Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/ed9e54a9-ec75-3c1c-95bb-1b6c92e016eb.roa
File:                     ed9e54a9-ec75-3c1c-95bb-1b6c92e016eb.roa (raw, json)
Hash identifier:          m2zmMiWUO8V8o4V+ynnAzt2Hr54Gzip78GdcXxC6ztc=
Subject key identifier:   FC:24:07:11:86:D3:4F:5B:4B:FA:8C:66:0D:8D:8B:01:B4:60:B3:33
Certificate issuer:       /CN=2313a5ec-edb5-49a3-b3b3-980d80d8e766
Certificate serial:       010D0C9F4328584D5243561FE00DA55F3B4FF000
Authority key identifier: 8F:1A:F3:78:62:23:1B:3A:E9:0F:C9:03:06:14:51:39:B0:98:33:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/ed9e54a9-ec75-3c1c-95bb-1b6c92e016eb.roa
Signing time:             Sat 28 Mar 2026 19:13:19 +0000
ROA not before:           Sat 28 Mar 2026 19:13:19 +0000
ROA not after:            Fri 26 Jun 2026 19:13:19 +0000
asID:                     399628
IP address blocks:        209.188.108.0/24 maxlen: 24
                          2620:96:a001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/2313a5ec-edb5-49a3-b3b3-980d80d8e766.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/2313a5ec-edb5-49a3-b3b3-980d80d8e766.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:52:43:56:1f:e0:0d:a5:5f:3b:4f:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2313a5ec-edb5-49a3-b3b3-980d80d8e766
        Validity
            Not Before: Mar 28 19:13:19 2026 GMT
            Not After : Jun 26 19:13:19 2026 GMT
        Subject: CN=d135a0c7-2b46-4a97-9e32-72d4838fb70f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:cc:10:ae:a6:9a:d4:9c:bc:01:96:67:b6:96:
                    ec:42:04:1c:a2:80:53:26:ec:1d:ce:b8:ec:fa:e1:
                    5c:31:13:d5:70:03:10:31:ca:af:57:a4:25:dd:41:
                    a2:fa:67:7b:18:02:8e:5d:93:45:c0:57:a1:30:46:
                    6b:1c:ab:46:fe:a6:5f:ec:81:d6:35:f6:bc:b5:d0:
                    2a:5a:59:f6:47:39:9a:a5:68:d2:15:01:7d:bd:d4:
                    49:1c:32:f4:52:a0:8c:61:b0:07:c7:ed:6b:77:27:
                    7a:bc:30:35:ec:a2:bb:9b:86:60:3a:7c:52:72:3e:
                    b9:20:cc:2b:2f:f0:55:b4:91:a4:65:4a:16:65:46:
                    44:fd:c8:d9:bd:3f:3f:e0:e4:57:64:80:cf:d1:05:
                    04:1d:05:fe:a2:00:24:e7:7c:37:6e:e2:49:45:cf:
                    a8:02:1e:75:41:38:25:c1:5f:63:c7:a6:d9:69:89:
                    3e:63:75:d9:66:44:c6:52:92:5e:8f:dc:56:c7:52:
                    8d:b3:c8:cd:f6:99:2f:d7:42:85:24:bd:80:5f:af:
                    28:44:74:4c:61:62:81:b8:70:0d:ea:b9:c5:86:9e:
                    81:c6:7b:d9:43:44:44:01:cb:f4:93:2b:55:3a:10:
                    ff:a3:96:30:bf:ec:cd:2e:e0:60:69:b1:9d:28:09:
                    46:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:24:07:11:86:D3:4F:5B:4B:FA:8C:66:0D:8D:8B:01:B4:60:B3:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/ed9e54a9-ec75-3c1c-95bb-1b6c92e016eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766/2313a5ec-edb5-49a3-b3b3-980d80d8e766.crl

            X509v3 Authority Key Identifier:
                keyid:8F:1A:F3:78:62:23:1B:3A:E9:0F:C9:03:06:14:51:39:B0:98:33:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2313a5ec-edb5-49a3-b3b3-980d80d8e766.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.188.108.0/24
                IPv6:
                  2620:96:a001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:11:21:74:23:ef:eb:53:8a:30:c0:e8:07:6d:23:80:a8:3e:
         5e:b2:f6:b2:d6:5a:c1:15:fc:c0:67:22:aa:6c:26:ad:b8:a7:
         de:3a:f0:58:ca:99:d6:0b:1f:bd:37:cc:c9:23:a9:62:ab:85:
         20:4c:88:17:9b:a6:b1:9d:0f:7c:6e:2b:a6:c1:f9:5f:69:bf:
         b3:78:96:0f:0b:45:86:54:de:50:c8:b8:44:07:e5:0b:89:e2:
         95:16:ab:3f:71:c5:1f:34:ae:b2:ce:91:2a:93:bd:42:eb:44:
         15:ad:1a:60:b8:7f:67:a2:51:43:e9:88:81:e9:65:a6:50:12:
         99:9f:ca:ff:9c:bc:6f:cd:9e:23:2c:5f:5b:64:e2:0d:d0:44:
         9d:d3:4c:df:7f:cb:0a:50:96:0e:6a:74:60:59:98:4c:f0:4b:
         d3:d6:e2:37:f9:1c:f3:20:2e:af:56:8c:34:ca:0c:a7:9a:69:
         98:e4:3f:19:3b:20:c6:73:78:52:13:db:e6:d4:3b:92:67:6e:
         c4:d1:18:2c:7b:d8:1f:8d:bb:ee:74:26:20:05:bd:e3:8a:dc:
         f9:77:c6:ae:f5:04:32:aa:8d:c3:a2:bc:4d:f1:54:52:7e:89:
         de:1a:92:dc:11:74:02:3e:e2:a4:dc:32:8c:19:af:75:ae:27:
         5c:e4:ca:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:53:24 2026 by rpki-client