Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b694c80-6d3f-3d00-be84-82497d04a39a.roa
File:                     3b694c80-6d3f-3d00-be84-82497d04a39a.roa (raw, json)
Hash identifier:          0MkOWjO8fP+yPPq3yyj9HGtu/IMhKJrr6brEKxRIDpo=
Subject key identifier:   2D:DD:61:79:F4:EA:51:B5:9F:7D:DF:40:DD:08:F7:2A:E3:35:0F:75
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584D0A77C26C45183C34C1AAF900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b694c80-6d3f-3d00-be84-82497d04a39a.roa
Signing time:             Tue 03 Mar 2026 02:00:32 +0000
ROA not before:           Tue 03 Mar 2026 02:00:32 +0000
ROA not after:            Mon 01 Jun 2026 01:00:32 +0000
asID:                     17119
IP address blocks:        208.218.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0a:77:c2:6c:45:18:3c:34:c1:aa:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  3 02:00:32 2026 GMT
            Not After : Jun  1 01:00:32 2026 GMT
        Subject: CN=990e1787-0bb5-4508-bb2c-530f28c87337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:13:00:31:91:e9:93:9f:6e:c4:58:19:b5:3a:
                    fe:0a:7e:8a:26:d0:57:d9:63:f2:b5:82:80:23:b5:
                    9f:8f:e1:d8:65:89:0b:4d:ae:9b:92:e9:31:8a:99:
                    84:32:ba:a4:31:5d:61:67:40:42:0e:d6:40:22:b4:
                    2b:36:e6:40:ae:a3:a8:31:5f:de:17:dd:58:d0:62:
                    b6:4d:06:44:90:ef:a8:c4:65:bd:bf:74:99:22:92:
                    3f:3f:19:68:51:62:2e:db:50:16:9f:03:a5:c1:08:
                    bd:40:0c:73:64:0c:3f:30:f4:06:27:cc:cb:40:3a:
                    d0:4e:cd:eb:96:ef:75:77:63:96:07:5b:55:ed:a8:
                    8f:9d:60:1f:b8:1a:01:29:1f:53:52:7f:22:f0:a5:
                    3e:04:ad:18:75:dd:6d:f5:e4:cc:44:08:48:0e:85:
                    9b:19:ae:92:f7:7d:ea:f6:0b:11:ce:3b:28:b8:2e:
                    d9:b5:b7:52:2d:5f:9e:eb:c7:cc:f7:75:28:68:dc:
                    94:01:cf:c5:8a:b0:89:57:8a:99:d9:ee:be:41:4f:
                    66:e3:9b:54:63:17:10:ee:12:0a:34:08:8a:87:91:
                    b3:ea:48:10:53:85:8c:28:46:b9:ed:f6:64:a1:38:
                    f3:fe:2c:a7:41:20:be:34:70:94:72:85:70:3b:e9:
                    f4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:DD:61:79:F4:EA:51:B5:9F:7D:DF:40:DD:08:F7:2A:E3:35:0F:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3b694c80-6d3f-3d00-be84-82497d04a39a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.218.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:f5:fb:bd:14:a2:7b:fb:6e:fe:a5:75:cd:82:7d:92:40:38:
         bc:22:8f:86:10:3b:e1:cb:fe:43:dc:9c:66:59:ca:c3:6f:cb:
         25:69:39:e9:d4:fd:a7:bd:70:3e:1a:f0:6b:4e:14:f1:be:46:
         22:17:8e:1e:1e:3a:b8:bb:3b:9d:ab:6d:92:ab:dc:05:45:a9:
         d3:b8:ce:86:97:9f:33:9d:96:f6:84:67:0a:26:e4:a0:af:88:
         dd:38:5e:13:9b:f0:b6:80:c0:88:1f:21:cd:28:8b:8f:d9:13:
         99:bb:b9:20:05:f1:8c:19:b6:a6:2f:ac:7b:b7:3d:bc:76:a8:
         8b:cc:f0:b2:0b:77:d6:74:05:d3:44:32:6e:1a:a9:0c:da:14:
         68:37:7f:37:3a:c5:06:8e:ff:ba:7e:3c:9c:84:ee:ad:62:6d:
         c6:a4:52:77:fc:3b:82:24:f4:40:16:85:92:71:cd:d0:e4:18:
         59:c8:94:65:ad:8a:85:ff:d0:2b:ed:af:04:23:42:fc:dd:32:
         dd:0c:38:b8:2d:09:db:b0:d1:47:ae:f3:58:67:37:cc:c9:8e:
         02:96:d3:2f:35:20:cd:96:d7:4a:ea:00:de:5a:a1:cb:75:b7:
         d6:82:d2:a0:59:80:50:4e:f0:c7:d4:83:92:cb:16:c2:d9:1a:
         1c:c1:d2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:55:21 2026 by rpki-client