Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279/1f43c0f2-41ea-3483-8aa5-4f506df31112.roa
File:                     1f43c0f2-41ea-3483-8aa5-4f506df31112.roa (raw, json)
Hash identifier:          2ATnQcStAKqG6f7TKZsW+RuwjLREN16VSuSnXpkzVJA=
Subject key identifier:   22:52:EE:22:EB:1C:E9:70:8D:0F:85:41:A0:AC:AF:97:AE:1C:46:99
Certificate issuer:       /CN=fac4bf11-5ec6-4df2-b8d1-535b6c3c7279
Certificate serial:       010D0C9F4328584DBE6B2484F73B8AE317784240
Authority key identifier: F5:1E:31:A4:4F:90:79:91:BF:60:FF:EB:85:12:43:B0:01:70:C7:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279/1f43c0f2-41ea-3483-8aa5-4f506df31112.roa
Signing time:             Wed 06 May 2026 13:00:30 +0000
ROA not before:           Wed 06 May 2026 13:00:30 +0000
ROA not after:            Tue 04 Aug 2026 13:00:30 +0000
asID:                     396982
IP address blocks:        208.76.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:be:6b:24:84:f7:3b:8a:e3:17:78:42:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fac4bf11-5ec6-4df2-b8d1-535b6c3c7279
        Validity
            Not Before: May  6 13:00:30 2026 GMT
            Not After : Aug  4 13:00:30 2026 GMT
        Subject: CN=2f579862-d7e7-4dde-9090-1df518518b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e9:5d:4e:01:19:68:82:30:1f:23:44:12:fa:
                    d6:da:25:76:72:1f:c3:a8:88:43:da:04:35:9c:46:
                    91:25:4c:e5:79:51:ff:ba:38:89:a9:37:5b:80:e3:
                    76:6e:26:38:a7:f4:cd:0d:aa:03:1b:0a:ab:94:d4:
                    1c:21:68:62:0d:e5:93:79:39:98:e1:8c:95:94:7e:
                    e8:b4:7a:b0:c0:41:ae:c2:50:4a:54:12:ca:d3:00:
                    d0:2d:76:5f:8f:90:e6:e8:2f:3a:cd:ff:56:30:49:
                    3e:ba:f6:d1:8d:3e:49:1f:0b:c7:e5:73:6b:dd:f7:
                    c2:28:17:27:d3:88:b4:7d:50:fb:2a:47:95:f5:79:
                    c0:c7:c9:53:a1:f1:6d:d3:38:3e:c5:c1:ce:9b:a5:
                    0e:5f:cc:e9:d4:bf:53:02:47:84:e1:f6:ed:8c:4e:
                    32:e3:44:55:81:04:45:5a:4f:16:af:d9:f7:56:22:
                    18:36:66:46:cc:6f:a4:41:d0:fe:fa:35:39:51:06:
                    47:2a:6c:0a:14:3e:7e:f9:24:62:b2:3b:f9:fe:7c:
                    64:86:58:dd:7d:89:7b:da:fa:d9:6b:46:c2:d5:07:
                    68:99:cf:e8:9d:1e:25:b9:bc:e7:ff:36:0f:fe:ee:
                    55:ac:e0:f7:58:03:46:b0:8f:55:cf:4b:b6:a8:7c:
                    77:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:52:EE:22:EB:1C:E9:70:8D:0F:85:41:A0:AC:AF:97:AE:1C:46:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279/1f43c0f2-41ea-3483-8aa5-4f506df31112.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279.crl

            X509v3 Authority Key Identifier:
                keyid:F5:1E:31:A4:4F:90:79:91:BF:60:FF:EB:85:12:43:B0:01:70:C7:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fac4bf11-5ec6-4df2-b8d1-535b6c3c7279.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:71:c3:b1:b6:bd:24:f5:b7:26:7a:dc:55:f1:0a:11:3f:61:
         c4:94:58:c8:6b:64:a6:03:f9:16:a3:c9:2d:08:38:fe:d3:41:
         5b:a3:43:14:2f:4c:8c:db:00:b9:f8:23:bf:6f:53:b8:13:c2:
         3e:0b:eb:e5:c1:0f:48:a2:fc:90:e1:fd:5a:df:ea:f9:80:35:
         34:47:ea:c3:6f:70:f9:6e:53:5d:a8:06:6b:50:cb:13:cd:f6:
         82:1f:31:c0:c5:8e:9d:be:41:be:38:5e:40:c7:ec:b0:62:a6:
         14:a0:f3:4e:ca:cf:80:e7:fc:78:f7:a0:1a:09:93:47:00:5f:
         17:32:6d:cc:d7:c9:e5:8e:f2:d5:76:2d:f2:c6:6c:6c:44:37:
         f6:62:bd:13:dd:46:c4:7d:bd:9a:88:3a:89:71:5f:67:fb:d4:
         04:2a:e5:95:df:45:86:af:cf:02:81:a6:c5:9d:aa:54:be:81:
         70:b6:a8:1c:d8:8a:66:e5:34:1a:b8:d3:45:06:eb:7a:1b:06:
         19:26:82:4a:56:ef:a9:72:e7:6a:05:5d:3e:c8:03:df:9b:2e:
         82:7f:5b:13:a1:cb:5a:a2:6a:53:64:08:b4:7a:c8:2a:15:7c:
         50:e4:d2:75:b6:c6:7a:de:6a:7b:a4:0c:3a:c6:10:ff:92:32:
         27:bf:1c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:31:11 2026 by rpki-client