Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/3880b21f-244e-35e6-a256-bd5d4c123331.roa
File:                     3880b21f-244e-35e6-a256-bd5d4c123331.roa (raw, json)
Hash identifier:          Bn+VjyRaOW11rQQpg7i0DAyg1WmZM79FK1lEEsk9O64=
Subject key identifier:   FA:E3:40:DA:7B:74:1D:00:D2:53:E0:B1:01:64:CB:5A:66:AA:62:5D
Certificate issuer:       /CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035
Certificate serial:       010D0C9F4328584CBDB20390D464E3AC19A85CC0
Authority key identifier: 95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/3880b21f-244e-35e6-a256-bd5d4c123331.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     15204
IP address blocks:        204.15.52.0/22 maxlen: 22
                          204.15.52.0/23 maxlen: 23
                          204.15.54.0/24 maxlen: 24
                          204.15.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b2:03:90:d4:64:e3:ac:19:a8:5c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=b61a0a7a-f027-4bd7-8d99-216771bd1377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:66:7e:5c:5b:2d:dd:54:c5:b9:af:1e:60:76:
                    09:f4:8c:e2:b5:1d:81:4f:55:4b:24:d3:89:e3:8e:
                    d9:45:3e:ce:47:5c:ff:9e:55:b6:a4:8b:41:59:36:
                    4a:d8:1c:04:0e:7f:75:81:1b:da:bd:3f:07:64:1c:
                    bb:e8:2b:a3:bf:e1:57:78:61:de:08:58:96:a4:32:
                    b4:db:67:18:d4:fa:e7:ea:fe:ba:db:8d:fa:9c:31:
                    05:40:c4:0b:d0:78:16:32:de:9d:b8:51:4c:61:f9:
                    bc:0a:06:4c:19:62:c0:a6:72:8e:ea:f8:11:77:0a:
                    0b:f1:c8:bd:80:ea:5d:4e:a6:8f:8b:1d:b4:e7:22:
                    bb:c9:fd:16:de:eb:c5:9a:5c:fd:7a:64:8e:fb:d9:
                    7d:d3:aa:92:ba:21:a5:51:5f:96:0c:c9:d6:13:38:
                    a7:f5:2d:4b:a4:13:dd:b9:17:a9:1a:23:19:6c:e2:
                    b0:7d:bd:50:ce:98:67:ef:cf:2b:9f:22:66:4b:b8:
                    e6:18:56:9a:59:97:19:ad:2d:f6:81:ad:61:77:dc:
                    e9:20:9e:18:30:b4:6f:ec:ab:5d:68:02:7c:3d:68:
                    d3:4c:48:80:cf:ef:b6:98:89:25:fc:5a:fd:bd:c9:
                    73:ec:33:14:22:25:e0:74:5e:ab:a3:2b:10:bc:90:
                    5c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:E3:40:DA:7B:74:1D:00:D2:53:E0:B1:01:64:CB:5A:66:AA:62:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/3880b21f-244e-35e6-a256-bd5d4c123331.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl

            X509v3 Authority Key Identifier:
                keyid:95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.15.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:0b:e0:6f:a4:05:b3:4f:4e:08:d2:76:76:5e:ea:f7:8d:54:
         d1:10:25:65:ed:3c:20:48:ed:29:ec:8e:24:df:2d:f3:c1:6f:
         ff:ab:ce:a4:7b:8e:93:f7:e7:9e:53:cc:e7:0a:2c:a3:70:0a:
         c5:21:07:bc:0a:d8:2a:70:49:e3:4f:92:39:24:3e:19:b2:db:
         11:20:68:35:33:55:1f:04:55:1f:df:6e:86:40:3a:5a:a7:d0:
         7d:cd:07:d5:67:e3:99:74:42:eb:e1:21:e4:ae:4d:8b:de:aa:
         c3:f4:84:40:a9:dc:60:4c:41:a2:c1:57:10:29:9d:d6:9e:41:
         a6:e6:58:3d:a0:e0:69:08:2f:88:7b:68:35:ce:61:8f:2c:6e:
         db:84:7d:ca:e7:ab:c3:a9:6d:bf:e2:d6:44:fd:62:4c:da:87:
         05:39:4b:99:a7:e7:4e:82:68:14:5e:5b:bc:b5:a4:db:3c:35:
         41:54:50:cc:78:1e:e5:99:16:4b:4f:e7:28:9b:c3:8c:06:fc:
         b1:58:d5:74:ed:5f:9d:77:9d:95:52:e4:83:21:c8:70:73:66:
         b8:78:6d:91:a1:bd:1f:6a:fa:7d:c3:a8:f5:6e:b8:6e:bb:12:
         ea:b6:ff:1c:9a:23:54:6e:c4:7c:c0:a7:fd:ca:b8:a4:e3:61:
         a7:80:85:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:31:55 2026 by rpki-client