Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/357ebc88-908a-340f-8f67-988f1efd1714.roa
File:                     357ebc88-908a-340f-8f67-988f1efd1714.roa (raw, json)
Hash identifier:          QTNUdVRaS7Tt7MGZReGq2WXguv+X8IuuiyC9B2YsJY4=
Subject key identifier:   F4:E8:72:FA:E6:75:8B:1D:0B:33:B1:DF:E0:A6:55:F2:A8:A0:C0:03
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F4328584D237A101930AA06F8C0410858
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/357ebc88-908a-340f-8f67-988f1efd1714.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     2914
IP address blocks:        208.80.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:10:19:30:aa:06:f8:c0:41:08:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=0fde257f-4800-4a29-92c1-d00b94c04036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:38:da:c8:bf:48:98:69:9c:64:a8:28:cd:8c:
                    77:1e:e3:e0:81:24:2f:38:2f:c4:9a:14:b7:b4:99:
                    50:3d:e8:e9:9d:5c:81:98:02:35:28:fb:53:44:00:
                    be:c0:af:b9:e4:1f:6b:d4:66:ec:9f:68:5f:96:5a:
                    c0:0e:55:1e:22:fe:4d:6d:9c:1f:b8:6b:69:3a:ab:
                    7d:1f:76:33:2f:c3:01:9d:c4:30:96:ff:e0:f6:83:
                    d4:ac:68:88:e6:e8:c1:7d:bf:84:6d:c6:b8:a5:08:
                    f7:2a:fb:2a:c7:86:1a:2f:37:7d:d7:95:9a:6e:fd:
                    85:1b:b8:ff:07:45:46:cd:ab:ab:f7:84:3d:5f:ca:
                    d5:9a:9d:e1:90:6a:b6:bf:10:02:2e:e7:52:31:b7:
                    39:51:75:92:38:2a:c7:8d:65:53:6f:37:f8:0b:3b:
                    16:ab:98:04:7a:e8:22:30:58:85:b8:55:42:b3:87:
                    ec:a1:70:81:c0:cd:b4:24:cf:b6:ba:24:f7:ba:cc:
                    7a:2b:68:4b:80:81:4c:e3:d2:16:b7:98:70:aa:69:
                    ad:3f:38:c2:96:77:e8:aa:f4:0a:f6:5e:85:20:1c:
                    3f:62:5c:74:ad:c2:54:b2:d9:ab:b6:af:3d:4b:1d:
                    e1:b6:ba:69:20:41:15:8d:e6:ad:0d:71:20:32:13:
                    99:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E8:72:FA:E6:75:8B:1D:0B:33:B1:DF:E0:A6:55:F2:A8:A0:C0:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/357ebc88-908a-340f-8f67-988f1efd1714.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.80.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:7e:9f:4c:47:77:fa:71:c4:f1:96:30:53:30:65:2e:16:c2:
         97:70:6f:2a:16:2a:cc:c8:a1:91:c8:b8:e5:53:e4:0c:fe:c0:
         8d:90:ad:0c:c6:9d:41:c6:aa:94:d8:b9:b3:65:bf:cd:c0:c0:
         cd:42:aa:ec:fe:13:7f:e4:56:f4:34:ae:bb:bb:b4:39:6d:0b:
         17:95:5a:23:fd:b2:35:b2:ec:51:31:13:d9:5a:66:12:be:2a:
         c8:43:be:3f:1b:9c:6f:80:df:46:28:06:82:66:02:13:e3:5d:
         4c:5e:16:45:ac:83:58:20:21:e3:9d:67:c9:92:19:ca:a8:cc:
         e1:f0:5a:54:fa:4e:63:84:3d:c6:76:c0:91:e2:6c:e8:64:d9:
         a7:c1:d1:d6:5d:77:52:e9:a6:11:63:82:cf:cc:d5:28:ab:6c:
         4f:5b:a9:a1:d2:23:b6:5f:9e:1e:c5:7c:9d:20:2e:e4:6e:54:
         4c:ea:73:71:ec:32:b1:29:80:fe:6f:98:d6:c7:37:82:8a:08:
         e1:df:92:3d:0c:69:cb:17:45:f3:4e:e0:fc:1b:04:1e:2d:4c:
         c9:d7:76:50:42:40:5a:f4:27:d6:a8:07:f1:41:77:20:dd:8e:
         40:b9:df:68:b6:a2:da:c4:f1:3a:b0:46:f4:9c:86:a4:19:e7:
         fe:64:37:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:12:45 2026 by rpki-client