Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/402ab080-ccaf-3fb2-9884-c0720b7912b3.roa
File:                     402ab080-ccaf-3fb2-9884-c0720b7912b3.roa (raw, json)
Hash identifier:          4eJQEYZDJHpbX7DXkRobDKt3qMdCXEJn5Lf890XJdIs=
Subject key identifier:   74:8C:E2:5F:72:3E:62:43:A3:93:19:05:F4:B0:40:E7:C9:32:7D:3E
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584DBEB353D050215F3E522C9880
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/402ab080-ccaf-3fb2-9884-c0720b7912b3.roa
Signing time:             Wed 06 May 2026 15:26:29 +0000
ROA not before:           Wed 06 May 2026 15:26:29 +0000
ROA not after:            Tue 04 Aug 2026 15:26:29 +0000
asID:                     0
IP address blocks:        208.31.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:be:b3:53:d0:50:21:5f:3e:52:2c:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: May  6 15:26:29 2026 GMT
            Not After : Aug  4 15:26:29 2026 GMT
        Subject: CN=f50f3b75-889a-4c38-bdcb-e814c6d040a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c4:81:ab:2c:85:b4:33:83:85:f3:d6:88:ff:
                    d5:62:40:ae:e2:ba:ff:a4:38:0b:c3:fa:39:d1:55:
                    3f:26:c6:0a:c0:0a:da:41:c1:de:87:f6:84:40:d9:
                    20:56:d9:f6:d5:8a:94:42:cb:59:f1:a0:f8:ee:1e:
                    09:dc:69:25:94:b9:4e:df:0c:f5:65:3f:05:09:a1:
                    77:59:a9:e0:49:b6:a1:39:df:6a:d9:08:cd:3e:d8:
                    55:0f:eb:41:49:1a:e3:21:3a:a1:c2:34:0c:2a:a1:
                    26:e7:8c:2c:68:13:42:31:3c:0c:5c:ba:ad:63:05:
                    39:94:b5:37:80:94:87:6e:03:c3:d9:bd:2f:35:53:
                    38:82:fd:7e:aa:d8:0f:99:3f:21:ab:13:d7:53:02:
                    b8:ab:df:3a:c6:19:31:4c:1a:73:d5:64:26:9f:96:
                    e8:11:5e:27:02:57:d5:55:a6:52:ee:f1:b3:02:9c:
                    d1:56:1b:ab:a0:b3:84:e2:87:c8:a5:4e:df:ce:7c:
                    f6:36:6f:25:f5:c5:7d:d2:cc:2f:9e:72:f7:1c:53:
                    77:8d:4a:fd:45:8b:31:78:9e:84:3c:fe:de:69:fc:
                    2d:d5:74:1b:14:b2:07:64:fe:da:18:0a:eb:6b:7b:
                    29:57:98:2f:93:b2:f1:d5:78:38:06:a5:a0:f6:fe:
                    e6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:8C:E2:5F:72:3E:62:43:A3:93:19:05:F4:B0:40:E7:C9:32:7D:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/402ab080-ccaf-3fb2-9884-c0720b7912b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.31.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:b4:26:cc:69:6c:2b:05:1d:2d:45:8b:40:c2:78:62:14:4d:
         a7:eb:36:76:ed:f4:f6:28:2d:72:f0:fb:5e:90:d2:57:2b:41:
         f3:90:2f:b3:17:61:7f:10:c4:5a:eb:52:c8:34:1e:c6:bb:84:
         79:3f:a2:ec:80:a4:1b:72:98:ba:18:0d:78:d0:46:3a:11:bb:
         21:a6:50:75:2f:43:a8:6e:05:26:a5:bf:a6:dc:fd:5f:0b:84:
         da:54:be:f8:09:60:99:46:56:6f:be:1b:7c:eb:86:bd:cf:df:
         0f:ab:60:b0:bf:4f:cf:27:76:1a:c6:c7:d0:b7:58:42:58:d0:
         ae:02:55:a4:e4:35:79:00:63:5a:1c:f9:5f:5b:9c:55:d8:14:
         10:55:a8:d5:08:59:ea:5b:52:90:d5:eb:d4:e9:e8:40:75:b7:
         f9:7b:49:8f:8f:42:66:59:9b:fc:1f:e5:aa:90:8c:eb:13:5f:
         3e:c7:70:1a:0b:15:31:81:4b:05:c1:64:d3:06:e0:be:6d:0b:
         41:a0:e1:b5:5c:d5:43:84:fa:f8:33:d1:63:ea:bc:40:51:b7:
         76:b4:4b:b8:30:c0:93:f8:19:74:4c:9b:4b:dc:ea:09:3b:a0:
         14:23:0d:b6:00:3d:8b:fb:91:1e:87:e0:42:8d:c6:df:e3:a0:
         75:7f:30:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:57:21 2026 by rpki-client