Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e/8267bd09-4781-3fb5-8a71-7b1f8e7ec73b.roa
File:                     8267bd09-4781-3fb5-8a71-7b1f8e7ec73b.roa (raw, json)
Hash identifier:          mTTRfnlC8POutY8hKP70k/zHIoz4BiBcy3SmA79LnVg=
Subject key identifier:   D9:BB:D2:EF:3A:89:16:C6:C3:5E:58:83:9A:3B:21:3C:4E:6C:87:C2
Certificate issuer:       /CN=19e347cf-c0cb-49a3-b025-5d36006aab3e
Certificate serial:       010D0C9F4328584DE84B40419E86B4447A371400
Authority key identifier: A3:61:7B:4D:1C:DA:67:81:9B:17:F0:A1:4E:D1:D5:B3:A7:36:D9:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e/8267bd09-4781-3fb5-8a71-7b1f8e7ec73b.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     398537
IP address blocks:        204.108.164.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e/19e347cf-c0cb-49a3-b025-5d36006aab3e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e/19e347cf-c0cb-49a3-b025-5d36006aab3e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:40:41:9e:86:b4:44:7a:37:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19e347cf-c0cb-49a3-b025-5d36006aab3e
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=6e8412b7-0cd3-48cd-bbbf-1c5adaae3279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ea:1e:b5:03:89:ab:c1:b0:33:96:55:91:3c:
                    f5:06:46:51:28:92:11:fb:52:63:29:ad:61:24:76:
                    c3:0f:0a:f5:6f:cc:cf:fc:04:98:86:39:ba:94:85:
                    ce:b7:a1:4d:e7:69:28:c0:29:28:e1:8a:9f:c7:63:
                    79:83:f8:91:bb:3d:37:7f:9e:08:3f:97:d6:8a:a8:
                    5d:f4:ec:56:8b:e0:a7:4f:f4:85:d1:22:d6:2d:37:
                    d2:74:6b:e9:ef:7f:1d:87:ca:5a:86:f5:5a:3f:b7:
                    26:83:f3:ea:a9:8c:dc:e7:45:c1:6b:32:bd:0f:81:
                    b8:2f:87:f8:91:cd:e2:bc:f4:94:61:cd:d6:70:d1:
                    53:da:3e:1c:0c:52:3b:e0:1f:79:d1:fb:ac:10:bb:
                    6a:dd:a1:ef:03:65:35:ed:a0:1c:6f:7e:d1:41:29:
                    8a:ff:a4:73:c7:6d:dd:f8:51:94:ef:95:5b:89:00:
                    ae:a7:5a:d5:c2:eb:7f:68:70:ff:91:4c:0b:8e:5a:
                    85:77:4c:ef:f3:55:41:c2:92:84:c7:4d:9e:77:3a:
                    21:f9:4f:10:e4:ca:e9:15:5b:24:8b:f6:35:5f:ca:
                    81:a6:ee:92:49:b2:12:df:fd:dc:07:4f:4c:d5:61:
                    5b:46:f8:cf:ec:ed:38:2d:33:0b:d6:96:a0:29:d8:
                    9e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:BB:D2:EF:3A:89:16:C6:C3:5E:58:83:9A:3B:21:3C:4E:6C:87:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e/8267bd09-4781-3fb5-8a71-7b1f8e7ec73b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e/19e347cf-c0cb-49a3-b025-5d36006aab3e.crl

            X509v3 Authority Key Identifier:
                keyid:A3:61:7B:4D:1C:DA:67:81:9B:17:F0:A1:4E:D1:D5:B3:A7:36:D9:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.108.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:2a:0b:95:b7:64:7a:fb:ba:fa:ed:47:fe:2a:43:e1:c7:e6:
         69:c3:29:36:61:6c:3b:04:19:61:57:15:bf:a0:63:a6:8e:ba:
         0b:a6:23:52:60:3b:ee:4d:77:f1:e7:c7:7f:85:f8:24:48:d7:
         44:0d:15:d6:a2:a4:cd:e6:a4:5d:38:15:91:ce:b1:f7:e4:c3:
         6e:a2:4f:8d:33:d4:2a:18:77:80:06:35:e9:a0:40:27:4a:b6:
         98:98:dc:92:09:99:6f:73:7d:0f:0b:d4:62:f9:94:38:44:3d:
         51:cd:e4:4f:29:12:7d:af:67:24:c0:84:72:2f:51:80:94:f4:
         8d:17:31:6d:7a:85:7a:4e:b7:1e:fd:38:03:75:21:00:4f:fa:
         dc:8a:b0:30:63:e4:0f:91:13:81:fc:da:a1:aa:cb:35:06:d3:
         93:fa:af:2a:f3:65:85:90:c9:6d:b3:97:df:4e:a3:4c:7c:d9:
         89:76:e2:e8:52:cc:49:ff:8f:d5:e1:c8:47:cd:10:8d:63:b6:
         ff:12:3c:4a:7c:e3:e2:a4:a4:9f:62:1d:95:45:ed:2c:d6:aa:
         29:46:95:c7:38:01:47:65:aa:58:a9:03:ee:fc:aa:21:c8:a1:
         c9:cf:d3:22:b5:89:eb:6c:09:4b:45:55:47:b9:cc:1c:37:59:
         3a:83:29:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:10:07 2026 by rpki-client