Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/a665e37a-2264-3b19-b8a4-ae270c10d73a.roa
File:                     a665e37a-2264-3b19-b8a4-ae270c10d73a.roa (raw, json)
Hash identifier:          FZpa3DV8YNNqcCgLD58uBBNEyJgB2tqcCBsfvGFfZ1A=
Subject key identifier:   E5:6A:58:D7:A1:61:5D:7F:88:A2:44:32:CD:45:A3:96:D8:F9:8C:81
Certificate issuer:       /CN=eb36756e-e433-4732-a707-a9fa13965624
Certificate serial:       010D0C9F4328584D746FD9C16752C895AE64BD20
Authority key identifier: 88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/a665e37a-2264-3b19-b8a4-ae270c10d73a.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     3565
IP address blocks:        208.68.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:d9:c1:67:52:c8:95:ae:64:bd:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb36756e-e433-4732-a707-a9fa13965624
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=a1c7ce32-1380-4a2a-9aa7-ad7f364d01f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:db:77:8f:ea:4c:c5:54:cb:c4:eb:35:b2:81:
                    d7:c6:46:80:ff:42:06:50:70:cc:e0:10:8b:d5:3b:
                    76:ce:39:f3:be:5d:ca:82:d2:93:c3:ab:5a:91:b6:
                    51:14:87:73:54:11:d5:2b:4f:b5:61:46:f0:dd:64:
                    b8:e1:14:eb:87:68:dd:f6:0b:57:e7:d7:c9:64:34:
                    32:c8:7e:c2:c1:d0:ed:ce:50:45:1a:4a:f4:e1:9e:
                    c3:55:d8:86:e9:b5:be:8f:fa:7a:38:02:e9:b6:6d:
                    d6:f9:0e:f0:7a:ab:4b:c4:8a:47:df:c9:0f:56:ad:
                    24:b4:10:90:f5:f2:56:b0:aa:90:dd:3a:2c:93:2e:
                    6a:e2:48:01:c7:21:3f:cb:84:3e:88:75:6e:89:f9:
                    24:23:c6:41:56:16:bb:9c:7d:83:5c:b7:7e:1e:cf:
                    6e:de:52:83:98:c0:2e:8f:78:3b:49:79:c6:ac:da:
                    be:de:e6:34:15:cf:87:b8:67:d7:5b:88:52:c1:32:
                    01:ee:7e:1e:28:f8:da:ee:b9:e0:6a:15:a8:dd:01:
                    c1:9e:8f:9f:bd:7f:c3:9d:60:6d:ef:6f:af:9f:38:
                    fe:87:cd:67:5d:66:a0:93:e4:42:91:7b:23:c8:ae:
                    e1:47:90:72:a0:09:04:44:73:59:45:bd:c7:8f:c2:
                    d1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6A:58:D7:A1:61:5D:7F:88:A2:44:32:CD:45:A3:96:D8:F9:8C:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/a665e37a-2264-3b19-b8a4-ae270c10d73a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.crl

            X509v3 Authority Key Identifier:
                keyid:88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.68.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:8c:d1:5a:fe:b9:0f:21:77:f6:16:0d:21:2b:9b:7a:ac:f7:
         85:73:ab:ac:22:17:cd:f1:7b:6c:41:e5:45:a8:49:88:8f:1d:
         34:2f:f9:45:cc:86:b3:b5:53:52:64:2c:92:36:97:2b:26:95:
         77:ec:61:24:1d:51:82:ae:62:94:13:1f:73:d8:3c:57:0f:10:
         d8:22:75:00:63:1f:22:a2:96:ea:14:a0:54:65:85:8d:47:d7:
         6a:ae:7d:af:2a:58:fb:40:04:6b:cb:30:4e:8c:a1:96:51:7f:
         f5:1a:50:6b:01:81:3a:c9:8e:2f:c4:b2:e8:40:50:9b:e5:a4:
         2b:05:ff:5d:ef:a3:86:33:19:94:d2:2b:0a:fe:b9:02:4d:88:
         6e:a1:c5:95:13:c0:50:e3:c8:40:ba:0c:d4:9f:3b:49:f8:f8:
         02:fd:da:0b:25:cc:49:90:41:ca:b9:ad:e5:09:57:8f:a9:1e:
         da:12:b8:8f:f8:a8:db:e6:b7:60:9d:b2:00:c3:01:60:7e:b9:
         1f:a9:be:e2:98:6c:15:eb:36:f4:3a:9a:7e:da:43:07:4c:88:
         5e:12:87:ef:da:17:af:de:c3:2d:43:d2:cb:6b:1b:45:d4:22:
         d2:d9:d7:12:f0:08:3e:9f:40:85:da:25:a0:e2:9e:27:32:be:
         ba:bd:95:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:48:22 2026 by rpki-client