Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/0fcd2461-fcd8-302e-b8b5-9f28abc442d6.roa
File:                     0fcd2461-fcd8-302e-b8b5-9f28abc442d6.roa (raw, json)
Hash identifier:          x1xIvO+1T73rd84buGBklM3rF4i7tkuATVyLStGWy48=
Subject key identifier:   B8:86:9A:56:18:CE:1D:23:09:37:68:52:BA:67:8F:6E:20:E5:CF:73
Certificate issuer:       /CN=3df29669-3733-4127-bbde-a71cc4b5a661
Certificate serial:       010D0C9F4328584E1FA99C15FF12020968FEE080
Authority key identifier: 95:AD:24:54:D0:1F:09:B5:B4:E4:A5:D2:66:AE:73:F2:D4:9B:55:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/0fcd2461-fcd8-302e-b8b5-9f28abc442d6.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     55247
IP address blocks:        208.82.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:9c:15:ff:12:02:09:68:fe:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3df29669-3733-4127-bbde-a71cc4b5a661
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=7e3ba18b-84f2-4a04-b9c3-2325741d95ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2a:a8:3f:06:ad:ce:d7:cb:4b:83:63:19:58:
                    ac:54:55:ad:63:04:42:15:9e:5d:72:fe:a7:c7:fd:
                    e3:b2:10:8c:e4:fd:78:f2:a8:ec:d4:98:31:19:00:
                    de:72:1d:ee:b5:72:ef:af:79:05:ca:4c:64:1e:0e:
                    ac:6a:0a:58:bc:1a:36:c9:6d:cc:e3:33:8f:55:50:
                    15:db:4c:41:24:c8:e3:2e:d9:6c:0c:9d:7e:1f:03:
                    dd:08:e3:bc:65:93:26:29:28:b4:d8:16:0e:0b:76:
                    f0:9f:83:09:4d:86:66:50:8d:0e:d1:f1:71:30:4b:
                    9a:b9:22:c2:96:a7:dc:e3:d9:c1:2a:7f:2b:d3:88:
                    43:94:16:49:cc:33:d0:78:b9:50:d7:74:c6:a3:a1:
                    ce:e8:5d:47:e0:03:31:a3:85:45:60:6a:b5:d3:db:
                    d4:ee:bc:60:d9:41:cc:f0:8d:e0:a0:35:8f:89:5e:
                    0d:68:73:a1:99:a9:bc:42:2f:ff:71:ac:9e:57:0e:
                    aa:75:66:e5:6e:39:0b:60:df:89:03:cb:71:e5:7e:
                    7f:a5:4f:1a:04:dc:51:89:d5:84:41:2e:74:d2:18:
                    7c:14:1e:c4:b9:4f:58:fc:4e:42:a6:c1:55:76:87:
                    99:38:82:67:1a:6f:fa:b7:c4:95:58:14:74:c1:85:
                    ee:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:86:9A:56:18:CE:1D:23:09:37:68:52:BA:67:8F:6E:20:E5:CF:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/0fcd2461-fcd8-302e-b8b5-9f28abc442d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.crl

            X509v3 Authority Key Identifier:
                keyid:95:AD:24:54:D0:1F:09:B5:B4:E4:A5:D2:66:AE:73:F2:D4:9B:55:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.82.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:86:c8:19:e7:e9:d6:d4:4c:61:aa:02:74:54:1b:10:11:25:
         81:35:ce:43:59:a7:47:cc:4d:d5:37:11:49:f2:4b:35:dd:eb:
         dc:64:9c:cb:08:24:48:e3:e9:70:a4:80:48:15:a5:2b:fe:cc:
         b6:9b:c5:b7:d4:4c:f3:96:4c:0b:b8:19:11:15:d4:d8:72:d4:
         cd:90:f0:74:97:be:17:48:a2:05:a3:7d:ab:38:be:28:43:08:
         ec:90:5c:84:cd:c7:64:98:51:a8:d6:2c:23:01:04:de:2e:31:
         59:e0:1f:65:f3:a6:68:54:d6:2a:ef:28:8f:e9:15:19:d1:83:
         7f:93:fc:17:3b:fe:09:11:01:92:4d:91:5a:e8:2c:f4:5e:0b:
         92:32:70:37:fc:91:43:45:7d:9c:b6:6d:4f:ff:60:96:97:fe:
         e6:a6:7d:d6:a3:b9:e1:46:f4:e9:cd:9a:ed:90:c6:d2:a0:b4:
         d7:96:90:d0:56:bc:81:0b:21:79:02:b2:a6:b2:c5:ad:d0:86:
         fd:dc:ba:9f:df:5f:56:30:6d:07:7d:82:1a:86:77:a2:31:2f:
         63:25:10:cc:f7:f1:0a:59:10:0b:14:ac:26:8b:01:c0:10:f2:
         40:91:b1:d9:7f:cc:80:56:67:2b:20:05:29:51:d6:e6:12:12:
         dc:af:95:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:53:32 2026 by rpki-client