Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59/95a5c3a4-3e8a-3c0b-8478-0d8fcf7fa569.roa
File:                     95a5c3a4-3e8a-3c0b-8478-0d8fcf7fa569.roa (raw, json)
Hash identifier:          Qy0loLPSp14gqFZbXQFgPuLHZ2BEHEUTfaQNnMIsIh8=
Subject key identifier:   BB:D3:E7:4A:77:21:F5:F3:1C:59:F0:6A:B2:F9:64:C5:E2:1E:BC:12
Certificate issuer:       /CN=1f08ae50-7566-4f52-9c36-3a3f84a37c59
Certificate serial:       010D0C9F4328584DD35B1148E3730F2A713B1E00
Authority key identifier: D8:5F:AA:21:72:91:7E:BC:4B:BB:29:C8:07:A7:8C:DD:1A:2B:AD:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59/95a5c3a4-3e8a-3c0b-8478-0d8fcf7fa569.roa
Signing time:             Thu 14 May 2026 01:00:25 +0000
ROA not before:           Thu 14 May 2026 01:00:25 +0000
ROA not after:            Wed 12 Aug 2026 01:00:25 +0000
asID:                     174
IP address blocks:        208.82.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59/1f08ae50-7566-4f52-9c36-3a3f84a37c59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59/1f08ae50-7566-4f52-9c36-3a3f84a37c59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d3:5b:11:48:e3:73:0f:2a:71:3b:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f08ae50-7566-4f52-9c36-3a3f84a37c59
        Validity
            Not Before: May 14 01:00:25 2026 GMT
            Not After : Aug 12 01:00:25 2026 GMT
        Subject: CN=0d4828c2-5a9a-4a11-bf5c-8a669083e064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:01:e9:d2:d3:2f:a2:bb:3f:ee:9d:7c:3c:19:
                    2c:42:a8:a7:c6:ca:83:66:e6:e7:09:03:6d:60:49:
                    38:22:cc:9e:47:d6:b7:29:08:a0:e4:d5:1c:90:27:
                    01:de:f8:69:84:5d:cb:77:7e:d4:c9:54:97:1a:d8:
                    c7:45:56:00:53:24:92:50:23:37:d2:bb:91:88:38:
                    f5:b2:1c:69:f1:49:d7:49:e2:fe:2c:8c:95:31:76:
                    1c:65:6d:90:ee:1d:4d:be:ab:e1:98:ef:1d:70:59:
                    59:3c:d9:c0:3c:8f:29:15:66:d0:f7:ce:10:b4:90:
                    7d:ae:0d:34:96:8c:1b:81:d6:71:d9:94:cc:4e:e1:
                    51:1c:b2:4b:7e:c6:a2:dd:2e:28:9e:49:42:51:77:
                    54:a8:6b:69:7b:d4:ad:ea:e1:25:d9:74:7d:04:25:
                    04:4d:37:d3:21:fd:82:49:d7:4c:26:82:90:3a:a7:
                    b9:5d:82:16:6c:ca:04:79:79:3b:bc:93:73:62:d6:
                    d1:21:be:7b:04:68:25:00:62:32:42:d3:2b:43:c7:
                    24:7b:6a:0e:56:5d:3a:84:5a:a8:30:e6:9c:6d:8c:
                    99:50:36:e3:ba:27:61:c8:a1:c9:32:88:e2:15:72:
                    48:da:ed:44:46:9b:09:80:15:eb:0f:b1:88:05:30:
                    86:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D3:E7:4A:77:21:F5:F3:1C:59:F0:6A:B2:F9:64:C5:E2:1E:BC:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59/95a5c3a4-3e8a-3c0b-8478-0d8fcf7fa569.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59/1f08ae50-7566-4f52-9c36-3a3f84a37c59.crl

            X509v3 Authority Key Identifier:
                keyid:D8:5F:AA:21:72:91:7E:BC:4B:BB:29:C8:07:A7:8C:DD:1A:2B:AD:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.82.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:d7:35:ff:09:a7:59:3e:63:16:a6:e0:71:3c:cd:da:8b:af:
         1f:4f:46:0e:5b:c7:82:0c:79:91:97:f7:ce:4c:d1:6e:d5:25:
         9c:eb:5f:db:25:64:f2:ac:13:7f:2d:5d:35:7a:9b:5c:28:11:
         2b:ee:71:d1:e7:75:25:09:e6:51:23:cf:04:e8:50:94:f8:26:
         86:3b:2a:d9:73:b1:14:e2:55:82:9a:94:74:d6:c7:b2:77:56:
         a8:c1:c7:ee:b9:02:e3:e7:c5:2c:fe:45:45:ab:6d:7c:80:79:
         a3:70:86:78:52:95:8d:22:af:6c:42:be:6a:8f:62:d1:7f:ee:
         65:39:f7:a0:da:25:a6:5b:d3:ad:61:90:56:9c:e5:1d:76:47:
         51:b5:a9:6e:e5:7b:78:18:c5:43:9d:99:18:3a:e1:3b:a6:5d:
         0a:98:e6:b4:a6:5d:b4:e0:9f:c5:28:8f:c4:1d:73:e7:a4:ff:
         2b:10:d5:bc:f7:1e:ec:0c:d3:b2:04:c0:f0:b9:4f:78:ec:5f:
         9d:24:40:fc:29:ab:02:ac:ed:00:6f:76:b0:7e:67:94:57:62:
         93:ab:c4:7f:3b:fc:09:97:c6:82:fe:9d:9c:2f:98:98:a5:3d:
         8e:4e:6f:2f:de:59:52:a6:7b:29:ef:08:a9:70:ef:12:c6:6b:
         a5:c1:af:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:02:53 2026 by rpki-client