Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/c4417fa3-1777-3fcb-ba27-eb31b1348c11.roa
File:                     c4417fa3-1777-3fcb-ba27-eb31b1348c11.roa (raw, json)
Hash identifier:          rTdUpIwFvejERLWOv36+QfDyPNtAl8oZ8P0CZ7ElFwI=
Subject key identifier:   28:35:12:2B:3C:5E:F1:38:49:21:13:92:6B:81:9B:01:D5:EB:CC:0B
Certificate issuer:       /CN=7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b
Certificate serial:       010D0C9F4328584E09CB35EA109D2F3C95E95A80
Authority key identifier: 27:6C:6C:7D:E1:1C:71:B2:F3:03:07:F4:B6:06:12:B1:62:59:7A:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/c4417fa3-1777-3fcb-ba27-eb31b1348c11.roa
Signing time:             Tue 02 Jun 2026 13:00:10 +0000
ROA not before:           Tue 02 Jun 2026 13:00:10 +0000
ROA not after:            Mon 31 Aug 2026 13:00:10 +0000
asID:                     399589
IP address blocks:        209.104.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:09:cb:35:ea:10:9d:2f:3c:95:e9:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b
        Validity
            Not Before: Jun  2 13:00:10 2026 GMT
            Not After : Aug 31 13:00:10 2026 GMT
        Subject: CN=2d21defa-3492-4d31-bed0-594dd0f1dfe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:78:ab:32:38:1a:4d:44:75:f9:32:e3:1d:59:
                    c0:5e:00:27:a5:4c:e1:a0:5f:a8:2f:5a:81:79:7a:
                    26:af:5d:8e:04:d3:dc:f3:0f:b6:0a:6d:7a:39:05:
                    b4:20:df:26:4c:91:10:25:a9:ed:9b:44:3d:81:30:
                    13:cd:83:46:72:19:38:2e:d7:b3:b8:26:59:cd:17:
                    c1:3b:38:4b:1a:a1:f9:2c:e8:5d:88:80:f0:cc:e7:
                    b2:70:bb:6f:1e:76:11:f4:b7:5f:40:90:d1:94:29:
                    0b:cb:48:b8:bc:34:2e:2a:be:1d:64:89:66:3e:8e:
                    8d:df:80:bd:a2:fe:45:29:14:ea:9f:7a:3c:0f:39:
                    f5:6f:27:52:49:59:7b:d2:1a:94:d6:05:44:4a:7c:
                    e7:71:72:6c:96:97:6f:86:7c:11:70:0e:21:bf:35:
                    15:e7:e3:f4:82:42:bf:47:8a:92:47:5e:db:17:06:
                    25:94:ea:0b:55:33:63:99:a9:92:81:0f:b2:dd:2a:
                    e1:a5:4f:ab:8a:43:95:fc:e5:e5:73:a2:9d:a8:3e:
                    30:47:60:bf:dd:13:88:2f:6d:6d:01:03:de:4f:a9:
                    5e:c7:cc:c9:1b:02:01:d0:5e:07:ec:c9:35:ac:d5:
                    2f:ac:fd:c1:a3:d7:0d:c3:fa:0a:b6:25:28:1c:35:
                    68:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:35:12:2B:3C:5E:F1:38:49:21:13:92:6B:81:9B:01:D5:EB:CC:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/c4417fa3-1777-3fcb-ba27-eb31b1348c11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.crl

            X509v3 Authority Key Identifier:
                keyid:27:6C:6C:7D:E1:1C:71:B2:F3:03:07:F4:B6:06:12:B1:62:59:7A:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.104.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:8c:5d:d9:5c:9e:66:5e:7e:34:0b:9f:df:77:1d:5d:aa:1e:
         06:13:cd:37:83:00:99:a1:e7:b6:79:3b:4f:63:59:d6:20:d5:
         c1:e9:b4:3d:60:9d:a2:2e:2e:7a:58:1c:07:42:22:9b:69:49:
         9e:46:27:e2:17:eb:28:4f:6f:7c:af:48:e7:b0:b5:dd:29:1a:
         58:de:1b:fa:2f:81:e9:c1:36:73:54:1f:be:fa:6c:c5:50:be:
         c9:ca:11:24:66:a3:a0:d4:b8:cb:09:f4:c7:7d:35:a2:6e:9e:
         99:22:ac:0d:85:a3:e1:ed:58:15:ca:2a:40:bf:ce:74:4a:10:
         fc:79:ff:e0:a0:24:a6:62:57:88:16:af:6b:48:16:a5:fe:29:
         36:b4:b0:7b:04:58:5e:d3:ce:95:71:15:92:2d:ec:4b:b6:79:
         e4:35:86:c1:6e:ad:8f:2a:e5:88:79:6f:e1:ea:27:5d:f0:40:
         21:07:0d:77:bd:e9:11:c9:d2:7e:75:10:84:0c:59:72:27:77:
         5f:bf:f8:25:68:39:2c:51:6e:d0:1a:cd:a8:d5:73:27:27:eb:
         bb:69:4b:9f:bb:b2:16:24:96:22:c8:e5:a4:c2:24:2b:51:af:
         b3:e2:fc:e7:b8:57:6a:ab:24:6f:e0:6c:15:8d:a0:aa:a1:75:
         7f:b7:73:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:29:20 2026 by rpki-client