Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/3131e6dc-7164-3f03-84c1-c68697ea362c.roa
File:                     3131e6dc-7164-3f03-84c1-c68697ea362c.roa (raw, json)
Hash identifier:          5+eG0KyYQwszJgLQrh5Q7ZuzZCyU8dd50gmr+6avtj0=
Subject key identifier:   97:11:C5:CF:48:16:D3:AD:DD:CD:99:99:89:77:5D:3E:E6:9D:A2:7C
Certificate issuer:       /CN=804b1e4b-89d3-4769-bab1-38df1d9bb72e
Certificate serial:       010D0C9F4328584D703FD1B1953FF0C7199CC000
Authority key identifier: 55:03:65:2A:F7:7F:0C:AF:50:52:FA:C9:87:C9:4F:62:04:2F:B8:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/3131e6dc-7164-3f03-84c1-c68697ea362c.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     14618
IP address blocks:        208.80.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/804b1e4b-89d3-4769-bab1-38df1d9bb72e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/804b1e4b-89d3-4769-bab1-38df1d9bb72e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:d1:b1:95:3f:f0:c7:19:9c:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=804b1e4b-89d3-4769-bab1-38df1d9bb72e
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=837aa078-0264-41e6-a80f-9795f5778430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:73:5a:1f:32:51:ff:c3:61:2a:35:07:a2:6b:
                    0b:d3:50:a2:f0:42:49:98:a5:3d:f3:48:7e:d8:e1:
                    3d:05:67:f0:5a:2d:9b:f9:70:79:33:fd:e6:68:79:
                    4b:b0:6d:44:07:60:67:50:64:55:d9:66:a7:df:4f:
                    c0:34:6d:e2:e4:9d:45:5f:2d:f4:09:ce:b7:ef:a2:
                    ac:59:99:6d:31:34:46:3b:27:57:52:4e:0a:1b:c3:
                    8e:a8:ea:d8:54:e6:1a:ce:71:15:9e:13:67:4e:2b:
                    35:b3:b4:36:60:0a:62:d1:fa:94:9e:2f:a9:b7:f2:
                    b2:77:89:76:ac:07:b4:ca:ea:ce:c8:65:e3:e9:18:
                    3d:23:4f:92:2a:fe:1e:41:dd:35:26:fb:41:3f:d4:
                    7d:8b:4a:08:59:3e:3a:1d:e8:0d:59:5d:f7:d3:9e:
                    f8:2f:c9:fb:a2:10:cc:69:82:ea:b1:17:d3:b1:0b:
                    bb:04:6f:b3:39:39:49:66:8a:fb:5c:1f:17:f9:89:
                    7d:f2:3a:40:db:b4:1a:94:e8:ec:cc:b7:d9:43:44:
                    21:c7:52:ec:87:42:63:0d:e9:a4:89:39:55:b8:9c:
                    79:37:a6:a3:ee:12:f4:89:41:70:3c:87:37:6c:f3:
                    ce:b8:5e:28:7d:39:60:76:63:32:56:07:ea:c5:2c:
                    62:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:11:C5:CF:48:16:D3:AD:DD:CD:99:99:89:77:5D:3E:E6:9D:A2:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/3131e6dc-7164-3f03-84c1-c68697ea362c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/804b1e4b-89d3-4769-bab1-38df1d9bb72e.crl

            X509v3 Authority Key Identifier:
                keyid:55:03:65:2A:F7:7F:0C:AF:50:52:FA:C9:87:C9:4F:62:04:2F:B8:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.80.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:60:4e:ac:59:67:d4:19:c1:15:26:4a:44:e9:37:55:a8:40:
         f5:6a:82:33:15:82:fe:fa:df:87:5b:cd:45:3f:18:e4:00:09:
         ab:d3:5b:e1:d3:96:d2:64:d2:57:93:65:21:06:9c:9a:7d:0e:
         e3:91:bc:cb:3a:ca:c6:aa:58:ae:b8:3c:63:4f:57:ea:05:74:
         0b:95:f7:de:e0:08:a4:51:86:64:be:4b:0a:0f:c5:db:4a:ca:
         da:a3:dc:01:fe:48:92:e2:5b:8b:48:8c:bd:55:9f:42:8b:ff:
         95:19:ea:b5:53:ed:2e:96:bd:c6:b3:d2:a3:65:89:32:f2:3c:
         9a:d8:bc:fb:71:db:aa:29:f3:e6:a9:32:75:4e:3f:f2:2d:c0:
         ab:ef:ac:2c:da:ea:7f:12:42:f4:ad:c9:23:bc:25:02:39:1b:
         e1:2b:a1:82:42:ac:fb:75:fc:6c:d2:25:21:c1:8f:9c:25:52:
         48:b6:a5:a9:47:c8:4b:45:bb:f1:23:d1:79:6f:6a:88:9e:21:
         fb:53:01:47:24:7a:bc:c2:ba:84:48:3b:19:f7:f9:60:86:0a:
         4a:59:49:f6:9c:47:e4:33:63:26:a0:a9:8a:46:f4:a1:06:a5:
         e3:29:e2:43:60:69:24:7a:1d:67:31:28:8f:b6:ad:28:16:f8:
         2c:c4:71:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:22:28 2026 by rpki-client