Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/bdd08e53-8fe4-3ed5-b7e1-55b0ae527c20.roa
File:                     bdd08e53-8fe4-3ed5-b7e1-55b0ae527c20.roa (raw, json)
Hash identifier:          8atYsHIKK8ngiw279AxdxyVSVVPlpVB+YTLHHOVUrWw=
Subject key identifier:   F3:65:52:4F:D8:39:5E:84:70:92:C3:89:78:2E:52:1E:10:78:11:DB
Certificate issuer:       /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
Certificate serial:       010D0C9F4328584CFC822A867040EC952BA5F700
Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/bdd08e53-8fe4-3ed5-b7e1-55b0ae527c20.roa
Signing time:             Thu 26 Feb 2026 02:00:32 +0000
ROA not before:           Thu 26 Feb 2026 02:00:32 +0000
ROA not after:            Wed 27 May 2026 01:00:32 +0000
asID:                     398210
IP address blocks:        207.211.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fc:82:2a:86:70:40:ec:95:2b:a5:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
        Validity
            Not Before: Feb 26 02:00:32 2026 GMT
            Not After : May 27 01:00:32 2026 GMT
        Subject: CN=a0dbbb9f-be52-4b5e-8f25-ea8ca114478c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9e:b1:26:97:7f:6f:7d:69:5b:20:32:7e:9f:
                    97:c2:c2:3b:27:47:e5:c8:36:67:a6:bd:a7:23:1c:
                    ae:b6:4c:8f:ff:92:e4:06:46:41:a2:59:db:f7:da:
                    45:e2:f1:50:4d:2f:f0:5c:07:8c:43:f6:bc:2b:70:
                    82:1e:e8:65:58:31:d4:22:da:52:3e:88:d0:eb:3a:
                    90:e0:6a:5c:f0:a5:6f:82:4f:88:54:9b:33:39:dc:
                    9b:f0:7c:83:a1:95:93:aa:d5:3a:ac:03:4b:eb:a9:
                    59:ba:70:a0:ad:3d:ef:52:fe:40:8f:ed:c6:eb:e2:
                    0d:ed:59:31:84:36:fb:e2:43:39:46:e8:8f:be:e4:
                    79:d7:0c:63:9f:a7:6b:f5:23:7b:bc:48:35:d2:77:
                    c0:ca:76:08:7c:a7:ba:51:52:73:2f:ec:f8:b5:4d:
                    e6:01:0e:a3:b3:a0:f6:f9:89:95:a9:0e:10:3b:fb:
                    08:2f:92:bd:c3:4d:d8:62:24:f2:bb:f6:5e:b4:6c:
                    fd:18:3d:32:e6:41:b9:fd:71:c1:b4:72:d7:e1:c2:
                    a6:d9:8a:15:d7:62:03:0f:11:92:00:60:bb:23:41:
                    08:21:57:f6:54:44:3b:b7:db:05:29:34:36:27:2c:
                    0d:fe:4d:88:59:0a:11:05:4c:32:2f:17:0d:a9:95:
                    1c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:65:52:4F:D8:39:5E:84:70:92:C3:89:78:2E:52:1E:10:78:11:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/bdd08e53-8fe4-3ed5-b7e1-55b0ae527c20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl

            X509v3 Authority Key Identifier:
                keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.211.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:e7:d0:49:91:22:b7:6e:53:0b:a7:44:30:0b:fa:49:e5:8c:
         c1:2c:2e:e4:12:c4:b2:a8:e7:86:8c:46:b3:79:70:c9:79:cf:
         9b:45:77:ba:3d:64:b0:ed:3e:67:52:ab:17:25:00:8e:44:af:
         a2:7b:39:e2:b7:66:ad:ad:04:3d:73:2a:10:ac:3d:4c:16:76:
         15:c3:69:2f:97:f3:e6:a7:ec:6c:e3:ed:7e:e9:0c:d7:cb:33:
         2f:7e:12:fe:41:fd:79:8c:ed:4c:11:d3:06:4c:50:96:5e:7a:
         22:b0:15:63:d9:66:9a:7f:d1:01:0a:2a:16:97:fe:cc:56:05:
         e6:73:3a:c6:d6:57:8d:09:d1:3f:02:01:48:0d:07:76:f6:34:
         50:c3:49:b4:69:5f:31:a9:44:b0:4e:db:48:80:97:78:3e:48:
         21:6b:bd:51:b2:9a:64:66:5a:d7:76:5f:65:0f:33:c4:aa:f1:
         84:2a:41:9b:c0:5e:b3:28:7a:d2:94:f6:4d:99:43:5b:7b:27:
         4e:b3:12:91:ea:b2:51:4c:0e:c5:06:9f:46:8f:f7:db:c1:cd:
         eb:19:a2:3f:18:a6:16:3c:6e:0f:fa:9b:af:7c:96:10:c7:7a:
         8b:47:cc:d9:02:35:ec:7c:65:8d:e5:75:eb:ae:a8:d4:ce:cb:
         3d:25:c6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:52:33 2026 by rpki-client