Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04/e6bc8b59-9ec0-3bce-9613-5085d606d708.roa
File:                     e6bc8b59-9ec0-3bce-9613-5085d606d708.roa (raw, json)
Hash identifier:          xRuI1pfIWcTWIf2qgsFzIo2ts8GHQEDLkt4HfeNAxF4=
Subject key identifier:   2C:21:53:E4:CC:9C:10:B5:25:94:83:16:19:ED:3B:46:51:A2:F4:7D
Certificate issuer:       /CN=5570a1c9-b9da-44c0-96d8-c5b478b52a04
Certificate serial:       010D0C9F4328584D386A42FEF97AC3E7D9836060
Authority key identifier: 93:24:CC:12:9A:E9:0C:98:B7:F1:D4:F9:17:FA:6C:C6:19:2E:18:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04/e6bc8b59-9ec0-3bce-9613-5085d606d708.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        208.81.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04/5570a1c9-b9da-44c0-96d8-c5b478b52a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04/5570a1c9-b9da-44c0-96d8-c5b478b52a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:42:fe:f9:7a:c3:e7:d9:83:60:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5570a1c9-b9da-44c0-96d8-c5b478b52a04
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=c6e395f8-a0dc-4cb3-bc40-1e5a1757f0f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:67:6f:b8:9b:e5:78:57:45:d3:ce:ef:8b:f8:
                    d9:ef:d9:50:f4:0c:61:21:54:09:74:0d:30:fa:16:
                    df:8f:0f:82:d8:b5:52:01:4a:93:db:8d:82:53:3f:
                    87:42:1f:e0:21:ea:84:4f:dc:67:22:44:7d:b6:98:
                    51:cf:e2:b7:d3:c3:e7:02:16:6f:3b:49:1d:eb:15:
                    23:33:82:10:7a:1a:67:37:48:73:e8:8b:9b:2d:09:
                    db:aa:e5:e8:94:71:cd:b9:82:c6:80:e1:23:85:e2:
                    19:54:c8:60:74:1d:e0:b8:3d:c1:29:eb:fd:87:da:
                    a4:72:02:b3:f1:16:c7:f3:b7:97:f7:9e:44:26:94:
                    14:c0:f7:3b:c9:e2:d7:d7:8a:c0:e9:a3:59:be:43:
                    3a:e4:d9:b3:1d:c4:1d:aa:0c:86:4a:25:58:e8:be:
                    81:f3:33:9e:1c:06:ba:e0:c5:45:d1:3a:3a:43:8a:
                    73:16:90:f1:97:e5:0a:b6:6c:32:b2:e8:ce:78:10:
                    9a:d0:ff:f4:92:ec:02:00:25:aa:0a:e3:10:97:00:
                    7c:c8:d0:b6:bc:d4:7e:3e:a8:58:7c:1b:b3:38:d4:
                    72:1b:4a:3f:92:ae:3a:0d:95:11:9a:3f:16:9f:74:
                    3a:0e:d5:3d:24:95:2e:04:75:6e:6c:77:c7:6e:c7:
                    ef:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:21:53:E4:CC:9C:10:B5:25:94:83:16:19:ED:3B:46:51:A2:F4:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04/e6bc8b59-9ec0-3bce-9613-5085d606d708.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04/5570a1c9-b9da-44c0-96d8-c5b478b52a04.crl

            X509v3 Authority Key Identifier:
                keyid:93:24:CC:12:9A:E9:0C:98:B7:F1:D4:F9:17:FA:6C:C6:19:2E:18:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.81.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:5f:2d:6d:cd:f4:87:80:5f:d9:31:5f:b0:66:8b:5f:20:ab:
         d2:15:9d:54:1d:12:0b:bd:77:0d:3c:7e:78:b5:fa:42:85:b9:
         0f:c5:53:39:ac:81:9d:d7:0d:91:4b:8b:7e:0f:9e:09:56:f4:
         fe:40:8d:18:cf:67:b7:62:eb:84:3a:59:11:06:15:ce:f9:90:
         2a:6c:07:90:e3:2e:28:2d:dc:62:53:f5:24:e3:9e:76:34:ae:
         e0:68:40:4e:73:e2:cc:26:06:c5:d4:0a:0f:40:1a:1f:b1:35:
         2f:f6:34:20:73:07:f7:42:6b:de:66:b2:8e:5f:f7:5e:73:5d:
         9a:f2:32:cd:38:57:03:59:63:7c:bc:5f:5c:19:60:12:d9:d8:
         4b:ef:e6:5f:ba:db:6a:b4:37:4b:2f:b2:51:69:e2:ec:7a:51:
         ad:da:a3:ca:1a:ca:af:fa:76:ab:e0:50:90:aa:65:e9:ff:f9:
         a8:32:7a:39:75:b2:d7:c6:fb:65:11:3f:9c:31:49:c2:09:73:
         ee:9b:de:be:eb:f8:16:36:5b:fa:4d:0e:d8:b1:a7:91:4a:32:
         45:9b:78:56:42:e1:4f:41:dc:b6:7c:5e:2d:ec:c7:f1:aa:22:
         4e:80:48:e2:95:f8:7e:07:b1:e6:4c:08:ad:dc:04:72:a9:60:
         37:aa:35:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:05:49 2026 by rpki-client