Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9/eb861998-933b-39d8-b4de-a7fcd97f739e.roa
File:                     eb861998-933b-39d8-b4de-a7fcd97f739e.roa (raw, json)
Hash identifier:          +s2MlwxK1/he87T0/PQ+Nsg2MDK/Y/C+bhIfqmaHr4c=
Subject key identifier:   83:01:90:D9:B5:46:78:45:CF:95:8E:D9:72:96:96:F7:62:36:94:81
Certificate issuer:       /CN=2522458f-db94-4ba6-8127-005675e4eea9
Certificate serial:       010D0C9F4328584DA11ABB4AE142E43A77264490
Authority key identifier: 59:C1:DC:2B:5E:1E:97:A2:55:CA:3E:43:44:49:99:23:E8:26:E5:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9/eb861998-933b-39d8-b4de-a7fcd97f739e.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     36000
IP address blocks:        208.73.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9/2522458f-db94-4ba6-8127-005675e4eea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9/2522458f-db94-4ba6-8127-005675e4eea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:bb:4a:e1:42:e4:3a:77:26:44:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2522458f-db94-4ba6-8127-005675e4eea9
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=fc66143d-0382-4e3e-9b5c-26eed888a353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a0:58:fe:45:65:98:32:fa:d7:fa:69:d3:3e:
                    ed:80:f4:9b:23:d1:e0:b1:ce:1a:1e:d9:dc:17:ac:
                    48:1f:89:f6:e9:7c:9a:f5:18:1e:3b:36:67:8e:a1:
                    a1:e0:a5:60:15:94:69:13:87:25:9c:a9:5c:3b:a0:
                    2f:e3:a8:63:a2:05:54:16:8c:5f:56:18:1a:da:9b:
                    a4:3b:e2:3a:9d:f7:bc:0b:bf:b9:9e:dd:ad:c3:ec:
                    1c:fe:09:01:ba:cb:a2:d5:23:b7:4a:37:37:13:6a:
                    b3:17:d8:ce:26:e7:a6:42:a0:52:80:ed:c5:46:09:
                    28:ca:08:11:66:02:de:e7:48:d1:55:fd:7e:e9:da:
                    28:8d:4e:19:d1:34:92:30:18:ea:d0:6e:06:f1:03:
                    53:f8:76:b0:2d:75:71:da:77:f4:05:ad:8e:58:4c:
                    77:6d:4d:44:d7:34:fd:29:0f:3b:73:62:13:cd:a6:
                    99:b6:1f:02:23:78:11:06:4c:20:06:d0:cc:28:ef:
                    19:cc:d1:9f:fd:29:4b:ed:7b:21:0f:d1:f9:09:95:
                    f0:65:9a:b0:cf:bf:7b:c4:7e:1b:d9:1b:5a:96:8b:
                    d9:48:c7:d9:54:07:99:27:ad:d5:1b:47:5a:86:8e:
                    c0:91:9c:3f:7c:da:88:51:42:4f:09:d9:cc:7d:7b:
                    18:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:01:90:D9:B5:46:78:45:CF:95:8E:D9:72:96:96:F7:62:36:94:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9/eb861998-933b-39d8-b4de-a7fcd97f739e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9/2522458f-db94-4ba6-8127-005675e4eea9.crl

            X509v3 Authority Key Identifier:
                keyid:59:C1:DC:2B:5E:1E:97:A2:55:CA:3E:43:44:49:99:23:E8:26:E5:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.73.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:3a:84:67:71:91:8e:79:9b:ab:5f:02:4e:21:7c:60:4e:31:
         e6:14:62:0b:3d:f7:92:b7:cd:ad:b3:35:e0:e3:06:11:c4:63:
         91:18:8c:a3:41:f8:2d:f8:2a:c4:6d:eb:d1:ce:8f:60:dc:93:
         b9:5d:ef:fe:b6:6b:6e:6e:5f:f2:2f:c2:ae:09:2d:4a:4f:11:
         17:de:2a:45:e6:4e:70:9c:24:36:97:80:97:06:8c:89:c8:b5:
         94:1f:d5:d5:e5:61:3b:cf:bd:aa:08:bc:67:5f:11:02:74:2b:
         cb:1d:e9:70:6c:31:77:cf:41:5e:67:ee:89:03:82:d4:8a:49:
         0f:56:5b:ff:31:69:9b:5a:01:db:7a:36:2f:10:4b:f7:bf:9a:
         5e:13:11:f9:3a:1d:b8:a9:48:a2:ef:fe:dc:0a:13:e3:d5:91:
         1c:dd:d0:8d:ae:16:6e:38:59:8d:03:2f:e1:5c:a2:c7:18:12:
         8d:de:1f:6e:52:6c:2f:2e:0a:ef:fd:f2:46:c4:f5:5a:2d:2f:
         75:de:b3:07:e0:90:0f:ed:3e:25:58:75:59:68:69:74:cb:2c:
         ae:d4:ad:28:e3:b3:cb:b9:50:09:33:0c:64:02:0b:a2:7a:e8:
         e2:e5:1f:3e:b4:d2:9f:49:0b:ee:19:38:93:52:f2:af:4c:c4:
         39:56:79:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:03:36 2026 by rpki-client