Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/80338f3c-5bf6-3690-92b3-407b7ed7ee22.roa
File:                     80338f3c-5bf6-3690-92b3-407b7ed7ee22.roa (raw, json)
Hash identifier:          YhylP0wVnJ52PwGxwOhY+AQN2EUTA7UKLarrlGT5kEY=
Subject key identifier:   E7:95:EC:D2:B0:FA:45:D4:D3:BD:AF:48:72:D7:9B:0E:E3:76:CD:3A
Certificate issuer:       /CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a
Certificate serial:       010D0C9F4328584D07ACF294C479F5A2FAF629C0
Authority key identifier: AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/80338f3c-5bf6-3690-92b3-407b7ed7ee22.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     16509
IP address blocks:        104.200.216.0/24 maxlen: 24
                          104.200.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ac:f2:94:c4:79:f5:a2:fa:f6:29:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f0bfcde-d958-4e91-af5d-9fd1d33a582a
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=4e094b7a-46bb-4a2d-81c8-ae8e5984ef54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:79:c6:90:c8:0c:3a:20:cd:96:5e:49:df:a5:
                    bb:7c:56:dd:93:6d:af:b5:64:bd:13:52:9a:13:ea:
                    31:7b:97:61:54:50:8e:1d:a4:d6:54:fa:15:36:c6:
                    e3:86:d4:22:98:1c:86:99:73:89:00:94:93:80:5b:
                    0f:69:1f:e5:8a:3b:b1:bc:1a:28:94:2d:0d:68:83:
                    15:51:e5:23:00:1c:e3:c5:d8:b3:ff:f4:ae:6f:2c:
                    39:8a:a1:06:84:d1:9c:ab:8c:23:c5:9d:d0:80:fa:
                    9a:15:b2:62:b3:74:c4:8e:a0:3e:01:01:26:17:19:
                    34:26:c1:26:b6:4f:db:02:05:f1:a3:06:ce:00:97:
                    bb:6b:8c:01:41:19:d4:00:f5:a5:8e:56:0b:d8:b6:
                    49:3d:26:ed:6a:cd:41:08:4a:50:01:57:67:0d:47:
                    91:85:84:e7:f6:b9:b6:bf:d2:b3:6c:de:da:d1:8f:
                    13:ed:ae:bd:fb:30:e6:4f:f7:94:13:b6:0d:d5:42:
                    d7:b3:b7:c6:47:53:7a:74:2d:37:4f:af:60:12:df:
                    fa:73:d3:7b:b4:80:31:64:e1:74:24:07:4f:2c:d7:
                    d2:8f:97:43:5b:05:5e:bc:0c:c1:28:02:66:e4:34:
                    eb:02:e7:f7:e9:e8:55:be:eb:66:45:a7:eb:15:5a:
                    d5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:95:EC:D2:B0:FA:45:D4:D3:BD:AF:48:72:D7:9B:0E:E3:76:CD:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/80338f3c-5bf6-3690-92b3-407b7ed7ee22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.crl

            X509v3 Authority Key Identifier:
                keyid:AA:2C:89:C4:2A:7A:B8:A4:95:51:83:C3:0C:CF:E3:B0:FC:E3:CE:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8f0bfcde-d958-4e91-af5d-9fd1d33a582a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.200.216.0/24
                  104.200.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:a4:71:52:f6:30:15:bf:06:2d:39:51:cf:dd:77:bc:ef:83:
         80:c4:cd:5f:7a:8e:3e:df:63:e6:41:fa:40:3b:7d:93:00:92:
         01:f6:7e:b2:ee:49:e4:c4:33:26:24:84:ae:97:16:11:49:56:
         cb:a9:06:73:d1:9c:4b:47:03:eb:28:87:62:a3:64:fb:a1:97:
         46:39:f2:bf:3f:dc:67:49:3b:7b:47:9e:b0:71:67:3c:67:cd:
         03:3a:9b:22:b4:bb:a6:40:cc:e8:6e:52:0f:0f:b9:ad:55:e6:
         a5:12:a6:82:cb:a9:fb:3f:10:0a:da:cb:6f:a2:24:b9:51:dc:
         66:e9:c9:19:a4:f8:d6:c2:b3:79:03:dd:93:6a:ac:1d:8b:8b:
         33:e8:13:9e:2d:62:d0:a8:1a:0d:36:90:88:4a:53:ab:05:4b:
         44:56:c1:e7:f4:93:8b:d6:99:49:38:6e:2c:26:53:5f:7a:06:
         f5:84:c8:16:35:cd:80:5f:0a:55:91:3c:61:0f:22:18:1f:0e:
         06:34:b4:4e:98:1a:cb:57:54:db:53:0f:4d:6b:eb:a0:74:91:
         22:20:1c:60:d8:a2:22:a5:23:aa:92:93:f1:55:d2:2f:07:2f:
         62:39:bb:f4:3b:5f:b6:66:b3:9f:ab:41:c4:93:8c:18:4d:12:
         cb:49:ef:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:00:30 2026 by rpki-client