Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/57396bbc-4a2e-3445-940b-13e66d6ac953.roa
File:                     57396bbc-4a2e-3445-940b-13e66d6ac953.roa (raw, json)
Hash identifier:          xLiZzK+8v295eHAyX9Fj1J9ZlyUQpakMycW1qARXpoo=
Subject key identifier:   38:58:CB:AE:B3:EC:0B:61:65:61:BC:98:D6:CE:70:46:6A:F1:DA:49
Certificate issuer:       /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
Certificate serial:       010D0C9F4328584DDD2083785E76298D422D9500
Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/57396bbc-4a2e-3445-940b-13e66d6ac953.roa
Signing time:             Sun 17 May 2026 13:00:32 +0000
ROA not before:           Sun 17 May 2026 13:00:32 +0000
ROA not after:            Sat 15 Aug 2026 13:00:32 +0000
asID:                     398210
IP address blocks:        207.211.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:dd:20:83:78:5e:76:29:8d:42:2d:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
        Validity
            Not Before: May 17 13:00:32 2026 GMT
            Not After : Aug 15 13:00:32 2026 GMT
        Subject: CN=1d503628-7b1c-4c48-8557-f0c90d7812e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7a:96:2b:00:2f:2f:66:1e:6a:54:db:48:c3:
                    09:ce:23:0b:97:9f:ce:ab:e1:43:88:2c:3f:dc:15:
                    eb:ac:ab:08:fb:c6:66:db:07:d3:d3:6f:c8:e5:cd:
                    97:13:d6:26:d6:d9:d4:4e:c4:d6:8c:07:d9:e4:65:
                    4f:be:21:40:2b:28:bc:3b:3c:da:c7:12:01:dc:50:
                    09:fd:00:b3:b0:52:76:5b:8b:06:3b:91:59:4c:36:
                    7a:5e:5c:e8:3d:bc:c0:79:68:20:bd:cd:7f:79:7c:
                    cf:1c:0b:bb:21:12:f8:f8:72:3f:7d:55:17:e0:cd:
                    ff:05:fd:ba:39:61:8c:3d:00:77:bb:e8:88:2d:7a:
                    c1:7a:fc:96:02:69:e0:ac:93:51:bb:6c:35:04:7a:
                    ed:2f:bb:5a:a3:3b:9b:9f:37:e8:08:32:45:33:f3:
                    2f:90:5c:82:51:b3:1b:18:fb:87:43:76:a8:0a:e3:
                    f6:e8:99:c2:37:47:48:3f:2b:d5:df:45:b2:9c:cd:
                    83:71:cb:12:c8:64:31:cd:3a:58:32:6f:f6:5d:c3:
                    4b:5d:e7:f2:60:29:74:28:ad:0d:f9:2f:79:a0:ec:
                    f7:85:54:cd:b1:91:b1:9b:fd:6a:6e:3c:4a:37:9a:
                    89:19:7f:d5:4c:e4:cc:f0:a2:eb:e8:e9:5f:0a:5c:
                    e1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:58:CB:AE:B3:EC:0B:61:65:61:BC:98:D6:CE:70:46:6A:F1:DA:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/57396bbc-4a2e-3445-940b-13e66d6ac953.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl

            X509v3 Authority Key Identifier:
                keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.211.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:81:28:8a:6b:35:64:d5:3d:cf:d6:b1:7e:cf:ed:7a:a0:01:
         99:fa:cd:b2:b0:90:6d:5d:b9:42:8b:33:66:eb:08:de:fe:c8:
         b5:4c:2d:33:21:57:3b:04:ad:5c:42:83:ad:f0:43:2b:c4:13:
         80:15:1a:93:6f:3e:05:3e:c4:8f:49:51:82:35:49:ae:8c:91:
         2e:34:71:80:62:4c:8c:68:60:f2:63:00:4e:83:74:2c:11:dd:
         2c:94:6e:70:d2:93:39:20:17:77:46:97:5e:0d:be:4c:90:ca:
         8b:e2:82:15:00:b0:f8:46:ce:0d:1e:37:cc:4a:47:66:57:73:
         6c:f3:00:a7:06:92:f4:b1:88:3a:12:6e:45:af:e1:4c:71:76:
         65:d9:63:30:d9:ef:d7:dd:7b:26:2b:79:8a:52:06:27:c2:2b:
         ab:48:20:03:69:10:65:f0:c4:df:97:30:f6:dd:e9:26:4a:04:
         63:ea:3a:46:80:8e:ff:3e:d6:59:98:fe:6f:bf:5f:c4:c9:08:
         02:90:68:a6:ad:1b:09:8f:71:6e:7a:20:a3:f8:b6:bf:c5:25:
         fc:bc:90:42:44:bd:5e:00:38:c2:75:5a:53:b9:d8:32:66:59:
         9a:93:34:66:cf:a0:de:2b:33:e7:86:a3:13:f3:29:75:64:6d:
         70:ea:4d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:25:30 2026 by rpki-client