Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/2feed830-0e4a-3f68-b470-863b018e6b9f.roa
File:                     2feed830-0e4a-3f68-b470-863b018e6b9f.roa (raw, json)
Hash identifier:          4qisfSqZA/1wJjvj+/7Ni3js6R1q4FZilyKPwMnlnNk=
Subject key identifier:   0D:E2:08:00:C0:2B:AE:F7:87:2F:50:87:3B:98:41:53:C3:5E:66:8A
Certificate issuer:       /CN=3bc65cbb-40a8-4be8-9c35-419f9dc36d71
Certificate serial:       010D0C9F4328584D86954BA5A8E8163A33CFF840
Authority key identifier: 38:18:60:2C:49:E1:86:D4:E7:61:B1:69:29:31:46:3E:93:4A:3E:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/2feed830-0e4a-3f68-b470-863b018e6b9f.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     398125
IP address blocks:        208.71.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:4b:a5:a8:e8:16:3a:33:cf:f8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bc65cbb-40a8-4be8-9c35-419f9dc36d71
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=f8f34e22-5b4d-4023-8919-f472671e1833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a1:a0:e7:0a:ff:0e:87:c9:97:7b:fe:5b:63:
                    06:c9:99:5e:19:3c:31:20:c7:d8:8e:e6:82:99:6c:
                    3d:3e:d5:6b:a8:5a:86:57:55:20:64:05:fe:5c:5c:
                    4a:76:ce:9b:ea:ae:79:6f:2b:88:f9:5a:1a:2e:2a:
                    a4:50:4d:cb:59:76:a4:67:6e:5f:09:c7:38:1e:7d:
                    ff:a3:50:d1:72:db:57:42:6a:e6:97:0f:8a:20:ce:
                    da:17:ef:b8:a8:3b:91:31:10:e0:79:cd:d3:d7:69:
                    1a:c5:a4:e9:2c:a9:89:9b:3d:ce:70:31:dd:14:04:
                    5e:62:ad:65:f6:70:49:72:cc:eb:dd:a1:11:30:74:
                    9f:1a:93:67:7f:94:4a:40:f4:6f:2b:1c:21:12:a1:
                    32:ab:59:49:78:96:cc:43:fe:52:c9:21:89:52:b3:
                    bc:61:10:53:fd:3a:f1:0d:d7:06:34:2d:e0:8b:27:
                    ba:d6:2d:4a:77:e7:8d:ae:c6:96:72:6e:6c:ff:b1:
                    7b:6a:e5:a4:96:c3:47:2c:1b:d1:7b:8f:fd:b9:82:
                    1e:97:43:42:ed:83:96:ea:21:bd:a4:25:b3:fb:d1:
                    ae:60:eb:a1:a0:83:ed:d1:c1:e7:46:a7:95:b3:62:
                    a5:f8:4b:31:11:69:79:e4:fa:05:85:6a:86:ef:2b:
                    fd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E2:08:00:C0:2B:AE:F7:87:2F:50:87:3B:98:41:53:C3:5E:66:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/2feed830-0e4a-3f68-b470-863b018e6b9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.crl

            X509v3 Authority Key Identifier:
                keyid:38:18:60:2C:49:E1:86:D4:E7:61:B1:69:29:31:46:3E:93:4A:3E:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.71.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:89:ca:d6:fd:e3:a6:8a:d9:23:29:b8:44:7f:fd:b1:de:cc:
         4e:8a:31:a9:c6:57:f9:a6:e5:85:a4:01:d0:0e:f6:89:29:e3:
         17:ba:c4:7c:2c:06:5a:e1:a5:2d:46:ff:da:21:67:f4:b4:5e:
         b7:cd:e1:a8:91:4a:72:41:09:12:bf:87:7a:98:f4:20:ed:5a:
         d8:c4:cc:36:3e:23:08:3e:5f:19:b8:6e:d0:06:bf:1f:7b:11:
         4e:4d:ec:97:7c:76:4a:0b:0a:4a:4c:81:06:27:ee:ec:f4:89:
         e5:6c:b1:43:de:60:e9:c6:0c:12:5c:1e:71:84:94:c2:fc:71:
         b2:71:b8:22:a0:70:a5:1d:61:eb:93:78:4f:12:32:83:95:d7:
         03:6e:e5:61:39:a5:be:5e:26:19:a0:6f:04:68:df:3f:17:52:
         c8:70:e2:43:e0:0c:26:78:e1:0f:72:ac:dd:24:88:08:1f:6b:
         8f:dd:5e:61:81:f9:2e:b9:d8:92:1e:71:d1:f2:b1:38:9c:a3:
         55:60:24:a1:2a:e9:ef:b8:32:22:6c:ed:fd:5e:ef:67:fa:89:
         16:74:b8:6f:1a:b1:01:21:10:da:27:45:36:71:01:93:33:ac:
         91:6a:4b:65:0b:6b:29:3c:db:d5:29:65:5a:25:9d:a9:af:8f:
         22:8d:bc:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:34:00 2026 by rpki-client