Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/3c829a11-727a-3693-9413-1dbca27bc52c.roa
File:                     3c829a11-727a-3693-9413-1dbca27bc52c.roa (raw, json)
Hash identifier:          U4K0Bh2Dw4bLBrlnZeOVW6W7dSvTLlEO/c68GbOlsn8=
Subject key identifier:   78:E8:DC:68:6D:FE:6D:45:66:17:5C:D2:88:59:49:F7:B1:91:32:F5
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F4328584DBA3AEB841434EF82285DA000
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/3c829a11-727a-3693-9413-1dbca27bc52c.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     14618
IP address blocks:        208.73.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:eb:84:14:34:ef:82:28:5d:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=bc79398e-88e5-4a3a-87be-c9ba079a2249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4f:11:3c:28:bd:2b:2f:45:b3:3c:e8:df:9c:
                    be:96:2e:48:d4:03:08:4f:13:ea:a5:b9:b5:76:06:
                    2d:d6:c6:21:dd:40:6b:a7:0c:45:11:52:5e:00:4e:
                    38:26:1a:ca:ca:20:8c:93:a4:e3:f0:d0:df:cf:ce:
                    65:fc:43:93:0c:d1:28:35:6b:c4:0c:24:39:dc:d5:
                    9e:65:39:95:6f:7a:cc:39:6a:ce:f1:67:1f:32:e5:
                    bd:a1:b6:a6:de:31:e6:21:a0:39:af:8a:95:db:b2:
                    f2:70:e1:35:49:b7:f9:fa:bc:f4:1b:ee:18:b0:35:
                    35:1e:2c:7f:56:b4:46:79:f8:ef:6c:54:48:a7:bb:
                    98:3f:59:bf:6a:50:77:a7:93:5f:78:f1:63:3a:78:
                    9d:e6:e6:df:e1:59:1a:8d:cd:ba:41:c5:73:ac:72:
                    26:42:9e:9e:43:d3:b9:d8:b1:af:e8:00:ca:cf:75:
                    04:4c:00:73:db:48:0b:0d:86:d0:8c:eb:27:c9:cb:
                    83:d9:02:20:92:5e:72:5c:77:40:11:88:86:ae:8c:
                    ce:a3:51:46:eb:74:d3:82:74:1e:30:fe:1f:c6:a5:
                    00:2f:f3:2c:8a:fb:92:f0:c1:0e:f8:d5:77:2f:eb:
                    12:e1:62:34:bf:ba:1c:62:f6:e2:fe:f4:65:3d:0b:
                    04:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E8:DC:68:6D:FE:6D:45:66:17:5C:D2:88:59:49:F7:B1:91:32:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/3c829a11-727a-3693-9413-1dbca27bc52c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.73.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:66:64:fb:9c:13:43:b2:b7:5c:ea:d7:d7:f7:c4:67:83:37:
         8a:7f:9f:1f:25:5c:4f:c6:e9:3c:5f:4c:d8:5a:6e:c8:4a:41:
         0c:af:6a:68:49:9a:1d:2e:14:fc:50:6b:8d:66:a7:fd:0a:75:
         9c:ec:62:a4:5b:bd:8f:5b:ed:7c:a6:17:34:df:6b:ab:6f:f2:
         7f:ae:70:1c:85:d0:d0:b4:00:d7:4f:73:00:c1:3d:11:17:f6:
         11:3b:6d:ab:52:44:1f:f4:24:54:6e:0a:01:17:43:71:74:d9:
         c9:57:29:7f:2f:59:ee:59:82:00:5c:78:10:15:8a:61:d5:06:
         54:30:a7:81:d0:d8:a3:07:46:b7:d7:24:47:3b:13:e5:44:6c:
         db:0b:13:3e:d3:07:b0:81:24:5a:f5:da:51:7d:fe:e7:32:27:
         ce:f5:2e:72:31:d6:52:1e:83:66:73:59:55:92:a3:c1:eb:20:
         bf:53:a9:46:96:e2:fa:3b:df:bb:5b:e6:f3:65:1f:fc:b9:f5:
         c5:37:15:03:35:c3:5f:67:66:70:19:5e:62:ad:c0:10:9b:36:
         25:f4:93:62:4d:4f:83:90:ea:1b:32:ea:ab:c4:ac:d4:a9:53:
         94:f1:d6:5b:71:2d:4b:28:03:39:ac:d5:cc:85:c3:6e:6b:16:
         7a:16:15:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:27:54 2026 by rpki-client