Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/7d8ad61a-3568-305d-b11c-06347f5b968c.roa
File:                     7d8ad61a-3568-305d-b11c-06347f5b968c.roa (raw, json)
Hash identifier:          SD1q3kmt5qn5Q2bGtrkUT0MNyg/vz5AWy8xJrOgkBMQ=
Subject key identifier:   04:F0:BF:04:AE:2A:23:F0:DF:C1:5C:7E:E3:56:36:0E:65:48:00:68
Certificate issuer:       /CN=85ab0b8f-e87f-4660-83cc-46c357202ed9
Certificate serial:       010D0C9F4328584D40CA41ADF73C88404BA0FC80
Authority key identifier: 9D:E5:D3:16:6B:18:97:A4:4E:55:F8:BE:7B:71:30:25:AF:77:9B:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/7d8ad61a-3568-305d-b11c-06347f5b968c.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     14618
IP address blocks:        209.222.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/85ab0b8f-e87f-4660-83cc-46c357202ed9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/85ab0b8f-e87f-4660-83cc-46c357202ed9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:41:ad:f7:3c:88:40:4b:a0:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85ab0b8f-e87f-4660-83cc-46c357202ed9
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=c3471fda-6bbb-4647-ace0-faf5bcc8c12f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ba:99:48:a0:90:5f:9c:82:44:60:cc:d6:02:
                    a7:be:4a:f9:b6:75:b0:5e:3d:7c:86:a0:c5:9d:32:
                    01:20:be:17:c5:33:92:fd:d1:70:c5:4e:ad:8e:d8:
                    ad:e3:85:3d:57:19:9a:bf:06:bc:db:e6:57:af:17:
                    93:23:37:1a:f1:98:63:e5:2c:c3:ff:54:c2:bc:e7:
                    0f:06:2a:fb:28:d9:d5:ec:dd:87:2f:de:7f:56:ab:
                    b5:31:10:28:7a:b1:e0:d1:43:f9:a6:3a:91:d1:4f:
                    56:80:3c:bb:6d:60:aa:93:23:cf:25:02:5a:6d:7b:
                    82:50:41:9a:fb:a4:ae:8e:92:11:77:f3:71:64:f8:
                    91:0b:7e:17:1a:ab:96:72:d5:a9:fe:eb:e2:4c:10:
                    f4:4c:c4:05:bd:e5:2c:e0:b2:f3:b4:83:de:75:1d:
                    fd:60:8d:8d:77:e9:24:c0:a5:dd:1a:7e:ee:7b:d7:
                    5f:7e:73:a3:13:66:4d:89:78:44:39:ee:19:62:83:
                    84:88:3c:41:76:23:4e:bc:4d:ff:e7:dc:1e:94:bc:
                    6e:ba:6a:1e:7e:55:48:9d:51:19:80:26:86:4c:a3:
                    74:cc:50:d5:43:f9:2e:91:3c:95:fe:f2:90:43:d6:
                    a2:54:11:44:cb:93:1c:ac:12:1c:4f:05:c7:e4:7c:
                    60:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F0:BF:04:AE:2A:23:F0:DF:C1:5C:7E:E3:56:36:0E:65:48:00:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/7d8ad61a-3568-305d-b11c-06347f5b968c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9/85ab0b8f-e87f-4660-83cc-46c357202ed9.crl

            X509v3 Authority Key Identifier:
                keyid:9D:E5:D3:16:6B:18:97:A4:4E:55:F8:BE:7B:71:30:25:AF:77:9B:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/85ab0b8f-e87f-4660-83cc-46c357202ed9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.222.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:cd:5c:ff:e2:f8:f8:f3:71:93:b5:21:26:e7:a3:6b:1d:4a:
         ee:80:88:62:88:4d:6f:bb:fe:c9:fc:14:3f:67:6a:a6:b3:79:
         e5:09:d6:4a:2e:f3:37:4b:10:6a:89:8d:b2:e0:61:a9:69:ae:
         e7:1f:6e:4f:44:87:cc:d6:12:49:48:28:f0:5f:21:6e:ec:4e:
         c6:bb:44:a4:9d:0a:6f:4f:a6:c5:51:a9:a1:80:02:7a:4e:4f:
         b6:50:2f:e5:72:dd:4e:d2:f4:1a:3d:59:ea:c5:0b:df:80:3a:
         f3:4b:96:5b:d8:f0:2a:0a:c2:97:95:ef:f4:8c:97:98:dc:de:
         72:82:e0:a8:18:96:4b:f5:12:97:c5:f4:b8:16:d1:ff:ec:48:
         fa:5b:1c:76:42:d1:98:6d:aa:20:7c:5c:3c:c8:c6:9d:1a:9d:
         c7:b8:19:40:2e:57:27:d9:ff:45:1c:81:45:06:fa:ea:6b:64:
         34:ea:14:3d:9b:0a:62:94:a8:36:f8:3c:f6:35:86:9a:c7:0e:
         bd:91:29:a7:65:07:17:6f:80:e4:e9:50:15:d0:e9:b9:d3:07:
         33:9f:4a:60:cc:f0:50:5c:77:bf:97:e1:15:30:d0:0f:56:e0:
         45:3c:b4:16:24:74:c4:5f:e1:ed:30:c4:e4:12:e1:b0:22:c8:
         5e:bc:84:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:04:58 2026 by rpki-client