3f:28:78:da:ad:36:c6:27:8b:d1:e2:21:e9:
                    7d:05:09:44:21:95:1b:d0:c4:93:57:f5:22:09:63:
                    b8:ff:1b:8d:56:37:72:bf:dc:8f:7e:9b:30:8b:43:
                    6c:2b:ba:08:22:18:ef:94:ec:72:a8:55:be:5c:47:
                    2f:1e:da:b3:ca:20:33:68:75:eb:ef:0f:d5:22:12:
                    62:61:ac:f2:41:7d:fa:7a:2c:71:95:83:48:f9:0d:
                    87:6a:89:35:1a:a7:be:2c:c5:83:e3:bf:d0:91:52:
                    1b:bb:49:f9:b2:da:7a:38:af:ff:63:6b:a3:fc:99:
                    69:c1:c7:cb:61:1f:0b:7a:ab:c4:94:d5:53:7f:0d:
                    5d:64:6c:61:c4:ed:64:3b:d8:f3:88:33:39:72:7c:
                    61:d2:62:02:1e:df:ad:87:a5:09:d1:83:28:bc:a2:
                    39:b0:7a:90:c7:74:44:7f:bd:ec:e0:05:6e:d5:33:
                    67:81:05:b1:71:c7:fc:ac:ad:8a:55:c0:33:5c:7b:
                    53:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:FB:31:3B:52:EF:C8:7A:88:2D:2A:EE:72:9E:68:6E:2C:9E:EA:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/d71e6504-f412-3bfc-bc96-42b82ef726b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl

            X509v3 Authority Key Identifier:
                keyid:7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:93:d0:42:d8:3f:af:ca:0a:16:98:0d:79:ee:9b:ae:40:cd:
         28:7d:1f:20:52:d7:07:34:f5:96:b4:6c:28:d7:e6:2b:7a:7b:
         15:1a:cb:b8:bf:fd:1a:0c:00:05:1c:12:5b:e4:ca:82:37:88:
         22:b9:44:49:cc:fd:56:1d:04:83:59:67:f0:e5:a6:56:8e:cf:
         2b:32:72:34:ec:32:ab:d4:ee:e6:b4:72:b6:b0:a4:f3:d4:e7:
         df:32:94:cc:3c:51:09:c1:29:70:83:4f:78:aa:7f:9d:7a:fd:
         bc:b2:d5:4e:23:c8:9a:6c:7d:56:f8:bf:80:ba:f5:83:56:f6:
         0e:17:5f:4d:79:90:05:c7:f0:b6:c2:3c:ab:bc:48:91:e6:26:
         72:3f:b7:37:37:f8:6f:75:f7:f5:bc:da:e3:84:fe:f8:92:ec:
         d9:58:8f:4d:b3:43:6f:66:2c:94:42:e9:3d:3e:8a:0a:39:e9:
         b2:1d:c4:a1:22:f9:83:1b:18:8d:6d:c1:98:93:03:35:63:ef:
         62:eb:c2:df:9b:f2:3c:43:5f:4c:45:43:9a:70:d2:c9:d0:46:
         0b:23:df:b0:ea:34:55:e7:8b:49:10:35:26:f1:d5:5b:a6:ec:
         c4:46:4c:36:4f:f9:2d:3e:41:5c:8c:02:7c:9a:ff:30:b3:f1:
         d6:21:e8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:40:49 2026 by rpki-client