Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/c9c852c7-88e1-3a0e-adbd-970ef86bdddb.roa
File:                     c9c852c7-88e1-3a0e-adbd-970ef86bdddb.roa (raw, json)
Hash identifier:          TnzuMn38wvtcER8IKMOgNP8v6481LNPak7imYoGWKfI=
Subject key identifier:   BD:75:56:0F:43:33:5D:90:1A:76:14:B3:22:86:92:C8:71:74:F2:81
Certificate issuer:       /CN=a234649d-ab49-458b-a5e3-7765fe7a066c
Certificate serial:       010D0C9F4328584D40CB9F656DB89F83C58F4A00
Authority key identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/c9c852c7-88e1-3a0e-adbd-970ef86bdddb.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     150184
IP address blocks:        208.68.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:cb:9f:65:6d:b8:9f:83:c5:8f:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a234649d-ab49-458b-a5e3-7765fe7a066c
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=b315b693-63a4-4c81-8510-6c37fd5baabd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:29:10:56:a3:0e:2d:7b:22:f3:1b:85:96:ea:
                    a8:9b:1c:99:0b:98:fe:f7:8b:d9:9f:4e:9a:d3:a0:
                    e1:0c:15:d7:51:d3:da:4a:2a:7c:c7:d5:fb:d4:2e:
                    df:b8:ad:c9:b8:54:97:2b:d9:e4:ab:92:cf:da:e1:
                    86:79:f2:62:84:5b:59:6c:cd:74:0b:cb:ea:7e:0d:
                    75:74:55:c4:09:f0:41:43:06:09:b1:a6:bd:f2:c6:
                    86:a2:ac:bf:6a:8d:f1:32:50:51:d4:5a:3b:65:58:
                    cf:4c:a0:25:cc:1c:a8:4d:91:52:04:f9:59:be:e4:
                    a6:28:af:cf:84:46:5d:e5:68:08:56:8f:8b:c7:81:
                    c9:da:70:17:80:91:53:02:a5:69:23:8f:c0:60:75:
                    16:c5:1d:b9:9d:d9:c0:05:29:2c:09:00:e3:1c:f0:
                    3a:88:a5:86:29:e8:2a:74:d9:08:cc:fe:d4:55:83:
                    bd:d8:d3:01:81:8c:89:73:2c:97:54:a7:60:1d:f8:
                    50:02:b4:39:0f:9d:ed:f2:f0:07:2a:d0:f9:d1:17:
                    14:14:11:a3:91:b6:ed:25:85:58:6d:c7:25:65:b6:
                    7b:b1:dc:4a:d1:42:85:8e:32:3f:82:dc:ea:08:10:
                    bb:0c:07:3d:c9:3a:52:28:eb:7e:b6:40:65:b6:0e:
                    08:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:75:56:0F:43:33:5D:90:1A:76:14:B3:22:86:92:C8:71:74:F2:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/c9c852c7-88e1-3a0e-adbd-970ef86bdddb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl

            X509v3 Authority Key Identifier:
                keyid:9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.68.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:ab:78:12:47:ff:c8:a3:1d:ac:9a:01:39:26:6a:83:f8:2a:
         7b:50:04:62:31:e7:52:db:5a:18:99:52:a9:ac:c9:27:11:d6:
         0c:07:b6:f6:08:9c:44:a5:db:9a:c5:9d:05:2d:63:39:68:2b:
         78:c0:30:0d:a4:4f:ef:90:b6:88:1c:81:73:36:5b:5b:68:a9:
         86:aa:f1:ee:82:8a:43:7f:22:b3:19:1e:b7:bb:39:dc:97:dd:
         04:0f:b4:6b:58:06:5d:25:73:06:55:56:08:5f:e1:61:41:d7:
         6b:69:44:f8:fe:15:4d:c7:d7:86:20:d3:63:4f:bd:7e:d4:af:
         61:bf:15:ac:98:e6:09:21:82:dc:db:5e:9e:38:a1:cc:b2:b5:
         b5:7e:b8:73:71:bd:de:a4:72:8c:1c:73:c2:7d:88:cc:0c:c3:
         b8:65:9e:c1:d3:61:99:fb:18:2b:79:fa:46:68:d9:63:91:ef:
         85:e8:9e:3c:30:d1:58:a2:8d:c2:a5:e2:33:7f:20:55:ff:94:
         5f:e9:fd:80:9b:2d:80:dc:ce:41:83:a4:06:ea:b3:17:76:d1:
         d7:97:84:ed:8a:3b:02:a9:38:58:56:ee:81:24:bb:fb:1c:ae:
         d6:c7:fd:de:ef:27:fe:c8:eb:36:5e:9d:4e:dd:80:46:ca:0d:
         34:3f:50:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:05:46 2026 by rpki-client