Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/9f0b61eb-9ace-3574-a48d-bc2d4eeb7e8a.roa
File:                     9f0b61eb-9ace-3574-a48d-bc2d4eeb7e8a.roa (raw, json)
Hash identifier:          /0d4r0B+2fmVF09/Y0qs8Isg4t1mDeIlifuCDz6JrNc=
Subject key identifier:   8F:75:FB:7D:4E:FF:68:6B:5C:39:F2:8F:47:03:C6:22:BA:7B:2F:D1
Certificate issuer:       /CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6
Certificate serial:       010D0C9F4328584D40CA4796F209BF913E316B80
Authority key identifier: E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/9f0b61eb-9ace-3574-a48d-bc2d4eeb7e8a.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     9505
IP address blocks:        208.70.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:47:96:f2:09:bf:91:3e:31:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=e5caf8c5-c4d5-4dbb-9b5e-4485c4ba8a22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:03:e0:ca:d6:1a:84:84:04:48:65:5f:99:38:
                    c4:0c:e2:1a:71:f0:63:5f:f7:69:ff:a2:e6:2d:6e:
                    42:d6:ad:38:0d:24:40:cc:da:4b:7a:19:23:00:4c:
                    26:4b:3c:a5:2c:73:74:1d:e6:42:08:4e:8e:35:33:
                    fc:ca:cc:37:44:ed:82:95:bd:31:71:49:c2:92:36:
                    74:29:32:ad:d8:d5:59:8c:f8:df:7b:a0:b6:b6:8a:
                    3c:65:20:37:09:b2:72:3a:94:9c:31:98:e8:01:7e:
                    1d:e8:76:54:f2:cf:82:76:85:72:ce:41:fc:72:6a:
                    6b:47:99:bc:ab:79:ee:83:fb:79:a5:ae:3e:58:a1:
                    fd:78:94:57:ee:ea:b9:4e:ae:e3:69:8b:8a:ea:42:
                    6a:7c:fc:08:54:a9:68:5e:20:67:37:0a:65:7b:66:
                    81:af:c7:a9:da:c4:fa:e9:29:59:b1:1c:5d:16:a4:
                    d4:af:cd:0f:cd:03:10:8f:22:36:52:62:75:00:f0:
                    1a:2a:62:70:7d:c8:3b:95:18:6c:58:47:58:4a:44:
                    97:4e:70:ed:1b:ac:8b:5f:a3:aa:00:90:16:94:0e:
                    7e:57:58:84:7a:63:b9:6c:f8:4c:5c:80:20:96:ff:
                    62:58:63:83:03:b1:5c:0c:9b:9a:a1:ff:8f:38:e2:
                    9b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:75:FB:7D:4E:FF:68:6B:5C:39:F2:8F:47:03:C6:22:BA:7B:2F:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/9f0b61eb-9ace-3574-a48d-bc2d4eeb7e8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.crl

            X509v3 Authority Key Identifier:
                keyid:E2:9D:E8:0D:86:E0:8B:FD:22:CF:FE:65:78:94:20:F0:BD:72:DF:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77c4c62a-3f6d-4c1c-8bdb-3706246cbfd6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:aa:b3:fe:66:c0:e0:cb:79:d1:09:76:34:c8:2d:5c:87:90:
         ec:6c:46:5c:16:61:28:0a:e2:6a:cd:0a:41:1e:91:d6:be:32:
         29:4b:8b:47:06:22:ff:ef:b0:16:63:b2:e4:b7:fd:97:64:98:
         8a:4c:37:f6:27:60:53:0f:b0:70:22:f1:0e:58:7e:4d:ba:b9:
         fd:3e:54:b9:d6:c5:e9:a3:18:d9:4a:8c:37:fc:c4:1b:8f:31:
         eb:b8:23:3e:c3:c6:7d:26:29:b0:72:89:ef:fe:ad:61:2f:06:
         14:e6:26:67:60:e5:74:19:81:e7:45:35:27:7d:ad:15:e7:0d:
         08:f7:13:9f:85:73:22:d6:68:e9:d7:0e:0d:65:39:df:6f:44:
         0c:bc:99:4a:f9:21:1a:22:2c:43:9d:01:a7:5e:67:79:aa:b6:
         bf:35:83:7c:fe:42:46:3f:25:22:41:20:00:a4:25:49:1a:2e:
         e7:78:52:4f:1f:6d:f0:ab:cb:d8:37:41:78:f7:e7:41:27:7b:
         0e:c5:08:df:69:8a:49:08:13:3f:49:91:aa:6d:a3:36:86:83:
         8a:7d:03:4b:92:5f:e7:76:2b:45:ef:99:11:84:fb:b9:07:c1:
         de:a7:97:84:d2:4a:d4:34:18:85:46:f3:93:c6:3e:8c:a7:6f:
         52:e8:4e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:15 2026 by rpki-client