Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/f4938dd0-aa27-3eb5-ad66-6397569a535d.roa
File:                     f4938dd0-aa27-3eb5-ad66-6397569a535d.roa (raw, json)
Hash identifier:          biFRZjicTuG5yX0cG/O5zkvXpkONOvs2NwT92nh+LWI=
Subject key identifier:   3D:8B:61:87:E2:E3:EC:05:D6:71:1D:C4:5E:ED:A9:3E:9A:22:12:E2
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584D59EAB3172583A57B425300E0
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/f4938dd0-aa27-3eb5-ad66-6397569a535d.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     3561
IP address blocks:        208.144.0.0/13 maxlen: 13
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:b3:17:25:83:a5:7b:42:53:00:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=6030986c-50b7-4de2-b94d-4de32877837d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:70:e5:e8:4c:9c:f1:ef:40:dc:c5:78:45:3e:
                    48:7c:4d:a6:a1:af:25:37:cf:e7:80:10:5b:c5:0b:
                    42:6f:47:64:9d:25:b2:01:64:f7:d5:69:c4:42:b6:
                    c0:e8:3f:c9:da:ac:64:22:b8:3a:29:fa:96:ba:e8:
                    0d:c7:05:4d:05:0b:77:88:31:a8:be:a3:79:1c:bb:
                    95:f6:d5:23:69:a5:7c:ab:76:12:d0:41:7d:a2:b1:
                    81:b0:51:2e:59:e7:20:4c:05:2a:6c:2a:e2:ea:4b:
                    cb:d9:5a:5a:fd:0d:9b:e2:92:57:32:64:a3:e5:7d:
                    6d:7f:3f:24:c7:a7:30:bc:6d:c5:88:32:33:82:5a:
                    eb:90:ca:c0:99:cc:60:aa:98:6a:85:33:d5:55:b0:
                    27:6a:00:92:03:b8:b8:48:05:7b:d4:99:2b:5f:6c:
                    03:82:37:8d:10:d7:1b:19:d3:b6:f0:92:34:15:c0:
                    4d:40:ab:07:12:ba:e3:92:69:92:db:16:51:86:75:
                    2d:dd:d4:fd:7c:5a:ba:2c:d1:70:9f:44:f0:d1:2d:
                    e1:0e:78:03:a5:29:d1:91:1d:69:51:c1:37:45:20:
                    a6:f7:04:99:83:37:7a:19:94:3b:0e:df:b2:9d:5b:
                    f1:2b:f5:dd:54:77:c5:28:a2:95:20:0a:a4:f4:00:
                    37:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:8B:61:87:E2:E3:EC:05:D6:71:1D:C4:5E:ED:A9:3E:9A:22:12:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/f4938dd0-aa27-3eb5-ad66-6397569a535d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.144.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:91:5e:9b:24:fa:82:1f:9c:01:b1:a2:43:17:9f:1d:ee:f9:
         a6:8c:c7:d7:f1:b1:17:cf:ce:65:f9:90:ec:20:3a:dd:cd:4d:
         b9:45:5b:27:b7:61:ce:d1:64:d4:8d:5e:6a:97:5d:3d:d2:b4:
         05:f4:bd:27:05:83:21:7f:df:5c:fd:43:82:60:e0:dd:56:d0:
         68:40:ed:b7:e5:43:2d:40:6a:20:83:96:f6:48:1c:56:ea:44:
         57:83:af:12:69:ab:06:2c:85:5b:ec:68:1c:6e:b8:9d:a0:45:
         ba:50:ea:b6:a6:11:84:86:bb:99:59:df:5e:ac:60:62:f2:32:
         22:fe:22:30:4d:6b:d5:7e:ae:40:6c:54:2a:54:29:d6:bd:cb:
         ff:12:d2:b7:ab:a8:b0:8c:84:c3:d3:b5:45:f8:bc:1e:08:db:
         2c:d9:c7:32:68:ea:f2:01:fb:20:55:ba:1f:30:41:91:8a:08:
         44:2c:5d:78:0b:81:da:3f:63:8b:11:41:b1:12:74:b8:7f:eb:
         b3:f7:3d:62:04:59:5b:b9:25:ac:45:6e:d5:fa:61:f4:af:b3:
         9f:4e:cd:ba:68:80:dc:c3:66:67:82:f7:3d:c9:9b:54:60:d6:
         66:b2:a7:cf:29:04:22:b4:2c:53:f2:6f:69:8e:08:ff:89:d5:
         76:78:46:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:06:14 2026 by rpki-client