Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f18159d9-33d3-3974-a9cb-ac9bf93d91fb.roa
File:                     f18159d9-33d3-3974-a9cb-ac9bf93d91fb.roa (raw, json)
Hash identifier:          Y3IHMlKmlzd6nvuAgCnFxbyceX35Uyg2iMUWZ7vF440=
Subject key identifier:   1E:87:73:BD:61:69:8A:A8:2F:F5:10:27:2B:43:35:9C:BD:18:B9:A9
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D275EE7A06FA1FCEFAFE72892
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f18159d9-33d3-3974-a9cb-ac9bf93d91fb.roa
Signing time:             Fri 13 Mar 2026 10:29:19 +0000
ROA not before:           Fri 13 Mar 2026 10:29:19 +0000
ROA not after:            Thu 11 Jun 2026 10:29:19 +0000
asID:                     3257
IP address blocks:        208.81.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:5e:e7:a0:6f:a1:fc:ef:af:e7:28:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Mar 13 10:29:19 2026 GMT
            Not After : Jun 11 10:29:19 2026 GMT
        Subject: CN=7eb5b73c-1f81-467e-8e56-eb386a25f4dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:be:16:7c:03:09:60:6d:b6:5b:05:34:af:12:
                    98:73:7a:6c:21:34:15:52:83:a5:d2:23:be:ea:c5:
                    fc:72:31:38:4f:6f:15:0f:c8:0e:dc:d8:c3:c3:9e:
                    f5:53:1f:82:46:9c:fd:12:a2:ed:41:90:a6:68:ce:
                    0e:e0:4a:94:b7:20:b1:30:3e:9e:aa:e3:e2:1f:59:
                    6e:b7:4e:61:e1:f9:81:41:2b:77:4a:66:4c:f3:1b:
                    de:92:ca:4d:e4:2f:fb:08:ee:0b:b0:40:f5:9b:aa:
                    60:54:44:cc:5d:27:ca:1a:9c:4f:6b:d1:03:cd:cc:
                    b3:ec:e9:b2:98:79:b0:4f:c5:4c:60:24:bc:1f:e3:
                    a3:32:00:f3:06:c7:52:c3:cc:ad:83:a5:96:10:1c:
                    ed:1d:2c:f1:10:04:fa:71:3f:d5:a8:cd:1e:4c:9d:
                    d2:5a:fe:fd:d9:3c:68:95:52:75:2e:4a:9f:86:8c:
                    04:8a:75:96:b0:1f:98:23:63:4c:f9:a1:b1:90:dc:
                    c3:30:32:11:0d:00:1b:06:80:63:ff:49:53:15:14:
                    db:69:d8:6c:6f:ba:01:77:a6:0f:37:2b:6e:f9:4d:
                    fd:8b:e3:dd:3d:b1:66:8c:43:37:6d:6f:fa:c2:18:
                    da:dd:24:39:0d:c6:f2:2d:17:3e:19:f2:e9:c1:bc:
                    e1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:87:73:BD:61:69:8A:A8:2F:F5:10:27:2B:43:35:9C:BD:18:B9:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f18159d9-33d3-3974-a9cb-ac9bf93d91fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.81.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:29:52:a5:0d:c6:d5:7e:3f:a6:a7:57:80:ff:58:cc:2d:40:
         50:87:fe:b4:9d:f2:e2:b3:77:40:a8:ef:4d:95:bc:b1:8a:4a:
         b7:e3:3e:33:d7:b2:e9:ad:a7:c9:a1:5b:71:fa:32:ce:67:81:
         44:5f:8e:12:37:00:16:04:da:8b:eb:88:52:fe:77:6d:87:e0:
         a6:1e:dd:fa:b9:67:74:4b:0c:30:e5:1d:ed:06:9b:2f:c8:ca:
         ac:5f:6d:1c:2f:b9:b4:73:0d:57:c3:77:4c:9f:5b:df:e2:24:
         a6:fd:8c:a1:5e:5a:b3:87:9d:25:7d:d5:64:0d:23:2a:95:e6:
         ed:ef:5b:4a:72:90:69:a3:d0:45:e5:bd:01:14:8d:22:aa:5b:
         d7:65:f9:be:78:3f:bd:ec:b5:31:22:10:4c:9e:52:7f:80:3f:
         c2:5b:d3:b9:a7:98:9b:dd:31:d9:75:34:f0:a6:8a:8d:67:e3:
         f1:7a:b5:a4:a2:73:26:18:02:96:87:5e:e8:06:18:99:1c:35:
         b1:ae:e6:14:17:ae:7d:7f:51:3d:d4:85:10:d4:e7:42:fb:d5:
         ac:7d:9a:ce:86:fb:d5:06:48:ee:7a:ab:3a:22:a7:45:dd:bc:
         9e:d8:94:44:95:a1:12:c8:12:47:67:db:19:14:88:48:b3:11:
         f2:9d:79:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:00:03 2026 by rpki-client