Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/820daa42-e1b8-3bb7-8107-59cec506ef46.roa
File:                     820daa42-e1b8-3bb7-8107-59cec506ef46.roa (raw, json)
Hash identifier:          8OuY1q94opPtIX/LtgMzMbziEWUyS2VUdigXNXfMj20=
Subject key identifier:   38:72:C3:74:6B:1D:4F:55:0D:43:52:4F:85:7D:B1:EC:98:C0:BC:92
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584D83CB06E508A203B38DAAD680
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/820daa42-e1b8-3bb7-8107-59cec506ef46.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     3848
IP address blocks:        216.208.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:cb:06:e5:08:a2:03:b3:8d:aa:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=41cae662-8fc2-4e46-a657-1c00cfce0838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ed:94:66:95:40:91:a6:14:2e:83:2f:ec:b4:
                    4b:11:ff:78:1a:86:8c:8c:77:c6:6c:5d:28:f1:a6:
                    f4:da:20:1f:6c:75:6a:ef:9c:30:98:5e:9b:f9:17:
                    d3:0a:fe:11:9f:d1:9d:4d:3b:c3:8d:0f:fc:c9:21:
                    9f:f6:fd:72:d8:e4:94:87:59:57:e5:7a:ba:c4:08:
                    b0:e8:76:93:40:38:88:ed:c8:2c:90:f8:52:e3:e3:
                    b2:bf:3f:04:47:d4:b5:6e:99:0e:f1:6a:96:18:3d:
                    ed:c4:4f:84:ad:57:c9:3b:6d:a8:cd:bc:ef:cc:3e:
                    db:d7:a4:06:29:eb:06:e8:ac:1a:31:c0:18:12:5c:
                    b6:cb:22:9c:d6:4e:8a:be:59:76:91:0d:6a:63:07:
                    48:24:e9:d5:42:35:0d:8d:c6:f5:74:7c:ca:97:4f:
                    6e:2d:3d:a9:97:fb:71:8f:d5:08:68:da:0f:ae:5b:
                    de:c7:50:c4:29:96:52:e7:b2:07:21:7b:41:ff:81:
                    74:25:74:4f:ca:da:f6:77:32:d6:29:90:a1:bf:92:
                    86:8a:98:65:17:10:99:c4:67:9f:1c:6a:15:9e:e4:
                    4c:6f:80:3d:0a:65:f2:55:80:cf:b3:1c:3a:33:ad:
                    fa:8d:fc:41:33:fe:cf:63:f1:7a:cf:83:c6:58:bc:
                    51:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:72:C3:74:6B:1D:4F:55:0D:43:52:4F:85:7D:B1:EC:98:C0:BC:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/820daa42-e1b8-3bb7-8107-59cec506ef46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.208.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:d9:96:c8:7c:5b:91:c1:4b:36:18:1f:98:4d:06:55:11:5e:
         af:89:45:ab:f2:e1:ec:82:6f:e2:db:0d:f4:5f:df:73:80:0b:
         32:d5:53:fe:c0:b3:20:5a:22:e3:2b:9b:61:fd:69:7c:7b:4a:
         cd:46:55:7e:6c:97:c5:8e:e7:45:6d:16:db:ae:40:09:25:83:
         f4:29:e7:33:46:a4:1f:97:85:23:36:c0:90:ab:b0:13:c5:dd:
         a1:ef:5b:cd:a1:c3:4e:e0:87:cb:0d:89:cb:88:3a:43:88:a9:
         1b:c1:f9:04:23:f5:2c:31:c0:d9:92:f3:10:ee:01:68:b0:fc:
         38:28:b0:f8:f0:b6:c8:b3:4e:54:ff:27:54:4e:c8:26:2b:59:
         12:1a:3d:fa:7f:cf:d0:5f:15:fc:38:7b:18:2a:fe:11:66:6a:
         8b:2f:07:8a:21:65:43:54:51:9c:e6:c1:5d:86:5d:ad:77:8b:
         ee:ab:97:00:4c:37:23:7f:9b:6f:62:c8:5e:77:eb:76:5d:a2:
         4e:11:d9:db:ee:b6:4c:ef:9e:23:84:f4:b2:5a:20:f4:c7:39:
         0c:86:a3:e9:68:7a:1f:43:cc:8e:76:14:9e:f4:6f:32:70:d0:
         dd:36:8f:4f:f4:a5:bb:72:9f:58:cf:ee:b0:2a:26:f7:1c:fe:
         86:16:05:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:40:53 2026 by rpki-client