Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/3eb230ea-3ac0-3796-85b7-92aa4b94ce2f.roa
File:                     3eb230ea-3ac0-3796-85b7-92aa4b94ce2f.roa (raw, json)
Hash identifier:          Uw4E1QlWHDUCBlGwZCsjvpbwwt9vcVPwKcyUIASyer4=
Subject key identifier:   07:4B:84:F5:4C:E5:3A:B8:25:33:08:68:24:48:32:85:04:CC:A0:31
Certificate issuer:       /CN=7a2be303-4525-4433-b220-b1c6b5052945
Certificate serial:       010D0C9F4328584DF0AB482FEF42B21144903100
Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/3eb230ea-3ac0-3796-85b7-92aa4b94ce2f.roa
Signing time:             Sun 24 May 2026 13:00:30 +0000
ROA not before:           Sun 24 May 2026 13:00:30 +0000
ROA not after:            Sat 22 Aug 2026 13:00:30 +0000
asID:                     52129
IP address blocks:        208.56.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f0:ab:48:2f:ef:42:b2:11:44:90:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945
        Validity
            Not Before: May 24 13:00:30 2026 GMT
            Not After : Aug 22 13:00:30 2026 GMT
        Subject: CN=d0a2d370-891b-439c-a7d4-abd9649563af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:01:82:95:83:90:c7:f8:1e:df:89:00:aa:51:
                    28:ab:2a:74:e9:35:a9:af:ec:63:cb:e4:4c:8b:9f:
                    3e:c2:ed:8f:3d:85:c3:0e:f3:ff:46:51:88:71:4f:
                    70:77:2e:42:21:4e:18:46:ba:0a:53:4e:6a:a1:3b:
                    06:22:10:41:90:40:0e:ca:56:15:39:38:03:20:87:
                    14:dc:e3:50:06:96:aa:1a:31:c1:bf:b5:27:48:ac:
                    6b:9b:51:0e:0c:72:f1:ad:2f:37:e9:a0:db:9c:f9:
                    ab:99:b7:28:65:13:76:96:06:07:71:d2:04:f2:bc:
                    ee:9f:a4:b8:59:a1:b9:98:7b:c3:fb:b9:77:dc:55:
                    db:b4:23:89:8e:ae:34:6c:ce:9e:f1:c4:a7:b4:2d:
                    16:c8:5b:f2:33:f5:0a:67:71:82:a8:e3:ae:b6:94:
                    36:f3:64:6c:4d:eb:bb:75:3f:ce:7a:f3:42:22:ea:
                    1a:48:a1:34:b5:77:5b:18:ee:c9:a6:89:6d:ab:c2:
                    06:93:1e:08:5f:c7:5c:ae:7f:74:ac:eb:47:e7:3b:
                    e6:0c:ac:cc:c1:63:6f:47:6c:25:bc:f4:5f:b9:5b:
                    bb:cd:8c:7c:48:58:87:f2:44:da:94:ca:51:56:dd:
                    da:85:e4:d8:fd:88:63:de:1e:a5:e5:78:1f:29:4d:
                    e6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:4B:84:F5:4C:E5:3A:B8:25:33:08:68:24:48:32:85:04:CC:A0:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/3eb230ea-3ac0-3796-85b7-92aa4b94ce2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl

            X509v3 Authority Key Identifier:
                keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.56.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:f0:8a:2f:c5:1d:81:9c:84:e1:c0:b0:eb:50:4f:0c:d9:6b:
         4f:da:e7:e4:7b:5f:65:0e:34:20:af:f8:bd:bc:8f:9d:73:89:
         d5:55:5f:8f:86:4b:62:cf:22:33:09:42:cc:3a:c0:09:b2:82:
         6a:a7:79:03:21:5d:75:53:1f:fb:aa:98:69:94:d8:04:94:2a:
         a0:01:7e:32:50:5b:de:58:6d:52:1a:e5:ad:06:57:10:46:de:
         8c:1f:f3:c2:19:e5:a0:82:c0:ce:b1:77:2a:1a:51:dc:69:b2:
         88:a9:54:85:86:29:7a:60:0d:a6:50:7c:57:17:0b:69:dd:3e:
         0a:58:5c:81:b5:62:7e:54:4c:90:bc:d4:d1:45:a9:ca:37:9a:
         ef:2a:50:74:3a:ee:18:34:a5:ef:c3:ce:d7:00:77:b6:49:ea:
         72:ab:6e:2e:7e:f7:76:23:31:77:84:72:fd:f5:21:18:be:23:
         d1:34:59:0e:df:ed:a9:a0:72:3b:74:5f:b6:75:c1:a7:52:75:
         96:14:1f:a8:dd:8e:c8:b4:5b:0b:fe:f6:1e:c8:44:7f:e2:99:
         f9:95:ab:d4:2e:02:30:25:0d:a8:8c:f2:42:bc:3f:72:2f:f0:
         73:68:36:93:ab:42:e3:15:71:86:cf:b5:3d:94:70:b9:bc:80:
         d0:57:ff:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:10:44 2026 by rpki-client