Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59/d5182fee-7a81-304a-a9e9-fe231156848b.roa
File:                     d5182fee-7a81-304a-a9e9-fe231156848b.roa (raw, json)
Hash identifier:          Oh/Gubx4q6MZZh9/tVWNZBNg2ZvLft5UFOd8QtRcguQ=
Subject key identifier:   3B:ED:A5:5F:A8:D6:0E:E6:80:BE:E0:77:A8:AC:B4:DA:E4:7C:E1:13
Certificate issuer:       /CN=ccb98637-aae1-42c3-90ca-0cee2f4ebf59
Certificate serial:       010D0C9F4328584D1C0C17FD8BBED6FCB6BE3E20
Authority key identifier: 26:ED:05:C4:E6:BA:DC:DE:5A:7A:14:24:02:A6:15:CF:1C:45:7E:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59/d5182fee-7a81-304a-a9e9-fe231156848b.roa
Signing time:             Thu 19 Feb 2026 17:06:36 +0000
ROA not before:           Thu 19 Feb 2026 17:06:36 +0000
ROA not after:            Wed 20 May 2026 16:06:36 +0000
asID:                     10974
IP address blocks:        208.79.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59/ccb98637-aae1-42c3-90ca-0cee2f4ebf59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59/ccb98637-aae1-42c3-90ca-0cee2f4ebf59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1c:0c:17:fd:8b:be:d6:fc:b6:be:3e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccb98637-aae1-42c3-90ca-0cee2f4ebf59
        Validity
            Not Before: Feb 19 17:06:36 2026 GMT
            Not After : May 20 16:06:36 2026 GMT
        Subject: CN=e90f265a-f9dc-43b0-b3e1-b9619857b867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:76:e3:2f:11:73:91:34:f2:85:9e:24:d4:2b:
                    a6:10:b9:ff:9f:bd:c8:e0:4b:0c:ac:39:e1:12:22:
                    63:6f:71:bb:e0:7f:d6:e0:ab:d1:10:1d:2f:96:53:
                    db:0b:d4:a7:d6:c8:dd:dd:a7:2f:11:95:57:e1:f1:
                    06:39:3a:82:95:6a:c9:3c:b6:2e:5c:f1:a5:07:ae:
                    eb:cb:9f:c2:77:89:3a:83:45:d5:af:c4:eb:bf:80:
                    4b:41:c8:e3:e0:34:36:b2:a8:9a:22:7a:69:04:95:
                    40:04:d8:c8:d2:1a:d4:6d:03:98:4b:60:fd:ad:29:
                    7f:0c:49:3d:31:0e:f1:30:72:6d:e5:f6:35:59:98:
                    de:a0:f5:89:65:eb:bd:ad:d5:7f:34:4b:f2:be:4c:
                    b3:04:27:45:4f:28:bb:2c:24:5c:eb:59:db:2d:1f:
                    fa:61:00:b0:a5:3c:f9:b1:ff:f4:f3:9a:28:3c:8b:
                    cc:71:98:4f:02:1a:87:8e:73:56:fd:99:a7:41:3e:
                    fb:d9:ff:55:45:68:a6:92:45:3c:1b:8c:8a:41:8c:
                    12:06:46:76:ce:f9:94:d8:45:39:71:4c:05:18:9a:
                    54:fa:26:ee:61:dc:58:25:e7:50:2e:14:72:d5:db:
                    2b:cf:c5:a5:69:90:78:55:18:22:85:ac:b6:b8:fc:
                    67:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:ED:A5:5F:A8:D6:0E:E6:80:BE:E0:77:A8:AC:B4:DA:E4:7C:E1:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59/d5182fee-7a81-304a-a9e9-fe231156848b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59/ccb98637-aae1-42c3-90ca-0cee2f4ebf59.crl

            X509v3 Authority Key Identifier:
                keyid:26:ED:05:C4:E6:BA:DC:DE:5A:7A:14:24:02:A6:15:CF:1C:45:7E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ccb98637-aae1-42c3-90ca-0cee2f4ebf59.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.79.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:10:9b:28:29:80:29:c6:54:70:84:c8:4c:eb:08:f2:c1:87:
         8f:41:46:5c:46:f6:de:bb:14:0a:c7:f0:bb:77:a7:d0:30:79:
         b7:03:b4:05:f3:59:26:bb:5d:44:08:4e:22:43:cb:c9:96:cc:
         e2:da:6f:44:12:2b:94:50:63:4f:8e:73:ec:c3:0d:01:54:66:
         03:67:8c:c2:ff:7f:d7:48:52:c0:b0:11:1e:bf:a5:23:49:05:
         be:36:7b:72:f4:5c:a0:b8:85:21:3a:0f:ae:67:a8:44:51:48:
         6d:4f:36:ce:83:c4:a6:75:34:e1:c3:42:c4:e5:87:99:35:de:
         fd:2f:ff:92:bc:7b:8c:54:26:55:46:50:8d:b4:2b:f6:6e:0e:
         e3:73:1b:6c:8a:a4:ca:d4:e8:e4:c6:7e:60:35:e1:34:99:05:
         f5:cb:3c:32:ac:0b:72:02:6f:58:db:89:7b:d7:3e:86:89:2b:
         3e:d7:64:8a:f0:c1:ca:6f:5b:7c:4d:61:bc:6d:cc:ee:58:0c:
         2c:10:58:c4:95:d0:b7:a9:a7:b0:69:f8:9c:5a:83:4b:5a:7f:
         4b:aa:a6:29:7b:87:73:f5:d8:a0:55:f4:5b:4f:c4:21:de:dd:
         d8:f8:1d:30:10:5d:c7:52:d5:f1:f8:d8:ba:bd:8d:e6:f7:31:
         50:7b:d3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:33:07 2026 by rpki-client