Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/591c3c16-29be-383d-a211-f4243526102e.roa
File:                     591c3c16-29be-383d-a211-f4243526102e.roa (raw, json)
Hash identifier:          pzbRD+36Kw2xOIKnP2sItllKCoN64ti3cPJi3I2mM/0=
Subject key identifier:   FE:6B:F4:51:2B:72:06:16:8A:1A:1C:0E:AF:33:A1:F6:CC:24:B1:37
Certificate issuer:       /CN=9825dda6-0df7-4c35-af65-4bb69cf71053
Certificate serial:       010D0C9F4328584D44FA2FE82A06CC0C38B44900
Authority key identifier: 0F:56:7D:09:72:ED:0B:C9:0F:3C:0C:1F:33:01:04:38:6B:DA:DC:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/591c3c16-29be-383d-a211-f4243526102e.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     16509
IP address blocks:        208.80.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:2f:e8:2a:06:cc:0c:38:b4:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9825dda6-0df7-4c35-af65-4bb69cf71053
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=2e9c0868-e944-4a5a-9838-909b22887d33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ae:d7:9f:41:95:a9:16:d3:33:35:c7:95:84:
                    ca:1e:83:f7:81:bd:fe:33:c0:c0:08:10:31:f5:21:
                    67:49:e7:3d:45:7e:7c:88:a5:13:53:9a:96:04:1f:
                    ce:c6:14:2b:e3:cd:66:ee:ed:dc:82:ea:f3:e2:09:
                    ba:90:91:57:f9:44:6f:c6:d4:3a:da:32:44:f3:be:
                    f9:b8:04:33:39:c9:22:02:0b:85:7b:aa:b9:41:bd:
                    51:1f:b9:c5:cc:99:b8:37:51:22:bf:82:2e:e6:b1:
                    83:1f:d2:67:22:6f:75:3e:ee:31:b1:36:c3:81:8c:
                    f8:7d:4d:92:53:6d:03:0f:95:ed:6f:bc:23:6d:f0:
                    ac:35:57:03:f0:88:c6:23:77:57:27:b2:37:8a:05:
                    e3:78:dd:08:9a:03:99:fb:d3:16:d7:5e:84:eb:f9:
                    0f:d2:fe:aa:d8:21:99:fb:ab:bf:8d:a9:d3:cc:96:
                    de:b8:8b:6c:f0:d4:88:9b:4a:7e:3d:27:6f:33:9e:
                    6a:b1:8f:63:1f:6e:39:62:d6:f5:04:f1:83:7b:84:
                    96:d9:31:c4:77:21:a7:63:09:13:63:18:d3:fa:f3:
                    45:f0:a5:69:87:cb:94:48:f2:6a:b3:1d:59:fd:cb:
                    eb:12:6f:9f:5c:a7:d5:15:a6:8a:59:33:46:b8:fa:
                    17:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:6B:F4:51:2B:72:06:16:8A:1A:1C:0E:AF:33:A1:F6:CC:24:B1:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/591c3c16-29be-383d-a211-f4243526102e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053/9825dda6-0df7-4c35-af65-4bb69cf71053.crl

            X509v3 Authority Key Identifier:
                keyid:0F:56:7D:09:72:ED:0B:C9:0F:3C:0C:1F:33:01:04:38:6B:DA:DC:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9825dda6-0df7-4c35-af65-4bb69cf71053.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.80.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:3e:15:bd:05:04:04:29:89:dd:4d:d2:90:98:8c:95:63:bc:
         ed:10:82:0d:7e:c0:8f:2f:19:fe:6f:cc:ed:5a:04:ea:07:4d:
         e6:2f:e2:7f:43:81:33:82:d3:e4:64:04:3e:f0:ff:7d:cf:ee:
         66:04:42:a1:9d:a1:d9:18:47:41:15:5e:37:b6:96:17:a9:cc:
         31:41:cc:fe:96:42:88:36:e7:e9:a0:a1:f2:6b:51:35:42:2b:
         b5:0b:4c:40:74:ac:2b:a2:d7:e8:7b:2b:44:88:85:05:89:3a:
         25:e0:02:12:66:ef:79:2a:18:42:3a:41:6d:78:94:53:9a:a0:
         87:dd:89:bb:38:f8:96:44:0c:e7:c8:45:0e:ed:d7:3f:51:b4:
         7c:32:7f:58:85:85:44:55:95:cb:f5:4a:9c:91:77:b6:32:fb:
         31:e8:2d:fa:7c:37:4d:13:d7:4d:96:86:40:72:9f:2e:ac:fc:
         c6:de:5c:2f:b1:a2:90:f9:a8:32:1f:dc:b5:a6:ae:54:10:6b:
         1d:b8:ad:3d:88:ed:19:1b:b0:2b:46:bb:45:ed:b6:22:13:cf:
         5a:74:37:97:4e:66:98:54:8b:a0:7f:ee:c8:7b:01:87:1c:ab:
         f2:0d:55:70:3b:13:5c:65:2a:99:f2:df:1e:ec:3e:eb:a0:8e:
         f6:66:ab:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:12:03 2026 by rpki-client