Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f23455df-fcf6-3cab-913f-35d5ff4b4b3b.roa
File:                     f23455df-fcf6-3cab-913f-35d5ff4b4b3b.roa (raw, json)
Hash identifier:          vfv0r/hORlNYTPQt2PIlBQzymww8NfEZRNF/sGaO13k=
Subject key identifier:   55:74:9A:F1:37:D5:F5:D7:6F:1A:3E:D0:CB:B4:B7:EF:5A:C8:AB:3F
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584E059C4DD904769D9C456B6A80
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f23455df-fcf6-3cab-913f-35d5ff4b4b3b.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     36040
IP address blocks:        208.117.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:4d:d9:04:76:9d:9c:45:6b:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=ef854f90-fc39-418c-bd49-d7ec54e60024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e1:90:e7:53:9d:bf:78:d1:89:a4:1e:96:07:
                    1b:23:c6:7b:c6:24:c4:2a:92:87:64:2d:df:98:05:
                    c7:13:04:43:c9:a6:41:3c:ca:d4:d3:bd:f4:18:8b:
                    6d:0a:c9:00:c5:43:c5:45:31:e4:c0:3e:20:f2:1e:
                    a9:99:54:cf:25:1e:64:66:49:e8:73:12:d5:c7:18:
                    70:2d:ed:d1:4a:ce:46:3a:23:8e:66:c5:c6:72:5d:
                    8e:0b:29:d2:2b:87:60:12:66:01:e2:fb:3b:49:44:
                    41:b7:39:61:3d:25:ed:2b:10:dd:7f:e1:be:39:6d:
                    97:44:a8:13:2c:4e:96:49:75:c0:c6:df:af:b5:51:
                    bc:a9:96:2e:22:77:93:da:64:66:6f:4a:a3:e1:33:
                    95:40:f0:59:5d:e4:75:86:aa:89:6a:d3:1e:4f:23:
                    c1:2e:04:aa:b5:be:41:e1:bf:8e:e4:db:fa:84:ba:
                    d3:01:9c:fb:f7:49:73:1b:ff:5e:c4:32:6e:7a:b5:
                    7b:62:65:6d:e4:be:6e:ec:16:48:95:f5:76:9d:3d:
                    0c:5b:b0:94:09:33:cc:ae:e4:99:94:5d:18:86:89:
                    8a:3d:89:67:af:60:2b:a9:3b:4c:c3:3b:a5:b2:cd:
                    fd:a1:07:c9:2a:1a:d8:c4:52:96:28:3d:c7:ac:01:
                    f2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:74:9A:F1:37:D5:F5:D7:6F:1A:3E:D0:CB:B4:B7:EF:5A:C8:AB:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f23455df-fcf6-3cab-913f-35d5ff4b4b3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:35:4b:df:21:05:96:ae:b2:61:89:c8:5d:ea:8b:95:8f:54:
         c7:05:e2:14:93:9c:8c:b8:65:c6:68:78:b9:e8:24:32:ff:cd:
         de:d4:d0:1b:3f:00:18:e5:f2:d7:3c:be:c2:9b:b1:3f:7e:6f:
         b4:42:4a:35:0f:67:4d:23:39:41:4b:dc:39:e5:16:50:fb:48:
         4d:b4:ff:e8:5f:8d:60:f1:2c:de:d8:f1:9a:ae:0f:13:b2:e2:
         23:64:68:d3:0c:5f:fc:d1:7a:c9:2c:b2:9e:7f:ff:e4:62:f8:
         bb:01:68:86:55:63:dd:06:c7:fa:0a:06:19:ba:5c:ec:da:a0:
         ab:cf:1a:4e:39:6d:21:2b:00:d1:54:1f:1a:da:71:15:bb:84:
         2b:38:0c:65:4c:a9:a3:a8:b3:a9:ae:e5:70:da:2a:b2:7c:51:
         60:84:51:8c:75:82:24:be:71:5b:e1:1f:9b:f6:e6:37:50:4e:
         19:d2:71:94:e0:ce:2a:6d:85:26:6a:45:58:19:bd:a3:e5:b1:
         01:b1:bd:67:13:23:6c:bd:89:33:b2:d0:26:f6:a3:7d:58:21:
         b2:2c:90:ba:3c:4b:05:70:25:5f:fb:13:2a:46:ce:77:7e:51:
         66:51:ae:d8:ae:62:39:65:3c:7d:96:d9:85:0b:d6:d2:6a:52:
         cc:da:34:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:15:21 2026 by rpki-client