Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/c93e51e3-0364-3863-9bcd-33d027aba352.roa
File:                     c93e51e3-0364-3863-9bcd-33d027aba352.roa (raw, json)
Hash identifier:          Q+dtHywby/WEeyWIMN+i5WeUaLUri7rB7eVkhbDb0dk=
Subject key identifier:   79:02:21:9F:EC:EB:FF:88:60:2A:89:9A:BB:3B:8B:89:34:4B:59:7F
Certificate issuer:       /CN=804b1e4b-89d3-4769-bab1-38df1d9bb72e
Certificate serial:       010D0C9F4328584D703FD1A25C9E29078BA15984
Authority key identifier: 55:03:65:2A:F7:7F:0C:AF:50:52:FA:C9:87:C9:4F:62:04:2F:B8:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/c93e51e3-0364-3863-9bcd-33d027aba352.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     16509
IP address blocks:        208.80.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/804b1e4b-89d3-4769-bab1-38df1d9bb72e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/804b1e4b-89d3-4769-bab1-38df1d9bb72e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:d1:a2:5c:9e:29:07:8b:a1:59:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=804b1e4b-89d3-4769-bab1-38df1d9bb72e
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=232cf31b-3667-4d5c-bf3d-1510d6d344db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9f:28:6b:7e:65:84:4f:2c:99:82:45:9b:37:
                    ed:4b:18:c5:75:fe:c5:37:dc:e5:07:6d:be:b3:b1:
                    6b:62:e9:01:b9:60:82:25:a3:6f:b7:80:bb:02:d2:
                    88:3d:44:49:5b:c9:7f:6e:fd:dc:27:79:e4:68:3d:
                    4d:39:16:a2:ad:e1:59:7d:c8:13:7b:4e:09:b5:a5:
                    8f:59:4f:62:2e:12:56:e7:cd:24:49:3f:71:be:36:
                    6a:af:73:52:ab:92:44:95:f0:79:44:20:4f:fa:c0:
                    8d:be:2e:f6:ed:53:63:da:2d:e4:c0:c1:85:00:20:
                    0a:65:f4:0c:1b:77:ea:e0:04:ce:c9:a0:15:41:82:
                    14:3d:66:d2:6c:71:a9:c2:30:74:46:33:0b:b8:b0:
                    1c:12:b2:90:28:b9:28:71:7c:ae:78:9a:80:09:93:
                    c9:3b:fb:78:bf:11:cb:5f:1f:f4:ec:f2:9a:5a:9d:
                    72:36:82:d4:7f:be:03:29:25:25:e8:d9:a3:79:db:
                    09:e0:08:12:49:e7:78:6f:10:cd:89:a8:78:c7:4e:
                    4a:5a:da:99:d7:11:a8:e2:e8:ba:2f:0c:35:3b:9d:
                    0f:ae:17:ff:14:07:bd:d1:37:0f:69:e5:fe:2a:f7:
                    27:29:e2:de:27:00:2d:78:c1:e8:39:d2:ea:83:48:
                    be:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:02:21:9F:EC:EB:FF:88:60:2A:89:9A:BB:3B:8B:89:34:4B:59:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/c93e51e3-0364-3863-9bcd-33d027aba352.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/804b1e4b-89d3-4769-bab1-38df1d9bb72e.crl

            X509v3 Authority Key Identifier:
                keyid:55:03:65:2A:F7:7F:0C:AF:50:52:FA:C9:87:C9:4F:62:04:2F:B8:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.80.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:fd:d6:de:d8:fa:2f:ac:b0:e3:f0:53:10:63:ab:d7:ea:17:
         b4:aa:f5:e2:3d:ce:9a:99:c0:90:a9:9b:f7:bd:57:f7:6c:49:
         01:d5:48:ae:85:2d:33:2a:ee:38:06:f3:88:47:33:4a:5b:27:
         3f:27:d7:cc:b2:78:71:5d:d8:89:28:66:91:66:9d:8b:16:d2:
         5d:61:51:38:e6:74:b4:27:a5:39:ae:92:8d:ce:29:50:e7:c2:
         35:a4:3c:7b:e8:30:1f:4d:ff:1b:cc:ab:11:39:74:95:45:8e:
         47:9f:a5:a2:4b:e1:f1:6d:7e:26:4f:71:98:f4:cf:3c:99:f3:
         19:c6:fc:34:1e:1f:6d:b1:2f:5a:80:85:c7:b4:90:22:6f:f4:
         25:94:db:74:28:30:71:df:f3:89:1a:39:c4:03:12:65:62:92:
         ac:fe:26:c3:78:16:8a:57:9f:e8:51:ab:58:72:09:06:78:0e:
         ff:91:7a:52:b8:5e:ee:1d:1b:53:7a:e5:55:f6:f6:ed:10:4b:
         1c:47:cc:5f:2d:0d:19:e7:f2:67:b4:5f:fc:3b:41:e2:d8:cf:
         55:8b:63:63:f0:9d:40:68:b0:6b:9e:51:23:80:6b:4d:36:5d:
         a0:58:05:2e:ff:81:09:36:61:d7:be:bf:53:60:54:66:e1:0a:
         f8:44:16:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:22:20 2026 by rpki-client