Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/cb2bcb45-e3e6-3afe-834a-0ad73dd38ee6.roa
File:                     cb2bcb45-e3e6-3afe-834a-0ad73dd38ee6.roa (raw, json)
Hash identifier:          140K75hQ8/EqkG1hQNDo8MvLP5KqUwxWw5R3BupEqi0=
Subject key identifier:   17:27:24:8B:C7:31:D3:5C:98:F1:33:38:64:6D:9C:A1:B5:DA:F0:EA
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584E059BBBFEBB1323221469E180
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/cb2bcb45-e3e6-3afe-834a-0ad73dd38ee6.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     36040
IP address blocks:        208.117.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:bb:fe:bb:13:23:22:14:69:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=99326040-3a29-44a9-81c4-3cf91c1db0dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:45:de:0d:db:45:78:66:10:4b:61:56:82:61:
                    dd:68:8d:af:19:45:52:b0:5c:6e:89:97:d2:61:9d:
                    c5:42:ab:cd:01:0d:8b:93:64:27:d4:b1:29:0c:95:
                    c1:94:cd:4e:37:d7:a8:ee:08:a0:36:36:be:f7:12:
                    32:4c:46:ec:6a:f8:57:eb:31:10:45:dc:db:06:f8:
                    e2:14:fd:b9:dc:45:c5:7d:a9:05:e3:a7:ee:40:58:
                    65:2e:76:65:16:4e:0b:a3:43:27:df:55:c5:a9:5b:
                    28:67:f2:07:97:c2:5b:01:34:df:98:ae:8b:5b:2a:
                    0e:93:4a:59:f2:b9:00:e2:79:dc:8e:c5:61:10:cd:
                    05:63:05:cd:47:4c:0c:b8:c9:d5:2e:3d:43:3d:31:
                    6a:7c:0b:c1:b9:d8:75:fa:2f:e1:ed:ae:55:c0:19:
                    00:e0:26:45:d0:86:c5:4d:25:89:ea:b3:d3:48:28:
                    d6:45:a7:53:4c:6a:f4:98:32:12:84:a8:14:c8:76:
                    24:1c:43:d2:f9:be:20:3f:c5:6e:3c:ec:e6:6b:95:
                    15:4a:07:4f:4e:02:a3:61:43:7d:1e:ba:36:b9:21:
                    a9:44:5f:ed:e2:3c:c2:7b:ed:8d:49:4f:aa:dc:67:
                    a3:ce:cb:33:6c:69:80:7c:21:04:c6:69:85:5b:15:
                    ea:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:27:24:8B:C7:31:D3:5C:98:F1:33:38:64:6D:9C:A1:B5:DA:F0:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/cb2bcb45-e3e6-3afe-834a-0ad73dd38ee6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:33:f0:5a:a6:12:64:c8:fb:e9:fb:b6:c9:37:9a:28:68:29:
         dd:c9:97:69:6f:c7:d7:ad:0f:22:ed:bd:a4:2a:83:1b:fd:ec:
         c9:3b:9e:48:b0:e5:78:c5:ad:d4:6d:a4:1d:d2:63:2e:89:c2:
         b1:70:9f:2a:8c:90:cc:b6:b4:5d:7b:10:48:4c:c1:25:33:36:
         cf:c2:d1:ed:39:24:92:cc:05:35:b1:d5:fb:ab:0d:d3:3f:cb:
         4f:b2:01:e4:2d:22:22:3f:c0:d9:55:bd:a6:08:a6:c6:6c:74:
         18:8d:56:ac:92:cf:57:37:e2:1b:33:05:33:13:bd:3a:a0:87:
         63:87:61:d9:b5:73:32:24:f7:66:22:f0:3e:e0:08:8d:c7:8e:
         e6:bf:f5:4d:bf:e1:7a:98:5a:88:b1:0e:91:2a:80:65:32:9d:
         6d:dc:77:e0:7b:a5:7a:e8:32:0f:36:be:88:3a:3c:c2:f4:17:
         35:41:a7:56:94:a2:42:03:e3:52:96:7d:67:bc:6e:5d:f0:a4:
         30:c7:a9:d3:29:40:22:7f:9d:97:73:d8:2d:fd:0e:32:05:c2:
         08:6b:f3:5e:f6:d2:2c:9d:fb:42:5d:e0:27:55:3a:cc:84:34:
         10:9e:a8:5f:47:11:e7:72:e5:d1:15:c2:6e:4e:f2:e4:eb:d0:
         42:0c:ab:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:24:24 2026 by rpki-client