Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/e4f26068-3198-3b9e-8e4b-e238b8a8bb29.roa
File:                     e4f26068-3198-3b9e-8e4b-e238b8a8bb29.roa (raw, json)
Hash identifier:          bzeN5KGapecjAGcdzyDtOlUDWk3IU2onR9u5fxzeQOQ=
Subject key identifier:   89:F9:82:0B:AB:6E:C3:5F:61:14:7F:9E:D2:F9:56:EF:DA:37:80:52
Certificate issuer:       /CN=7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b
Certificate serial:       010D0C9F4328584E09CB3EA8EFE418699058CF80
Authority key identifier: 27:6C:6C:7D:E1:1C:71:B2:F3:03:07:F4:B6:06:12:B1:62:59:7A:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/e4f26068-3198-3b9e-8e4b-e238b8a8bb29.roa
Signing time:             Tue 02 Jun 2026 13:00:10 +0000
ROA not before:           Tue 02 Jun 2026 13:00:10 +0000
ROA not after:            Mon 31 Aug 2026 13:00:10 +0000
asID:                     395743
IP address blocks:        209.104.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:09:cb:3e:a8:ef:e4:18:69:90:58:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b
        Validity
            Not Before: Jun  2 13:00:10 2026 GMT
            Not After : Aug 31 13:00:10 2026 GMT
        Subject: CN=3eb2af2a-e6c5-41c7-abd8-f2d0f031b74f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:43:1f:64:89:ee:f2:44:f2:60:18:8c:fb:0b:
                    fd:3b:db:1f:1a:3c:d2:57:c8:37:3c:17:56:56:75:
                    2b:a8:21:95:ae:ed:42:56:6e:46:5e:06:54:19:2c:
                    d0:60:20:31:9f:b9:94:ee:54:c1:c4:f9:3c:62:63:
                    e1:c2:d2:36:e6:c2:df:e3:ca:4f:ec:a0:cd:e9:68:
                    6b:1a:f9:af:1f:e4:df:e9:fc:69:dd:5a:79:33:b7:
                    9a:1b:07:13:c4:77:4b:86:8d:c6:5c:98:29:1a:5f:
                    0a:c0:23:55:9d:bb:ae:5e:e0:fa:a4:79:3d:45:f8:
                    55:58:c1:31:21:7f:42:f1:63:59:ab:94:a2:40:5c:
                    c1:94:ea:32:42:64:42:9f:79:1e:02:c3:8c:b5:78:
                    a7:e2:28:e2:89:44:0d:5b:83:17:e4:d8:a3:72:90:
                    7d:00:3f:06:f2:55:85:ca:13:1d:ef:e2:bf:de:ea:
                    0d:4c:0e:58:81:0a:97:d9:8e:1e:e4:e4:f3:e1:1e:
                    48:b0:fd:55:ed:08:d3:db:78:c6:ef:ac:2e:1b:43:
                    7f:02:b1:7b:13:04:15:d3:38:f2:96:c9:31:fe:88:
                    7b:f1:9b:8b:11:c4:01:f4:6e:2b:15:1d:9e:a3:a9:
                    65:cb:50:d0:1d:09:51:a8:de:48:a3:0c:2e:a3:94:
                    55:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F9:82:0B:AB:6E:C3:5F:61:14:7F:9E:D2:F9:56:EF:DA:37:80:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/e4f26068-3198-3b9e-8e4b-e238b8a8bb29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.crl

            X509v3 Authority Key Identifier:
                keyid:27:6C:6C:7D:E1:1C:71:B2:F3:03:07:F4:B6:06:12:B1:62:59:7A:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7c3f5726-4dbe-48ec-8ed7-fb4f3ec4a00b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.104.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:18:1f:2a:a8:70:48:0e:1b:56:2f:bf:18:c8:a2:30:a1:68:
         69:a6:45:43:c3:66:f1:39:35:75:01:58:73:42:49:ad:0c:d4:
         ff:7a:4d:77:6a:bd:56:8f:a5:3b:6b:a3:16:f5:0b:db:3e:61:
         a0:9c:dc:5d:9c:e6:4a:7a:61:44:e6:3a:5b:6f:a9:4a:40:39:
         79:3e:d1:95:53:75:8c:bd:3b:73:5b:73:03:5f:24:4f:ac:73:
         fe:84:ca:da:32:68:fc:33:b3:1d:f2:4b:03:db:0c:7b:87:b0:
         4f:25:5f:3f:a4:a8:37:2e:d8:48:e6:c4:ee:70:ce:d7:d8:f7:
         e6:de:fe:d3:81:a3:67:89:e4:49:7f:2c:70:c5:60:ad:87:30:
         09:82:95:38:f4:c9:fd:0f:4e:ef:35:c7:fc:5d:b8:4d:ec:fa:
         60:aa:8d:3f:57:53:5f:e9:36:a5:1c:ac:db:0c:3d:c0:fa:57:
         3d:3b:47:ae:11:fd:70:ee:cf:9b:90:82:16:6c:72:21:c1:36:
         d7:10:b2:f3:c0:c0:0c:00:00:1b:83:0d:96:20:14:41:74:5f:
         cc:00:91:5f:2a:0d:22:ba:25:39:c1:10:c0:c0:81:8b:31:38:
         5b:8b:c5:65:e4:28:58:94:a2:13:84:37:13:2a:ae:50:6c:9d:
         0c:0b:68:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:09:18 2026 by rpki-client