Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/9814d97b-c411-3c0f-aac7-5659a975f78a.roa
File:                     9814d97b-c411-3c0f-aac7-5659a975f78a.roa (raw, json)
Hash identifier:          wXULOtDOPu7rLt8Eo+kORNMpgtMK8FU8F6R2jFHnDGQ=
Subject key identifier:   82:61:D7:B7:CE:FC:EA:A7:21:F2:87:06:6B:94:A3:EF:5A:9E:E7:B3
Certificate issuer:       /CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb
Certificate serial:       010D0C9F4328584E0865E7562E15A1D2187BD300
Authority key identifier: 8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/9814d97b-c411-3c0f-aac7-5659a975f78a.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     33322
IP address blocks:        208.71.168.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:65:e7:56:2e:15:a1:d2:18:7b:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=37c77383-c208-400f-8d17-f6ddbde69fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9b:b0:d4:e7:3a:c8:ee:de:84:27:0d:0d:e3:
                    7a:0c:18:2b:ce:68:0e:2a:81:56:1a:a6:07:39:29:
                    a4:f7:2b:a7:90:ec:4a:66:9c:75:db:56:c9:aa:ca:
                    20:81:f0:0d:18:bd:66:af:02:9a:76:d6:c1:8e:18:
                    0f:46:9a:26:05:09:a2:7e:36:ee:5e:16:8f:71:48:
                    6e:8b:28:72:e6:8a:ab:db:f9:0c:f8:76:04:63:62:
                    b7:df:b0:b8:df:af:3f:cc:c8:57:81:02:fe:f7:bf:
                    f8:64:f4:0e:d5:53:88:0b:a1:ff:f7:fb:3d:9f:1d:
                    57:35:59:fa:43:e0:56:14:72:e2:dc:63:e1:7e:39:
                    65:49:10:49:2d:87:e2:45:13:e9:ad:6f:fe:07:32:
                    fb:de:98:ed:98:42:62:17:85:49:f1:9c:5f:14:2f:
                    b8:e6:00:53:0b:a4:11:6e:7a:28:f3:32:e5:9c:fe:
                    62:d7:69:59:76:1e:5c:eb:7b:ff:cd:02:4e:15:11:
                    a0:42:77:09:24:d1:dc:3f:e8:24:14:08:e5:f3:11:
                    7d:ef:c5:61:06:25:4e:92:d4:9e:3e:6a:93:27:cb:
                    27:6d:b1:4f:17:23:ab:54:38:c7:38:23:e0:22:c2:
                    52:fb:fc:6a:2f:45:fb:43:f8:d7:bd:4a:9d:07:a8:
                    59:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:61:D7:B7:CE:FC:EA:A7:21:F2:87:06:6B:94:A3:EF:5A:9E:E7:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/9814d97b-c411-3c0f-aac7-5659a975f78a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl

            X509v3 Authority Key Identifier:
                keyid:8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.71.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:a2:55:47:26:03:e8:8d:79:df:1f:8c:ff:2e:84:82:a1:85:
         6c:5c:62:08:74:db:76:a8:7a:43:67:7e:c9:7f:79:44:ea:81:
         b7:59:31:c8:27:9c:20:f9:59:d2:74:1e:77:f2:35:3b:2a:fe:
         20:ed:64:a9:7b:74:c6:f2:eb:51:6b:9c:32:09:e8:27:0a:1a:
         20:b4:48:65:4e:ca:24:64:8d:b5:70:76:44:21:d0:f6:75:70:
         4b:22:ea:42:38:24:c9:a7:94:31:fd:69:af:96:31:6e:48:95:
         2f:94:35:fc:5a:7e:a0:46:6d:76:ac:b0:37:38:14:df:ae:8e:
         52:c5:26:83:98:54:6e:70:3e:4c:20:da:8d:63:8b:ec:f4:d2:
         82:f6:71:cd:1b:53:52:62:be:7f:6c:e4:6c:ef:91:f2:b8:0f:
         cd:f4:59:bc:2c:c7:22:81:1c:6e:de:b7:38:dc:59:00:d1:2b:
         29:42:7b:41:34:47:c7:d3:43:13:3c:d0:c0:e8:8f:23:fd:d6:
         a6:6a:2f:86:b7:05:ae:2e:ba:3d:14:20:f5:74:1c:08:d6:63:
         a8:d4:43:0b:ae:04:29:c6:f7:b2:fa:31:78:3a:07:2f:72:84:
         9d:cc:da:09:8e:08:b4:fd:5f:59:0c:bc:0c:00:ea:72:9c:1f:
         a5:1c:fa:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:00:07 2026 by rpki-client