Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fe8b65a3-820c-495e-8142-f185c536467c/d4129661-2570-39b6-8a42-e8a60bf56818.roa
File:                     d4129661-2570-39b6-8a42-e8a60bf56818.roa (raw, json)
Hash identifier:          3OK0w3BwtF25PDwciUlB1SY7IHihfJ7kAXYZMaKDyuQ=
Subject key identifier:   78:8E:60:B8:B8:EF:18:E1:7E:6E:3B:3C:DE:67:B9:4C:FF:78:0D:B8
Certificate issuer:       /CN=fe8b65a3-820c-495e-8142-f185c536467c
Certificate serial:       010D0C9F4328584D9FB567877162EF9933525080
Authority key identifier: C9:DA:C4:3E:33:C9:7C:A7:7E:13:91:75:9B:C6:CF:D0:04:C8:D4:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fe8b65a3-820c-495e-8142-f185c536467c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fe8b65a3-820c-495e-8142-f185c536467c/d4129661-2570-39b6-8a42-e8a60bf56818.roa
Signing time:             Sat 25 Apr 2026 13:00:30 +0000
ROA not before:           Sat 25 Apr 2026 13:00:30 +0000
ROA not after:            Fri 24 Jul 2026 13:00:30 +0000
asID:                     8075
IP address blocks:        208.80.20.0/24 maxlen: 24
                          208.80.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fe8b65a3-820c-495e-8142-f185c536467c/fe8b65a3-820c-495e-8142-f185c536467c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fe8b65a3-820c-495e-8142-f185c536467c/fe8b65a3-820c-495e-8142-f185c536467c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fe8b65a3-820c-495e-8142-f185c536467c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9f:b5:67:87:71:62:ef:99:33:52:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe8b65a3-820c-495e-8142-f185c536467c
        Validity
            Not Before: Apr 25 13:00:30 2026 GMT
            Not After : Jul 24 13:00:30 2026 GMT
        Subject: CN=2e399edf-cd7b-42eb-bc01-f5dd1a794868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:42:7c:77:c1:2f:ea:8e:cc:0b:e0:34:47:c7:
                    1a:f6:b0:c4:3c:9c:ba:22:ae:b7:89:fe:14:11:45:
                    30:45:99:ec:fc:20:d8:e0:64:d1:01:f0:d2:c9:a9:
                    77:84:d0:67:8a:3c:17:88:56:a4:b6:1c:44:79:9f:
                    c1:33:aa:8c:5b:1c:ba:29:96:92:4f:de:a8:a4:d6:
                    7e:92:16:b9:09:6c:00:ee:12:f9:73:b8:8e:0c:f8:
                    6b:21:d7:55:de:c9:86:c1:41:5d:c3:78:4a:37:fe:
                    43:57:8b:69:6b:08:fb:3b:11:b2:29:9e:7d:9b:e0:
                    ca:58:64:90:d6:8c:64:b2:b3:44:34:9d:73:7a:ea:
                    e4:5c:db:60:de:96:cf:22:23:fa:96:7c:ec:8a:a8:
                    d0:d1:ce:b4:fc:94:94:2a:b8:cd:59:d4:bc:b7:b4:
                    dc:98:5f:8b:6d:d2:84:a5:9d:3c:6b:83:d4:a0:b2:
                    31:5f:d5:93:2e:cb:32:9b:55:73:1d:80:58:81:89:
                    84:0b:15:96:61:07:af:19:e3:36:e4:0c:af:66:d3:
                    8a:cc:19:4c:fc:ab:fe:ca:80:27:8d:a3:f4:d5:dc:
                    e5:2b:24:5f:93:43:47:21:8f:47:0e:4c:86:03:a6:
                    c7:99:b4:84:48:c1:97:51:49:0d:23:b8:1c:dc:a1:
                    6d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:8E:60:B8:B8:EF:18:E1:7E:6E:3B:3C:DE:67:B9:4C:FF:78:0D:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fe8b65a3-820c-495e-8142-f185c536467c/d4129661-2570-39b6-8a42-e8a60bf56818.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fe8b65a3-820c-495e-8142-f185c536467c/fe8b65a3-820c-495e-8142-f185c536467c.crl

            X509v3 Authority Key Identifier:
                keyid:C9:DA:C4:3E:33:C9:7C:A7:7E:13:91:75:9B:C6:CF:D0:04:C8:D4:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fe8b65a3-820c-495e-8142-f185c536467c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.80.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:dd:86:ec:65:ca:f5:5c:3e:da:10:b6:e3:01:0d:c0:be:bb:
         c1:f1:c5:ae:94:de:26:1a:7a:2e:6d:56:cc:6f:61:f1:a0:cc:
         64:c4:05:31:de:81:d8:8f:e0:0d:36:23:4f:c8:4b:e5:fe:db:
         ea:8f:db:04:18:3c:de:86:16:b3:20:8c:08:ae:7b:2b:6a:fb:
         39:85:de:ff:17:e2:a3:a0:5a:ee:60:24:4e:e0:d7:b0:a8:a2:
         62:16:da:c2:9e:df:c5:31:4b:32:bb:19:3a:16:2b:a0:8b:d2:
         0f:e3:10:88:36:8d:90:cc:53:fa:fb:7b:a9:c5:9f:1f:70:ec:
         05:17:64:f4:f7:a3:47:61:12:f4:56:eb:29:8a:cb:ef:ae:2d:
         23:50:7a:51:62:f5:8a:c0:80:57:34:41:47:89:d9:dd:d5:af:
         89:5d:c9:f2:b8:c1:af:23:f9:c0:b4:c7:3c:f5:2d:9b:cb:54:
         c5:67:4a:c3:5e:9a:11:c7:a0:13:c9:bd:be:f2:c0:28:f9:06:
         b2:5e:71:b9:c2:b2:b0:b7:11:22:c7:2b:ee:4a:68:47:e7:9d:
         d4:af:a6:13:c7:9a:74:6d:0f:07:04:af:d6:e0:1c:68:ad:b2:
         a8:c5:1b:a4:1f:8b:28:70:bc:a2:40:a6:f7:1c:d8:c2:0f:91:
         5d:b0:b3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:29:22 2026 by rpki-client