Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/e9f28a09-fb35-3ad3-9f48-e7bc0f06ea8e.roa
File:                     e9f28a09-fb35-3ad3-9f48-e7bc0f06ea8e.roa (raw, json)
Hash identifier:          dQdhgy9CGK7LNnLmkXRY3QH7UpM+tS2+tW6QoEfCI/w=
Subject key identifier:   73:F5:66:3C:6C:98:EC:5E:BC:17:25:64:A5:9E:C8:3B:B2:C8:7F:8C
Certificate issuer:       /CN=213e5365-5be3-42f4-a3d1-7f74bb44df13
Certificate serial:       010D0C9F4328584CD40765902BA430038A13F480
Authority key identifier: 7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/e9f28a09-fb35-3ad3-9f48-e7bc0f06ea8e.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        208.70.136.0/23 maxlen: 23
                          208.70.138.0/24 maxlen: 24
                          208.70.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:65:90:2b:a4:30:03:8a:13:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213e5365-5be3-42f4-a3d1-7f74bb44df13
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=5116fe46-a1f6-47de-b74b-00b766a514c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:46:1a:e4:3c:68:40:51:2a:e9:14:e7:6d:2a:
                    d7:d0:40:a6:47:90:95:ed:c5:d3:00:61:bc:01:4b:
                    73:3a:73:1c:eb:8f:37:01:7b:85:04:f4:61:bc:28:
                    9b:52:f0:4e:0f:de:9a:e6:17:13:f8:90:0c:85:da:
                    d5:03:72:94:c7:02:77:a8:5d:aa:3d:19:24:a7:18:
                    e9:4c:55:6f:a1:ee:2f:5b:c7:d0:7b:f2:3a:b6:0f:
                    c2:42:fb:bf:9e:03:71:d9:b2:12:35:21:de:aa:00:
                    14:ae:9a:0b:8a:55:03:51:e1:fb:1e:0e:ff:77:7f:
                    38:47:1d:81:bf:1a:5a:14:f1:a7:63:9c:e3:ef:51:
                    29:38:44:d4:75:6f:48:46:b3:2b:f8:1f:ab:9f:ca:
                    94:95:a9:5b:08:0a:3a:39:11:25:45:b8:c1:76:a7:
                    54:01:5b:5f:0f:d9:27:50:39:f5:b5:ae:df:84:07:
                    e6:33:1f:8c:ba:fc:5f:b9:7f:52:06:0c:53:21:3e:
                    f9:70:4f:73:85:98:3a:eb:09:e0:c6:f6:e1:6e:a6:
                    eb:5b:09:6e:ff:2f:cc:43:11:33:4a:94:48:90:34:
                    04:6f:a4:30:a7:a4:ee:cf:b0:9b:84:ec:07:bf:f0:
                    ba:68:85:2e:cf:81:c3:ca:2c:38:1e:5e:0d:aa:7f:
                    d3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F5:66:3C:6C:98:EC:5E:BC:17:25:64:A5:9E:C8:3B:B2:C8:7F:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/e9f28a09-fb35-3ad3-9f48-e7bc0f06ea8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.crl

            X509v3 Authority Key Identifier:
                keyid:7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:1e:74:88:7a:14:b8:3f:f6:d8:76:8c:2c:2c:85:0a:ce:b3:
         20:a7:06:d2:bf:ac:42:1e:c7:a7:73:82:88:8a:be:ab:e4:d8:
         24:9b:c4:3d:c8:29:75:94:99:12:ad:c6:de:cf:fb:81:fc:08:
         e6:f3:ee:c4:68:fc:fc:cd:87:0e:26:67:a2:c5:fb:f5:48:00:
         59:92:77:1c:81:3f:ef:78:52:2b:51:fe:9d:25:c5:5e:2d:2f:
         7c:1c:d5:78:b1:cc:43:17:4d:09:55:79:e1:df:13:22:ad:e0:
         30:f2:78:be:7d:23:20:e1:a7:66:9d:90:57:6e:33:ec:ff:aa:
         82:ff:b3:7b:99:4b:f3:92:f5:07:09:0e:76:e6:67:ee:0e:2d:
         dd:a1:54:9c:5c:f8:df:ac:a8:a7:2d:5b:d4:a8:99:01:8f:b4:
         35:08:92:9c:53:4f:3a:a8:cc:85:11:b7:26:b7:5e:96:98:d4:
         77:6b:25:c7:1a:5f:6a:e7:08:39:ad:5e:f5:63:92:f3:ce:b6:
         1d:01:c2:6d:8a:f0:ea:87:0b:7b:47:c4:bd:dc:f6:54:87:8f:
         a5:0e:0f:d9:fc:99:8c:8c:73:53:7e:b6:ad:9b:6f:9f:a7:1c:
         d8:9a:ef:98:4e:5b:1f:cd:79:ca:ba:04:31:6b:d3:c9:7e:9e:
         2a:ae:fb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:12 2026 by rpki-client