Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/1feb28b6-d4c0-3b94-8f6d-17a1362c5d28.roa
File:                     1feb28b6-d4c0-3b94-8f6d-17a1362c5d28.roa (raw, json)
Hash identifier:          mrx0zPCThVAYeosps+xhA9TO0S5idicPDbV3m6A2t4c=
Subject key identifier:   1B:D6:6D:D9:8F:B8:22:F5:97:CD:14:79:EA:2C:74:9F:FD:51:83:7B
Certificate issuer:       /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial:       010D0C9F4328584D1F4A079A364C88C5719BD300
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/1feb28b6-d4c0-3b94-8f6d-17a1362c5d28.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     6079
IP address blocks:        209.236.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:07:9a:36:4c:88:c5:71:9b:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=8b2d0843-195f-417c-ae47-4c937f0a4eb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:88:0a:4b:4c:10:af:32:06:24:8e:c8:75:c5:
                    cc:81:ad:41:37:8e:3c:29:12:8e:e0:52:68:d3:2b:
                    d4:56:26:18:61:27:92:3f:00:da:28:16:70:cb:9e:
                    9d:b2:05:a8:db:24:8d:a5:9c:c9:7e:ce:63:6f:f4:
                    ec:01:65:84:5c:36:05:a6:2b:2b:4e:b8:d8:f4:8e:
                    1a:84:82:4e:fb:b4:58:7d:09:49:81:a4:b6:55:76:
                    22:ce:bf:aa:17:db:13:e8:d4:b9:52:43:5c:ca:e7:
                    a1:00:16:97:82:12:a7:a5:02:16:2f:42:b9:29:f8:
                    db:cf:a3:5c:b5:2e:ed:0d:26:6a:45:b6:d3:0d:13:
                    f6:c0:cd:9e:e0:26:31:b7:47:5c:26:01:0d:e4:2a:
                    9f:9e:1e:5d:90:e4:9f:32:eb:dd:30:b7:6d:d6:38:
                    4e:c9:55:ba:a3:ef:bf:5e:a2:58:d3:13:71:fa:23:
                    05:e2:6e:f4:4f:cc:88:d6:f3:cf:d3:0c:c1:79:f0:
                    9e:42:84:45:a7:9d:a7:81:d9:71:7a:ec:15:72:a3:
                    97:75:83:30:d7:02:12:e4:22:03:e4:4c:c9:41:6d:
                    f9:ce:b4:32:a2:ff:eb:4e:c5:e0:c2:3a:fd:15:9e:
                    7a:b7:67:d2:22:6a:df:99:07:6c:8d:ce:59:f2:e2:
                    a0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:D6:6D:D9:8F:B8:22:F5:97:CD:14:79:EA:2C:74:9F:FD:51:83:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/1feb28b6-d4c0-3b94-8f6d-17a1362c5d28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl

            X509v3 Authority Key Identifier:
                keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.236.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:39:d3:4e:d1:36:21:d7:b8:55:1b:c9:c7:30:11:a6:6b:2b:
         e9:5b:18:54:a8:4e:2f:fb:dd:8e:71:ab:25:66:c0:e3:bb:06:
         97:8b:84:3f:6e:c7:33:2c:e3:33:10:8d:d3:a2:f1:15:8e:73:
         be:76:cb:6d:f4:a8:b3:a4:c1:e3:33:86:ef:e9:5e:bd:c9:3f:
         32:ba:73:e3:da:d2:a2:c0:9d:1c:8e:fe:be:57:fa:69:fb:ea:
         a6:97:c6:78:94:12:c2:16:e2:b0:e5:9b:e6:b2:31:6f:72:16:
         93:9c:58:68:cd:8c:5b:56:b1:1b:dc:5a:1d:f1:54:97:bb:96:
         f9:92:fa:c5:29:56:09:15:d3:66:19:05:c0:19:6e:22:18:15:
         53:ab:70:6e:3e:b3:e1:81:bb:b5:30:75:a7:64:58:3b:73:57:
         89:fd:07:c8:55:fb:e1:17:1f:c8:5a:c5:59:df:27:95:91:9a:
         99:60:20:95:c7:cd:41:e5:71:b5:6e:e6:6d:95:af:2c:d6:47:
         ec:90:05:b0:a7:5d:1a:0b:9b:b5:d9:c4:9c:7c:4a:6c:7b:27:
         b3:d9:42:18:9f:73:b8:2e:63:33:d8:d7:b8:34:7f:ae:14:3d:
         2e:2f:f6:dd:b1:8a:a8:52:4b:be:53:b8:c4:ae:3f:a4:bc:c3:
         7e:9e:e0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:25:19 2026 by rpki-client