Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fff213e1-4c40-384e-a94d-b128794724e5.roa
File:                     fff213e1-4c40-384e-a94d-b128794724e5.roa (raw, json)
Hash identifier:          voBhlIR8WS6pI/rVB8L8xoPxwITEoj8wTGPyYEVcDPU=
Subject key identifier:   2A:AE:0A:B7:4E:DC:42:0E:72:6B:F4:09:32:A2:EF:87:97:96:88:D7
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584D1B1A1382EE2F9F5F0C7B7A80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fff213e1-4c40-384e-a94d-b128794724e5.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     397630
IP address blocks:        208.52.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:13:82:ee:2f:9f:5f:0c:7b:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=ce113f2b-d00a-4660-bd4a-cadc52bf76b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:97:ba:8c:31:23:29:02:33:df:eb:e6:de:bf:
                    7b:90:6c:93:ac:f3:ad:cc:82:34:46:67:dc:3b:b5:
                    fc:65:77:2a:7d:1b:59:27:7a:8f:e1:cf:c4:f9:a8:
                    76:9a:b5:df:34:da:7f:8f:97:ec:33:6a:07:24:b6:
                    2b:1e:fb:e7:2e:cd:fe:b2:f0:4f:82:42:9e:16:75:
                    6d:87:8e:5e:56:40:19:97:81:ee:51:7b:de:3c:c0:
                    7a:e8:8f:9f:92:7d:88:1f:f3:47:65:a9:aa:36:3b:
                    23:56:ac:9e:c2:69:ba:f1:0e:eb:c1:b6:af:c0:52:
                    ff:1a:c0:27:22:9c:d6:9a:ed:69:86:09:0f:23:af:
                    8c:af:75:fd:ad:f0:e8:6b:2c:ee:34:61:d2:2b:8b:
                    b7:46:70:46:4f:c4:c0:8f:2e:69:2d:3b:34:8c:4e:
                    c3:8f:c5:dc:c6:1c:8e:3f:f0:72:f4:37:3e:4a:81:
                    2a:00:33:b4:d1:94:07:6a:48:c7:fb:54:58:78:c2:
                    16:0f:50:c1:b2:9d:28:9d:3d:10:fd:0f:cf:30:bb:
                    51:a1:35:0b:d3:31:66:12:46:c1:df:2e:03:f5:9c:
                    86:9d:05:02:2b:9c:d0:06:c8:62:23:89:2c:5a:5d:
                    e9:4c:75:85:68:1c:94:ad:79:d1:2c:b8:e3:6c:a0:
                    bb:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:AE:0A:B7:4E:DC:42:0E:72:6B:F4:09:32:A2:EF:87:97:96:88:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fff213e1-4c40-384e-a94d-b128794724e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.52.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:fd:92:b6:63:15:66:a3:7b:f0:3c:71:9a:fe:44:8c:58:24:
         77:1c:d7:a2:1c:7b:ff:d0:03:a8:dd:5c:a5:87:ee:b5:e6:1e:
         3f:81:18:49:30:4b:ff:6c:df:85:f3:95:dc:9a:aa:63:69:45:
         a8:59:b4:de:3d:ef:97:2a:1f:43:d7:e5:88:89:fc:50:44:aa:
         e2:8b:e1:91:7f:38:7c:6e:e2:f3:a3:b1:72:87:43:80:14:50:
         9d:fe:44:e8:d4:35:fe:3e:06:d4:cc:0e:ff:b1:25:a1:fc:e7:
         26:93:95:04:be:26:22:46:61:5d:72:1d:35:25:8c:1a:29:31:
         cd:46:e6:d8:58:17:c2:78:91:ef:28:03:de:40:7c:01:c2:5a:
         13:96:09:68:a1:ef:8a:d7:9c:a5:37:67:47:b6:9f:34:33:f9:
         5e:ef:26:79:88:53:28:b5:4b:5e:6a:ed:9b:c7:c5:ea:dd:26:
         fb:93:e3:7f:ca:ca:93:78:c6:04:a7:4e:08:83:56:b5:c3:1f:
         4b:ae:01:67:8e:33:7e:29:f8:06:20:19:52:a5:c6:0c:00:a7:
         8a:ee:bd:59:cf:b7:6c:96:10:85:6c:f7:cc:64:bf:22:34:f7:
         3c:64:33:54:93:02:b6:ce:77:2f:93:44:9c:52:b2:e8:f7:b2:
         60:ae:2a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:27:46 2026 by rpki-client