Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac31201d-d18d-4a22-837e-aa1c05197e8b/5860102a-aea6-36fc-8df0-f225930eaeb7.roa
File:                     5860102a-aea6-36fc-8df0-f225930eaeb7.roa (raw, json)
Hash identifier:          97X/sqwe9PudWShLJaUix9APGLn+dbTol2u0vEWNz4w=
Subject key identifier:   1B:14:1C:AB:58:21:BE:4F:0D:49:D7:F1:7F:A1:96:34:85:AD:4E:78
Certificate issuer:       /CN=ac31201d-d18d-4a22-837e-aa1c05197e8b
Certificate serial:       010D0C9F4328584D773A806A19974D5A5373CA60
Authority key identifier: A3:28:A4:0E:AE:B3:94:DA:E4:56:60:96:36:DD:55:87:AE:00:5A:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac31201d-d18d-4a22-837e-aa1c05197e8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac31201d-d18d-4a22-837e-aa1c05197e8b/5860102a-aea6-36fc-8df0-f225930eaeb7.roa
Signing time:             Sat 11 Apr 2026 01:00:24 +0000
ROA not before:           Sat 11 Apr 2026 01:00:24 +0000
ROA not after:            Fri 10 Jul 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        207.210.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac31201d-d18d-4a22-837e-aa1c05197e8b/ac31201d-d18d-4a22-837e-aa1c05197e8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac31201d-d18d-4a22-837e-aa1c05197e8b/ac31201d-d18d-4a22-837e-aa1c05197e8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac31201d-d18d-4a22-837e-aa1c05197e8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:77:3a:80:6a:19:97:4d:5a:53:73:ca:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac31201d-d18d-4a22-837e-aa1c05197e8b
        Validity
            Not Before: Apr 11 01:00:24 2026 GMT
            Not After : Jul 10 01:00:24 2026 GMT
        Subject: CN=cb72668f-e18c-43da-83b3-b7caa0c2d641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:42:ac:f7:b1:f2:f4:8b:3a:cd:8f:73:e1:d9:
                    e2:6d:f2:b3:07:fb:28:d2:fb:14:b0:d7:e6:76:af:
                    06:8b:13:47:d9:8b:d9:a9:0d:6f:58:ff:43:25:6a:
                    a9:ce:7e:5e:1b:fb:f2:c9:ea:dc:fe:4f:28:1a:ad:
                    11:8c:04:87:aa:91:e3:6b:d0:8b:de:40:c4:ea:89:
                    7c:94:c5:ff:6e:c5:62:ec:31:bd:4b:ce:55:9e:16:
                    97:9d:8b:6e:b0:17:6e:43:1f:44:65:b7:65:05:3d:
                    e8:13:03:56:5d:fc:da:a5:0a:2f:00:6f:17:0b:2e:
                    56:87:89:64:67:7a:91:9a:1f:b0:8c:a0:b7:eb:3c:
                    75:e3:b5:a2:ef:81:f6:58:15:12:bc:8e:ea:51:39:
                    6f:86:b8:b4:c1:82:b8:b8:62:14:80:b6:a9:9f:de:
                    aa:36:ba:45:62:49:c7:34:f2:67:b5:50:3b:4d:9f:
                    d6:51:f3:74:e8:2d:f3:83:00:02:24:c4:bf:ba:0c:
                    2d:f5:b6:2d:06:22:8b:a5:fb:a8:1f:75:7b:f1:f8:
                    1d:a7:fa:d6:87:96:ed:22:98:09:64:16:5f:ac:d8:
                    09:1a:65:42:aa:a3:5f:1f:b4:7f:08:54:a0:66:77:
                    28:e0:af:33:a0:82:f8:44:ff:3d:60:1f:c7:f6:3c:
                    32:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:14:1C:AB:58:21:BE:4F:0D:49:D7:F1:7F:A1:96:34:85:AD:4E:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac31201d-d18d-4a22-837e-aa1c05197e8b/5860102a-aea6-36fc-8df0-f225930eaeb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac31201d-d18d-4a22-837e-aa1c05197e8b/ac31201d-d18d-4a22-837e-aa1c05197e8b.crl

            X509v3 Authority Key Identifier:
                keyid:A3:28:A4:0E:AE:B3:94:DA:E4:56:60:96:36:DD:55:87:AE:00:5A:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac31201d-d18d-4a22-837e-aa1c05197e8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.210.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:f2:3a:f9:90:47:2c:d8:7a:ea:8a:bd:f8:5a:f3:e3:7b:80:
         a3:77:ec:2e:24:66:6b:18:de:30:0a:b1:d5:43:35:e7:bb:2a:
         86:6d:5a:2f:ed:93:fe:9b:f6:2f:ae:bb:2d:89:d5:24:a2:a0:
         ad:dc:3c:36:4f:fe:9a:84:03:ee:f9:14:0b:22:a6:49:48:ab:
         01:d2:e5:32:6a:f8:5a:66:37:68:c7:2e:d5:69:ee:da:41:ec:
         2d:79:23:4b:ae:d9:ca:85:d7:cf:72:11:a3:da:8b:b7:75:63:
         48:76:08:b8:40:18:19:96:6c:73:5e:12:50:f8:cb:4a:ea:21:
         1d:6d:a2:78:c6:ed:eb:da:f5:45:54:d7:2a:64:c1:31:3c:58:
         7f:c6:9a:f7:0a:36:30:60:d5:e3:8b:7e:ff:4c:07:54:b8:58:
         e1:02:86:42:b3:8e:3f:14:d2:a7:a4:d4:10:7b:61:d2:9d:78:
         ad:ed:20:37:20:52:70:ea:75:12:73:8f:c6:a3:d9:aa:35:9b:
         88:df:c8:7c:61:bf:19:87:73:21:15:a5:fa:c6:c9:d6:cc:e9:
         72:f3:bd:e5:f5:4a:34:f6:05:38:b2:fd:a8:67:ca:b0:fd:94:
         a0:b5:27:a9:fc:21:46:be:cf:14:87:e6:6d:73:20:f2:0c:e3:
         ea:6d:14:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:48:54 2026 by rpki-client