Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/094ccd51-115c-3648-97eb-45a013b21434.roa
File:                     094ccd51-115c-3648-97eb-45a013b21434.roa (raw, json)
Hash identifier:          UzZh8znNMfCOhUtjdB5xNpH10kpI9tAt2u7OeAXjbN8=
Subject key identifier:   22:A8:D3:71:7B:24:62:9B:3B:6A:98:DC:63:61:5F:6C:AD:05:30:23
Certificate issuer:       /CN=5fc522ea-3703-4aaa-9fa0-d8f99a720536
Certificate serial:       010D0C9F4328584CB981D02352A6AE78EFEAA380
Authority key identifier: AC:18:9F:D1:96:01:0B:F4:19:CD:D5:73:7C:6E:FD:C9:D1:A8:95:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/094ccd51-115c-3648-97eb-45a013b21434.roa
Signing time:             Mon 02 Feb 2026 02:00:32 +0000
ROA not before:           Mon 02 Feb 2026 02:00:32 +0000
ROA not after:            Sun 03 May 2026 01:00:32 +0000
asID:                     39951
IP address blocks:        208.65.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/5fc522ea-3703-4aaa-9fa0-d8f99a720536.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/5fc522ea-3703-4aaa-9fa0-d8f99a720536.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b9:81:d0:23:52:a6:ae:78:ef:ea:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fc522ea-3703-4aaa-9fa0-d8f99a720536
        Validity
            Not Before: Feb  2 02:00:32 2026 GMT
            Not After : May  3 01:00:32 2026 GMT
        Subject: CN=e7382d88-51e8-492b-bb8f-4243a682f49d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1f:49:18:ae:30:2c:28:d0:ad:69:83:6d:c4:
                    46:18:45:a4:04:ff:df:d1:c4:69:c7:84:13:14:6e:
                    75:e6:e9:67:a6:e4:1f:5b:26:9c:17:fb:d5:d1:23:
                    82:bb:c0:01:20:89:ed:08:b0:74:57:4b:67:35:bf:
                    78:dd:a2:b4:fe:8e:c7:41:03:86:53:b8:ea:c9:d0:
                    c1:ab:4f:c6:9e:fa:b5:df:3b:cc:fa:91:48:82:86:
                    fb:00:19:67:2f:74:0e:83:a5:5a:97:3e:51:f9:4e:
                    8c:cc:7b:c1:30:88:f6:e3:d7:14:9d:0f:4e:c1:37:
                    12:1c:09:a1:15:17:b5:2c:50:d6:af:3f:5b:f8:8e:
                    1a:ae:61:af:0d:d6:15:89:91:73:fb:6f:80:21:32:
                    39:a2:ef:b1:96:ee:51:a8:9c:5f:bc:77:ae:e2:b0:
                    99:77:ff:83:6c:e2:e6:63:8f:9c:6d:22:97:b8:08:
                    a0:40:ee:75:bd:a5:de:7f:d5:f0:37:b8:06:43:2b:
                    7b:f6:0b:49:c1:39:34:89:4f:45:aa:2b:64:65:0a:
                    f8:23:d9:b0:fc:a1:b5:69:e4:9f:ba:b8:57:fd:19:
                    ec:da:72:15:28:2a:d7:84:69:49:82:23:bc:0c:8c:
                    d9:58:d8:9a:8a:57:00:65:e8:3d:2e:63:38:37:10:
                    da:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:A8:D3:71:7B:24:62:9B:3B:6A:98:DC:63:61:5F:6C:AD:05:30:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/094ccd51-115c-3648-97eb-45a013b21434.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536/5fc522ea-3703-4aaa-9fa0-d8f99a720536.crl

            X509v3 Authority Key Identifier:
                keyid:AC:18:9F:D1:96:01:0B:F4:19:CD:D5:73:7C:6E:FD:C9:D1:A8:95:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5fc522ea-3703-4aaa-9fa0-d8f99a720536.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.65.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:e6:e8:a1:c7:e8:05:30:24:6c:4c:b1:b4:04:81:06:6b:5c:
         5e:20:f8:95:b6:75:a0:16:8a:e1:4a:67:aa:9b:d1:c7:99:dd:
         00:37:ed:b9:1a:c9:14:27:ec:76:c4:a4:ca:c7:b0:7f:e8:c7:
         d8:32:d6:93:a5:06:e4:bb:e0:6d:1a:12:0f:7e:bc:d6:fc:f7:
         f1:d3:27:4c:f0:b9:34:2b:86:ec:8d:a6:31:a2:83:81:f3:fa:
         8c:07:51:9f:b3:ad:1c:88:10:2f:a4:b4:d8:35:6e:89:2d:6a:
         01:9e:fa:ee:3b:85:d2:17:20:10:6e:2c:8a:d5:9d:2e:4b:98:
         70:fb:99:4a:0c:1b:6c:7e:d4:fc:25:6e:c2:68:2b:db:1d:3f:
         d6:de:ed:e1:a9:b6:23:5d:e7:20:cf:04:3c:1a:9b:6b:0a:40:
         ac:e1:b9:0f:a9:4a:05:49:0a:27:54:bf:07:31:e2:f6:30:93:
         f7:1d:37:64:29:09:83:f9:98:1f:c1:89:50:f5:52:c1:ab:0e:
         68:1a:e8:71:58:12:de:48:74:14:7b:ad:15:51:d1:66:55:22:
         cb:79:9c:09:26:dc:ff:eb:5f:39:85:c3:10:e2:e0:ad:19:87:
         42:9d:06:44:c0:83:7b:d6:21:ba:ac:2c:b4:a9:03:16:d8:b0:
         85:11:ed:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:53:29 2026 by rpki-client