Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/0b303bc2-150d-317d-a5b8-89981f88cbe7.roa
File:                     0b303bc2-150d-317d-a5b8-89981f88cbe7.roa (raw, json)
Hash identifier:          lbrvZc279n7xgJPdeEPwEmssc7GcJbfafJfHVrXQSPQ=
Subject key identifier:   B2:AD:70:26:C3:0C:DD:3A:30:30:82:D8:69:D1:29:CA:94:8B:AA:67
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584D52435969C27FE9EA2AB2D1C0
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/0b303bc2-150d-317d-a5b8-89981f88cbe7.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     6461
IP address blocks:        8.44.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:59:69:c2:7f:e9:ea:2a:b2:d1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=96390572-5dee-44b0-8149-39bed3f64a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6f:83:ea:98:7d:5a:eb:a5:5a:a3:0b:37:ee:
                    13:32:b6:84:85:99:a7:55:ea:79:09:ba:17:1d:d0:
                    bd:01:4e:83:95:23:e6:f7:2b:65:69:b9:85:3d:79:
                    57:16:ac:4b:eb:c3:55:16:81:0f:a4:64:73:8f:5a:
                    7e:15:c5:de:67:b2:4c:b9:8c:21:0a:63:89:cd:94:
                    01:83:1d:84:8b:ea:37:b1:5f:fd:f8:7d:46:69:45:
                    c2:ce:55:50:07:5f:46:13:d2:cb:bb:8e:27:59:10:
                    f4:47:d6:9e:68:75:e1:ba:41:87:e5:23:c6:58:2c:
                    f1:c5:ce:eb:24:1e:bc:67:13:d1:17:36:f9:44:7e:
                    2c:5c:09:0c:a2:c8:69:b2:5a:c9:3e:05:c9:04:90:
                    b5:75:12:7a:c2:29:5f:4b:e9:81:da:ff:9b:87:6b:
                    a0:7c:63:96:90:21:c4:93:8a:83:3d:34:2b:09:69:
                    e2:87:8e:87:64:fc:2d:ec:03:4f:07:e7:22:2a:6f:
                    ee:bb:16:33:da:f4:02:5e:e0:9f:84:36:60:d2:f4:
                    18:f1:42:44:a8:7c:c1:66:85:9b:86:f5:02:10:58:
                    f7:37:53:29:dc:ad:a5:66:46:01:3e:0f:19:d4:5f:
                    0f:86:d4:41:94:da:a3:0b:eb:15:54:56:7c:d2:68:
                    fe:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:AD:70:26:C3:0C:DD:3A:30:30:82:D8:69:D1:29:CA:94:8B:AA:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/0b303bc2-150d-317d-a5b8-89981f88cbe7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.44.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:d5:ff:69:bf:3a:b0:29:b7:36:68:52:b8:a4:6c:96:81:0e:
         53:aa:5d:56:d6:d4:58:ab:7a:a5:d4:1d:ed:0a:56:a1:ff:bf:
         60:a3:32:1c:68:d4:b7:e5:16:f1:87:ad:78:30:c8:53:4f:45:
         e2:53:54:1f:d5:01:8e:a7:8c:94:3b:a6:0d:c1:14:4a:98:fa:
         01:b1:9a:d3:09:2a:ed:56:07:1b:74:61:f0:a3:04:94:af:a3:
         04:11:e3:9e:21:0b:9c:f6:1d:80:5f:50:f2:61:02:64:6c:0c:
         11:f4:e1:7e:15:4f:12:b3:1d:ae:51:b0:eb:1d:e1:9b:e5:b6:
         ab:c3:9a:50:13:ad:f9:ed:ab:06:a7:4b:89:c1:0b:bf:81:6a:
         2d:7e:cd:25:68:00:67:a4:5b:2d:bd:19:4f:57:18:7b:bc:58:
         c3:10:dc:90:2a:d7:b2:59:c7:a1:8f:27:5a:37:ce:c6:e7:69:
         5d:58:ee:0c:28:ef:a5:1a:25:2d:e9:80:42:ec:50:e1:98:76:
         2b:20:d4:67:44:94:8a:26:4c:d6:d1:9e:2a:b6:23:88:7c:b7:
         71:7d:c7:b2:3b:9e:1c:8b:84:40:83:0c:50:18:cd:cc:4d:dd:
         9e:91:43:78:70:3e:54:4b:75:aa:fc:7d:0f:b4:57:98:b3:66:
         f4:ed:22:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:15:59 2026 by rpki-client