Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/02d4c8c1-811c-301f-ae47-61c6c62035fe.roa
File:                     02d4c8c1-811c-301f-ae47-61c6c62035fe.roa (raw, json)
Hash identifier:          0c4U/WX4r82IYT0naVR0vaCPaorIog+LOYNJIIDJBFo=
Subject key identifier:   5F:05:71:2F:43:3E:C2:3F:E9:A4:37:48:23:97:2D:4A:93:E4:37:22
Certificate issuer:       /CN=b0217be3-0b99-45d9-9156-e23551753455
Certificate serial:       010D0C9F4328584E6144ACACCA842A3305123080
Authority key identifier: 61:F2:92:9F:AE:6F:06:0D:B5:C1:9C:50:85:70:18:63:49:DE:DB:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/02d4c8c1-811c-301f-ae47-61c6c62035fe.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     395019
IP address blocks:        208.76.208.0/22 maxlen: 22
                          2602:fbfd::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/b0217be3-0b99-45d9-9156-e23551753455.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/b0217be3-0b99-45d9-9156-e23551753455.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:ac:ac:ca:84:2a:33:05:12:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0217be3-0b99-45d9-9156-e23551753455
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=b8e15a1f-bb6b-4e9c-bc7a-511a291c608f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:56:07:67:55:91:a1:45:34:57:22:15:d1:ed:
                    18:58:b7:45:3a:bd:14:c6:a5:19:f2:49:33:f1:35:
                    58:43:05:9b:04:6e:ba:93:05:5d:91:ac:d6:21:2c:
                    ab:aa:ff:5f:3c:32:f9:9b:0b:b7:08:3e:d7:dc:d9:
                    71:48:9e:47:34:0a:6e:f7:cb:18:85:8f:fb:5d:18:
                    91:00:11:13:77:c8:1d:be:83:8e:af:27:69:70:e5:
                    5f:ab:40:5f:89:12:e9:95:4e:db:28:d9:18:79:86:
                    5b:96:79:e5:1f:57:7b:75:e5:be:92:7d:d7:4c:ec:
                    5c:05:94:8c:42:2a:3c:07:51:b0:58:01:72:5f:8b:
                    1f:10:f0:41:24:5b:2d:7f:6d:94:38:2d:49:a9:d1:
                    85:bb:d4:0a:fe:f3:2f:03:54:b1:b4:2a:07:bf:36:
                    82:46:d8:72:1a:4d:08:02:6a:b7:33:e5:c1:cb:8b:
                    2b:05:ce:7c:78:30:70:85:9f:20:fb:13:e2:7e:8f:
                    4f:31:d3:43:78:57:a7:35:25:e4:d4:57:fb:6b:4c:
                    01:23:0f:36:63:8c:0b:60:63:06:f6:44:7c:65:8b:
                    1e:69:de:31:19:c7:ea:72:4b:9d:7f:06:0b:3e:d6:
                    68:1f:ed:a8:7c:6e:28:61:54:51:09:ef:a4:d0:68:
                    74:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:05:71:2F:43:3E:C2:3F:E9:A4:37:48:23:97:2D:4A:93:E4:37:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/02d4c8c1-811c-301f-ae47-61c6c62035fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/b0217be3-0b99-45d9-9156-e23551753455.crl

            X509v3 Authority Key Identifier:
                keyid:61:F2:92:9F:AE:6F:06:0D:B5:C1:9C:50:85:70:18:63:49:DE:DB:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.208.0/22
                IPv6:
                  2602:fbfd::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:2c:81:ad:d7:4e:b7:56:5d:c9:71:c4:d9:51:4d:4f:25:dd:
         55:35:bf:3d:92:ae:c4:f9:09:48:02:f9:3b:73:85:6b:c5:56:
         93:f0:75:6b:84:c1:72:75:d0:b6:eb:c6:12:b7:94:b6:11:07:
         04:f9:90:0a:4e:85:90:b4:25:b0:40:a0:38:2d:35:8c:6a:d7:
         af:55:6b:ad:d0:19:86:a1:7b:79:ef:5c:c4:56:51:89:ed:15:
         78:28:a9:4b:a0:f7:fd:0d:d9:a4:1b:21:2c:6f:e3:83:60:1d:
         cf:35:1d:30:1a:81:aa:cf:64:3a:75:12:6e:cc:ff:f6:62:ad:
         8a:ce:c2:e4:d9:22:65:04:e0:4d:2c:6f:0f:d5:43:d6:34:d4:
         d5:4e:d9:14:6a:ae:a9:97:9e:5f:8c:7b:cc:47:38:9f:95:9d:
         29:e1:40:4c:7b:d5:6b:d2:b0:e5:12:20:ae:0b:b2:52:46:15:
         cd:ec:5f:66:06:23:b1:09:ef:e2:33:b5:2d:85:31:f6:ae:78:
         49:77:c2:66:18:9f:84:33:cc:6b:3b:41:97:c3:00:e7:2d:c1:
         fa:0c:b4:33:86:8c:50:4e:f7:e9:99:ab:50:77:2b:c2:66:83:
         b4:c9:00:7d:f9:4d:40:86:fc:bc:79:03:20:81:a9:fc:1c:6d:
         89:4a:d6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:43:22 2026 by rpki-client