Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/33c0cc4a-a009-3fd3-93f7-560ebdc09a5d.roa
File:                     33c0cc4a-a009-3fd3-93f7-560ebdc09a5d.roa (raw, json)
Hash identifier:          qeYaJIWr2+SF5tkN0OSf0KOv1TRmgyhrQoRPfPMJzfk=
Subject key identifier:   EA:9C:29:42:66:E6:43:2C:52:61:30:83:58:CB:82:04:CA:4C:BB:FF
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584DFBD5EEB2CFB57D29870127C0
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/33c0cc4a-a009-3fd3-93f7-560ebdc09a5d.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     7131
IP address blocks:        8.3.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d5:ee:b2:cf:b5:7d:29:87:01:27:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=7f5a5d97-3223-45c5-bce6-5e8d62f72947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9b:81:f9:f6:43:8d:4c:10:b7:2e:24:46:c8:
                    f6:6b:90:03:eb:74:fb:96:68:bb:df:46:cd:f0:fc:
                    6a:37:29:ec:2c:98:e6:97:b3:90:b8:30:e6:d7:b9:
                    7a:32:26:3d:ba:c3:99:8f:3d:bf:bf:86:1b:b7:b9:
                    97:c0:d3:6d:f1:0c:09:03:aa:91:81:31:4c:d9:8f:
                    7b:72:93:04:97:0d:30:15:47:d2:37:cf:a4:92:fa:
                    e9:c7:cf:59:4e:f9:f0:09:50:b8:43:68:c8:44:9f:
                    bc:f1:4e:64:db:e1:72:a6:3f:b4:1a:74:b6:89:4b:
                    ac:31:8a:ed:6b:6f:a4:94:45:62:8b:94:3b:77:37:
                    fe:5c:3e:f6:a0:22:02:c7:97:90:74:fd:7b:2d:5b:
                    2e:e9:31:0b:45:d8:ed:81:91:f9:23:4d:3d:f5:2d:
                    f3:31:0a:82:41:cd:8f:fe:2f:23:be:87:a9:d2:f0:
                    81:f2:1f:37:e5:f0:d0:5e:a4:31:97:5e:1c:88:91:
                    3d:b0:fa:49:64:30:ad:87:2a:8d:34:91:a4:85:b2:
                    d8:89:9e:3d:82:92:d1:d1:bb:85:0f:91:c6:f4:77:
                    ec:c2:c2:ce:c1:ff:8e:2d:c2:7e:0a:0c:1c:fe:9a:
                    3d:7c:6c:ab:7e:b1:00:55:0a:5e:c9:07:9f:9f:11:
                    5a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:9C:29:42:66:E6:43:2C:52:61:30:83:58:CB:82:04:CA:4C:BB:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/33c0cc4a-a009-3fd3-93f7-560ebdc09a5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.3.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:a1:78:72:bb:b6:3a:b6:41:8d:0f:07:80:5c:56:97:34:14:
         46:49:d1:3d:f0:7e:4e:08:da:b9:50:27:1d:b8:1d:67:ba:ad:
         ea:77:15:46:0e:88:d5:5d:51:07:55:cc:65:11:fc:f9:4b:46:
         54:75:f4:d5:72:27:fe:b5:f4:8a:8f:6d:88:2b:3f:6d:09:81:
         ae:6a:b7:34:8e:c7:f5:08:80:04:6d:f1:6c:dc:e5:25:8b:f8:
         bc:30:39:be:69:1f:38:58:2b:97:79:c4:d1:27:8f:24:ec:7d:
         47:cc:f2:a3:8b:c6:30:be:2f:65:6f:c7:43:a0:4d:28:d9:13:
         27:1a:14:e6:d9:28:7d:16:77:66:44:6b:0a:5c:d4:11:ad:a7:
         57:10:6c:14:42:47:09:90:a4:41:64:30:a9:e3:d0:11:93:b9:
         1b:6d:a4:5b:e5:e7:12:5d:9e:d3:09:29:b6:62:af:d9:9e:3b:
         57:f1:e9:67:8c:04:22:51:89:e8:19:8a:b5:b6:4b:0b:3d:d2:
         42:25:47:5c:49:7a:56:68:75:cd:77:a6:02:70:da:37:1a:4b:
         ef:89:4c:a7:1d:da:a7:f7:19:5c:a0:57:71:54:19:31:9f:05:
         ef:56:41:a4:84:b0:41:0d:32:f2:32:91:12:fb:c9:c5:cb:c9:
         ac:9a:19:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:05:21 2026 by rpki-client