Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e22f9709-dbc2-4fbd-a776-befd371f460a/8f0a40e6-c5ac-3abf-88da-3c31b4ef7db7.roa
File:                     8f0a40e6-c5ac-3abf-88da-3c31b4ef7db7.roa (raw, json)
Hash identifier:          YodIFDXdXLpsq3vnZOLAiHWmsejj0ie8iJARvO2Gd3g=
Subject key identifier:   1B:58:33:B8:59:C9:C2:7D:D7:34:EA:73:50:DB:C3:25:5D:98:AF:60
Certificate issuer:       /CN=e22f9709-dbc2-4fbd-a776-befd371f460a
Certificate serial:       010D0C9F4328584D11726AC1CF0498F66F92EBB0
Authority key identifier: 0A:28:4D:DF:BF:29:B1:DD:48:7F:A1:A9:C6:15:B6:10:76:7F:50:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e22f9709-dbc2-4fbd-a776-befd371f460a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e22f9709-dbc2-4fbd-a776-befd371f460a/8f0a40e6-c5ac-3abf-88da-3c31b4ef7db7.roa
Signing time:             Thu 05 Mar 2026 14:00:40 +0000
ROA not before:           Thu 05 Mar 2026 14:00:40 +0000
ROA not after:            Wed 03 Jun 2026 13:00:40 +0000
asID:                     32728
IP address blocks:        205.132.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e22f9709-dbc2-4fbd-a776-befd371f460a/e22f9709-dbc2-4fbd-a776-befd371f460a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e22f9709-dbc2-4fbd-a776-befd371f460a/e22f9709-dbc2-4fbd-a776-befd371f460a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e22f9709-dbc2-4fbd-a776-befd371f460a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:72:6a:c1:cf:04:98:f6:6f:92:eb:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e22f9709-dbc2-4fbd-a776-befd371f460a
        Validity
            Not Before: Mar  5 14:00:40 2026 GMT
            Not After : Jun  3 13:00:40 2026 GMT
        Subject: CN=49623687-cb21-4757-8a2b-1754ed8a64dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ce:37:c6:90:1b:62:8b:8d:66:27:b8:3d:26:
                    50:53:2a:49:28:cd:31:a0:7d:ab:72:dc:98:62:9c:
                    9f:db:da:bf:41:57:de:84:a9:4b:17:8c:ed:6e:87:
                    eb:58:a9:da:0e:5c:8e:ad:05:1d:34:1c:69:75:91:
                    82:ad:c1:ba:f7:26:ac:5e:79:05:39:86:a1:41:6e:
                    41:dd:75:19:6a:a6:bd:77:e6:c7:86:cf:ad:36:1b:
                    c9:7c:c4:0d:f0:3b:5f:08:8b:0c:97:66:11:9c:d6:
                    28:0e:1f:df:aa:b4:16:3e:f3:17:10:c2:dd:d5:6f:
                    2e:ff:f5:ed:50:47:b0:3e:98:da:19:d4:61:07:2c:
                    49:4b:ef:8b:cd:29:4e:78:e7:e4:f2:d7:dc:11:e7:
                    24:47:f5:23:a7:ae:f7:bb:3e:3d:76:d1:88:0a:fc:
                    89:dd:50:1e:43:da:27:c3:9d:a2:8c:01:ff:fe:16:
                    65:60:79:c2:e9:31:72:64:64:5a:51:ed:da:dd:ff:
                    4b:cc:c9:0d:ba:4d:95:c4:bf:b5:cf:a0:6f:6e:f7:
                    cb:51:15:e2:7f:43:67:a1:ab:f9:aa:b2:52:54:1f:
                    d8:c7:09:58:c5:ff:e6:cb:bc:92:02:b1:45:06:d2:
                    33:ef:35:65:2e:99:d8:55:2f:9d:86:57:11:78:cd:
                    b5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:58:33:B8:59:C9:C2:7D:D7:34:EA:73:50:DB:C3:25:5D:98:AF:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e22f9709-dbc2-4fbd-a776-befd371f460a/8f0a40e6-c5ac-3abf-88da-3c31b4ef7db7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e22f9709-dbc2-4fbd-a776-befd371f460a/e22f9709-dbc2-4fbd-a776-befd371f460a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:28:4D:DF:BF:29:B1:DD:48:7F:A1:A9:C6:15:B6:10:76:7F:50:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e22f9709-dbc2-4fbd-a776-befd371f460a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.132.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:1e:63:53:3b:a4:a7:2b:dd:25:88:e5:f6:36:67:89:c5:79:
         7e:02:29:e6:5e:29:b4:e5:70:99:e8:2d:40:d7:b5:39:50:35:
         b3:ee:14:3d:f4:b5:b0:ea:1d:57:30:ac:5c:c0:2d:23:26:09:
         0e:0c:8a:11:a7:d7:8f:43:25:5c:0f:ce:38:fd:b1:f4:ec:a6:
         0f:fd:46:21:33:ea:b1:da:01:65:c1:9c:6b:9c:5a:bf:ac:33:
         99:2e:d4:41:91:08:7a:52:b8:92:4e:81:fd:89:3c:cb:a3:00:
         c6:b0:db:59:c0:7a:b6:f5:77:7e:ab:d0:e6:32:79:19:2e:22:
         17:9d:0c:ca:6f:a0:82:86:79:da:05:c3:c5:e5:07:9c:6f:e8:
         1b:be:c1:da:f8:41:ec:a2:54:90:4f:d6:e6:ba:5d:9f:46:48:
         95:26:01:20:ed:20:26:32:be:6e:4b:89:3d:c1:b4:dd:c7:e3:
         9c:e8:04:1c:b0:8a:7b:08:f4:85:e5:68:7e:76:52:91:1f:5e:
         1f:14:e9:1b:47:07:b4:97:34:0a:41:ce:3c:c3:40:92:9a:77:
         7c:18:a9:a7:e9:3c:70:f1:d9:a8:0f:a1:2d:ce:9a:af:32:ba:
         9d:77:bb:b4:5b:6c:86:5b:b9:f7:51:32:4d:f9:8a:61:01:16:
         95:06:68:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:12 2026 by rpki-client