Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8b8c303-7bcf-45f4-a693-24fb9d54010c/c8c8c094-5fcf-348e-a129-18561117a30d.roa
File:                     c8c8c094-5fcf-348e-a129-18561117a30d.roa (raw, json)
Hash identifier:          Ldv4rIpChw9kKIvsez3nruTlhJIHwTNssavCa1+4qCk=
Subject key identifier:   C4:07:11:26:02:F6:E3:3F:88:B7:96:EB:D0:BF:E4:75:47:86:D7:87
Certificate issuer:       /CN=d8b8c303-7bcf-45f4-a693-24fb9d54010c
Certificate serial:       010D0C9F4328584DC135C7C451CEB37371611B00
Authority key identifier: 30:6B:01:F4:84:22:E5:CD:24:F0:A0:E9:A5:35:43:98:91:55:CD:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8b8c303-7bcf-45f4-a693-24fb9d54010c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8b8c303-7bcf-45f4-a693-24fb9d54010c/c8c8c094-5fcf-348e-a129-18561117a30d.roa
Signing time:             Thu 07 May 2026 13:00:31 +0000
ROA not before:           Thu 07 May 2026 13:00:31 +0000
ROA not after:            Wed 05 Aug 2026 13:00:31 +0000
asID:                     31986
IP address blocks:        208.87.148.0/24 maxlen: 24
                          208.87.149.0/24 maxlen: 24
                          208.87.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8b8c303-7bcf-45f4-a693-24fb9d54010c/d8b8c303-7bcf-45f4-a693-24fb9d54010c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8b8c303-7bcf-45f4-a693-24fb9d54010c/d8b8c303-7bcf-45f4-a693-24fb9d54010c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8b8c303-7bcf-45f4-a693-24fb9d54010c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c1:35:c7:c4:51:ce:b3:73:71:61:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8b8c303-7bcf-45f4-a693-24fb9d54010c
        Validity
            Not Before: May  7 13:00:31 2026 GMT
            Not After : Aug  5 13:00:31 2026 GMT
        Subject: CN=89bbb5d0-135b-4001-a0c3-466457f0d1d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:84:c8:86:e5:62:65:9e:f4:ff:dc:e5:bc:44:
                    1c:ac:58:c1:52:ab:c5:a5:5d:14:d1:9a:fd:5e:85:
                    7b:7e:fd:9b:86:48:bc:86:92:c4:c8:3c:8e:56:3d:
                    70:d2:9e:6e:79:91:20:17:ba:0c:23:ff:b3:1f:fc:
                    ab:b2:b1:cf:03:be:a9:73:b5:19:bf:ef:82:d7:11:
                    bd:09:64:4e:ba:5c:77:5b:e6:f0:66:9f:26:9e:1e:
                    f8:9f:c6:f2:1a:86:e4:8f:af:2d:b3:59:15:5f:d7:
                    c0:10:2c:29:59:23:2b:a7:4f:8a:b6:04:c8:00:67:
                    59:bb:b2:09:43:20:43:32:44:80:a6:08:c4:ba:25:
                    30:d1:d5:2c:bf:e5:34:b2:94:68:11:e4:c2:8d:78:
                    85:b0:88:c0:b4:78:f1:fc:b4:4d:55:27:45:70:be:
                    8f:e0:ce:d2:ff:84:98:42:e9:cd:c1:bd:4d:ff:3e:
                    f0:0d:82:53:f8:5a:37:da:04:fc:33:bb:ce:66:64:
                    c6:12:7d:1b:02:e5:d5:2f:78:5d:d1:be:de:46:59:
                    e2:49:0c:45:8d:bd:02:05:06:75:e6:92:a9:af:62:
                    cb:6f:a4:70:98:fa:e2:52:f1:3f:5b:f0:e9:03:a1:
                    3c:7e:6a:d2:34:5c:d7:84:fe:dc:10:99:19:7c:fc:
                    ac:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:07:11:26:02:F6:E3:3F:88:B7:96:EB:D0:BF:E4:75:47:86:D7:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8b8c303-7bcf-45f4-a693-24fb9d54010c/c8c8c094-5fcf-348e-a129-18561117a30d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8b8c303-7bcf-45f4-a693-24fb9d54010c/d8b8c303-7bcf-45f4-a693-24fb9d54010c.crl

            X509v3 Authority Key Identifier:
                keyid:30:6B:01:F4:84:22:E5:CD:24:F0:A0:E9:A5:35:43:98:91:55:CD:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8b8c303-7bcf-45f4-a693-24fb9d54010c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.87.148.0-208.87.150.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:d0:08:41:ba:30:39:9d:b6:94:a8:10:2b:35:79:3b:c8:26:
         30:05:47:48:b9:70:3a:d2:c1:95:2d:fc:10:42:3b:8b:8a:a5:
         a8:5e:a6:84:c0:81:26:16:55:da:81:fd:9b:c4:91:3f:48:04:
         6d:a3:7f:48:cb:c0:67:f1:24:bd:31:89:fe:61:6f:1c:5f:93:
         a4:25:62:cc:54:75:44:4e:4a:10:7f:47:d7:74:a7:ab:cc:f9:
         ba:be:8f:9f:fa:9f:61:a2:c9:1d:6a:cd:10:b2:22:29:15:e4:
         49:6f:56:cc:1b:dc:27:49:7e:cc:e3:4f:b6:9c:67:a9:65:43:
         b4:66:79:f4:84:88:e4:3b:16:88:a9:02:89:79:07:f0:48:5b:
         6c:ee:33:42:8b:fc:9f:98:2e:96:7b:35:66:ea:54:37:14:55:
         0d:e7:e9:24:08:19:00:cb:fc:a3:0e:6f:30:6c:b1:77:2d:9d:
         16:00:34:c2:7d:2e:f5:b0:ea:8c:e8:a9:b4:d1:07:88:fd:fc:
         dd:36:57:6c:8f:77:fd:72:4a:38:17:e6:a5:ee:36:3c:75:98:
         74:4d:a1:45:8f:f7:77:69:7d:e1:c8:83:5d:e8:f2:74:10:3f:
         e5:19:9e:dd:a2:a1:ed:df:89:ff:6a:ae:31:c1:82:2a:d6:af:
         a1:35:f5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:30:35 2026 by rpki-client