Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f1868fa-3526-44ef-8aae-27ceceb072f9/32d5d338-6c80-3c57-b95f-211211f7467e.roa
File:                     32d5d338-6c80-3c57-b95f-211211f7467e.roa (raw, json)
Hash identifier:          mGV0LcSsm1meGWuVs/d0cVT86i3DjTqJAGh75M8C1W4=
Subject key identifier:   4C:19:4B:02:2B:DD:3A:1C:C5:28:44:CF:0E:AD:D3:29:27:ED:A8:20
Certificate issuer:       /CN=8f1868fa-3526-44ef-8aae-27ceceb072f9
Certificate serial:       010D0C9F4328584D19B4EF9A6135138265959B80
Authority key identifier: AE:0D:29:57:47:6F:8B:F7:CD:9F:09:D8:B5:CD:8A:7C:3F:E4:41:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f1868fa-3526-44ef-8aae-27ceceb072f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f1868fa-3526-44ef-8aae-27ceceb072f9/32d5d338-6c80-3c57-b95f-211211f7467e.roa
Signing time:             Sun 08 Mar 2026 13:00:40 +0000
ROA not before:           Sun 08 Mar 2026 13:00:40 +0000
ROA not after:            Sat 06 Jun 2026 13:00:40 +0000
asID:                     6762
IP address blocks:        208.84.80.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f1868fa-3526-44ef-8aae-27ceceb072f9/8f1868fa-3526-44ef-8aae-27ceceb072f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f1868fa-3526-44ef-8aae-27ceceb072f9/8f1868fa-3526-44ef-8aae-27ceceb072f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f1868fa-3526-44ef-8aae-27ceceb072f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:19:b4:ef:9a:61:35:13:82:65:95:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f1868fa-3526-44ef-8aae-27ceceb072f9
        Validity
            Not Before: Mar  8 13:00:40 2026 GMT
            Not After : Jun  6 13:00:40 2026 GMT
        Subject: CN=c79dd807-9387-4d3a-8c80-9b77e49fc490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f6:e5:bc:53:48:e5:a2:39:50:90:01:00:75:
                    87:e8:99:b0:72:ea:60:74:ee:6f:3d:4a:bf:61:d4:
                    81:ee:b4:bb:f6:79:ce:56:4c:21:0f:58:43:ad:6e:
                    51:18:d2:9f:2a:a8:f8:ff:92:9b:b6:b3:7e:75:5b:
                    cc:60:05:fe:1a:63:55:e2:de:15:12:11:c9:b8:de:
                    23:f1:50:94:d0:17:fa:b0:a3:1a:6b:55:f8:60:ba:
                    25:a5:dd:f0:10:ce:56:c9:ce:ce:40:fc:fb:df:dd:
                    29:0f:05:1a:65:47:e6:20:80:73:7e:05:63:a7:0e:
                    45:15:9d:0f:d1:aa:cf:0a:55:9b:dd:09:3d:96:31:
                    74:dd:62:81:97:3c:97:4a:e0:2a:4a:1b:a1:67:e5:
                    b5:b9:6c:27:de:61:c6:5d:0c:19:ab:0d:a5:05:36:
                    eb:29:ba:bf:f0:cf:6c:a2:9b:1a:41:98:34:59:31:
                    7e:87:a3:2c:bf:6c:3d:4b:b7:9a:35:47:67:62:70:
                    98:2c:ba:78:4b:1f:d4:a9:39:c2:f2:69:84:5b:03:
                    e5:83:b4:a0:fc:3c:97:19:bc:e0:b4:60:aa:78:0c:
                    7b:ad:cc:6e:a8:41:3e:5e:d8:78:90:88:a8:51:19:
                    e5:e5:ed:9d:fc:dd:0f:9d:bd:20:8a:94:ca:d1:02:
                    35:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:19:4B:02:2B:DD:3A:1C:C5:28:44:CF:0E:AD:D3:29:27:ED:A8:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f1868fa-3526-44ef-8aae-27ceceb072f9/32d5d338-6c80-3c57-b95f-211211f7467e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f1868fa-3526-44ef-8aae-27ceceb072f9/8f1868fa-3526-44ef-8aae-27ceceb072f9.crl

            X509v3 Authority Key Identifier:
                keyid:AE:0D:29:57:47:6F:8B:F7:CD:9F:09:D8:B5:CD:8A:7C:3F:E4:41:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f1868fa-3526-44ef-8aae-27ceceb072f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.84.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:9f:3e:a9:85:cc:c9:13:51:60:9c:49:25:20:27:29:2f:3b:
         50:f1:4a:1c:12:97:2f:76:40:54:bc:1e:68:ac:32:e3:9c:cd:
         1e:ee:e0:0f:f6:2c:1f:84:ec:1c:aa:22:f4:88:de:47:50:5e:
         94:b4:f5:a2:a5:27:85:cd:67:98:e3:95:7a:aa:50:d7:df:f5:
         02:5b:94:54:6c:34:5a:0d:82:a9:17:62:a9:ae:13:0d:f2:aa:
         fe:18:9e:74:af:4d:b8:5c:24:d2:7d:8e:d2:9f:2c:2e:ac:38:
         76:b5:a9:f1:53:67:f1:e3:1f:e4:f5:f8:03:98:a3:6c:02:6c:
         0f:b5:fd:04:92:c5:2d:2c:3c:3a:91:3b:8b:fa:9b:08:2d:81:
         72:d1:d8:0c:58:27:2a:1f:4b:23:db:95:67:10:84:6d:bc:da:
         9b:c1:89:43:8b:c6:00:83:d5:f5:89:82:6a:4a:6f:49:d3:70:
         48:58:4a:39:fd:50:16:10:dd:53:84:61:43:6f:b8:62:e8:05:
         eb:01:8e:31:d7:69:b9:46:45:76:f3:00:3b:63:2c:1f:27:e8:
         67:a9:bf:01:e9:2b:91:06:14:18:60:8c:b6:b1:21:46:41:65:
         b6:93:05:f5:76:73:c9:5c:7d:ea:78:6b:b0:cd:65:73:36:4a:
         9d:b6:d4:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtO+aYTUTgmWVm4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGYxODY4ZmEtMzUyNi00NGVmLThhYWUtMjdjZWNlYjA3
MmY5MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk
Yzc5ZGQ4MDctOTM4Ny00ZDNhLThjODAtOWI3N2U0OWZjNDkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPblvFNI5aI5UJABAHWH6JmwcupgdO5vPUq/
YdSB7rS79nnOVkwhD1hDrW5RGNKfKqj4/5KbtrN+dVvMYAX+GmNV4t4VEhHJuN4j
8VCU0Bf6sKMaa1X4YLolpd3wEM5Wyc7OQPz7390pDwUaZUfmIIBzfgVjpw5FFZ0P
0arPClWb3Qk9ljF03WKBlzyXSuAqShuhZ+W1uWwn3mHGXQwZqw2lBTbrKbq/8M9s
opsaQZg0WTF+h6Msv2w9S7eaNUdnYnCYLLp4Sx/UqTnC8mmEWwPlg7Sg/DyXGbzg
tGCqeAx7rcxuqEE+Xth4kIioURnl5e2d/N0Pnb0gipTK0QI1cwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEwZSwIr3TocxShEzw6t0ykn7aggMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84ZjE4
NjhmYS0zNTI2LTQ0ZWYtOGFhZS0yN2NlY2ViMDcyZjkvMzJkNWQzMzgtNmM4MC0z
YzU3LWI5NWYtMjExMjExZjc0NjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGYxODY4ZmEtMzUyNi00NGVmLThh
YWUtMjdjZWNlYjA3MmY5LzhmMTg2OGZhLTM1MjYtNDRlZi04YWFlLTI3Y2VjZWIw
NzJmOS5jcmwwHwYDVR0jBBgwFoAUrg0pV0dvi/fNnwnYtc2KfD/kQZswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi84ZjE4NjhmYS0zNTI2LTQ0ZWYtOGFhZS0yN2Nl
Y2ViMDcyZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0FRQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABWfPqmFzMkTUWCcSSUgJykvO1DxShwSly92QFS8HmisMuOczR7u4A/2
LB+E7ByqIvSI3kdQXpS09aKlJ4XNZ5jjlXqqUNff9QJblFRsNFoNgqkXYqmuEw3y
qv4YnnSvTbhcJNJ9jtKfLC6sOHa1qfFTZ/HjH+T1+AOYo2wCbA+1/QSSxS0sPDqR
O4v6mwgtgXLR2AxYJyofSyPblWcQhG282pvBiUOLxgCD1fWJgmpKb0nTcEhYSjn9
UBYQ3VOEYUNvuGLoBesBjjHXablGRXbzADtjLB8n6GepvwHpK5EGFBhgjLaxIUZB
ZbaTBfV2c8lcfep4a7DNZXM2Sp221PY=
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:40:19 2026 by rpki-client