Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5e37906-d457-4ca4-a7b1-f3a32fd7bff9/65b2ed3e-e44f-3ce8-809e-fd3e77ae5b78.roa
File:                     65b2ed3e-e44f-3ce8-809e-fd3e77ae5b78.roa (raw, json)
Hash identifier:          nKBks0K8MUdlPX2abCv5Y0o/YjIuum8Yd4ZHZe/RM6o=
Subject key identifier:   08:AF:0E:C4:A4:A1:BD:28:5C:83:76:5A:9F:62:9C:D9:37:C9:6B:B6
Certificate issuer:       /CN=b5e37906-d457-4ca4-a7b1-f3a32fd7bff9
Certificate serial:       010D0C9F4328584D386A36ED88DC84746C412AA0
Authority key identifier: 3F:6E:D7:1E:BC:23:A0:CF:28:75:24:8F:E8:8F:8F:2D:CC:B4:57:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5e37906-d457-4ca4-a7b1-f3a32fd7bff9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5e37906-d457-4ca4-a7b1-f3a32fd7bff9/65b2ed3e-e44f-3ce8-809e-fd3e77ae5b78.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     399536
IP address blocks:        208.79.136.0/24 maxlen: 24
                          2620:92:a000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5e37906-d457-4ca4-a7b1-f3a32fd7bff9/b5e37906-d457-4ca4-a7b1-f3a32fd7bff9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5e37906-d457-4ca4-a7b1-f3a32fd7bff9/b5e37906-d457-4ca4-a7b1-f3a32fd7bff9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5e37906-d457-4ca4-a7b1-f3a32fd7bff9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:36:ed:88:dc:84:74:6c:41:2a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5e37906-d457-4ca4-a7b1-f3a32fd7bff9
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=3d0dd581-0c75-4e1f-b45d-a0bd6607e8fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:06:31:10:d4:96:02:76:85:99:3f:c7:e8:b3:
                    80:87:56:c8:04:10:e0:7e:1d:2d:f7:6e:0f:ff:b1:
                    de:ec:1d:6a:62:d6:9c:68:cb:62:31:5d:14:ae:c9:
                    0f:0c:d3:06:86:cb:48:2c:57:3b:af:92:2b:92:1d:
                    a3:93:87:ef:af:38:1e:3b:35:d9:8a:48:65:a5:d3:
                    46:b8:7b:c9:6f:50:25:61:3b:43:da:6e:6f:a8:10:
                    ed:d6:2a:56:43:97:6b:12:80:e5:b1:3a:aa:ab:33:
                    69:53:e4:0e:f8:44:b3:2a:e6:58:58:95:4c:8b:59:
                    f3:62:bf:17:7a:a8:a2:89:60:f7:e1:ce:71:18:56:
                    fd:63:38:e6:84:d7:b4:01:94:41:53:48:b2:da:f5:
                    47:62:e5:ef:c9:c3:6c:40:83:42:34:90:98:ec:a0:
                    15:29:f5:f7:ad:56:92:41:f2:b9:6c:3e:e1:b0:5b:
                    b0:ea:90:4d:d7:fa:11:18:76:17:37:73:ed:9a:01:
                    96:9c:6d:dc:ab:7c:5b:a3:1e:f1:f3:b4:3f:2e:80:
                    f7:31:9e:2b:3d:fc:be:77:c9:3e:a1:ea:f6:8a:91:
                    90:82:c6:e1:24:8c:a1:7e:2e:8a:d3:eb:39:9a:f1:
                    1c:6b:06:a8:17:93:6d:59:3a:e0:49:06:65:33:e1:
                    c1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:AF:0E:C4:A4:A1:BD:28:5C:83:76:5A:9F:62:9C:D9:37:C9:6B:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5e37906-d457-4ca4-a7b1-f3a32fd7bff9/65b2ed3e-e44f-3ce8-809e-fd3e77ae5b78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5e37906-d457-4ca4-a7b1-f3a32fd7bff9/b5e37906-d457-4ca4-a7b1-f3a32fd7bff9.crl

            X509v3 Authority Key Identifier:
                keyid:3F:6E:D7:1E:BC:23:A0:CF:28:75:24:8F:E8:8F:8F:2D:CC:B4:57:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5e37906-d457-4ca4-a7b1-f3a32fd7bff9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.79.136.0/24
                IPv6:
                  2620:92:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:fc:14:fc:9c:e9:9c:5f:2d:60:95:44:24:9f:c9:bd:4f:8d:
         cc:79:8a:8e:d4:1e:f2:84:bd:be:03:e2:b6:87:42:91:95:fe:
         aa:52:89:f8:3a:b7:fa:ef:a0:0b:fe:9c:1c:bc:60:00:f1:b4:
         c1:73:20:04:0e:31:f7:d2:12:8f:f6:7e:b8:61:7c:cc:01:15:
         b8:5c:d9:7a:f1:b5:d3:d4:18:79:b3:40:5c:02:21:02:cd:20:
         b7:47:69:35:1a:b7:7b:39:77:c3:7c:38:2d:58:d2:5b:8a:8c:
         92:58:ec:3a:00:d6:a2:df:d4:05:8a:eb:97:97:4f:d1:92:43:
         21:ee:a1:cc:76:70:57:73:f8:ff:da:32:7f:70:c5:11:a3:1b:
         26:26:1f:54:b0:61:c4:32:43:94:6f:5d:3b:e1:64:db:48:16:
         9d:0f:2d:16:06:c8:24:8f:fe:ba:4a:87:d4:16:77:de:1c:b5:
         81:8c:20:26:e2:05:69:b4:b9:b5:e6:4a:a6:05:61:8e:f8:90:
         39:d5:6a:9d:f1:f2:77:e0:2a:47:da:65:c6:fa:2b:c4:95:8a:
         5d:e8:16:22:2f:69:d1:ec:dd:9a:90:fd:b6:a7:68:dc:92:ec:
         f8:8d:8d:7f:df:c0:e7:f2:8b:0c:76:5f:14:7a:77:05:7e:f5:
         e7:72:97:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:53 2026 by rpki-client