Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/f1662e56-e1d7-3c92-871a-ec745901c911.roa
File:                     f1662e56-e1d7-3c92-871a-ec745901c911.roa (raw, json)
Hash identifier:          723M9yamPLy6NLH9PbTHeAzXhlI2+TFTolFz3ExmAcc=
Subject key identifier:   DE:6D:4A:40:39:99:CC:98:57:28:D3:4B:45:DC:F5:89:37:62:2C:C4
Certificate issuer:       /CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b
Certificate serial:       010D0C9F4328584D7CCFD2EF732AA702875D3440
Authority key identifier: 6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/f1662e56-e1d7-3c92-871a-ec745901c911.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        208.88.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:d2:ef:73:2a:a7:02:87:5d:34:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=af111562-663f-4f08-95cf-48d7d12b825b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:67:77:de:73:3a:6b:8c:e9:62:49:2d:7c:24:
                    cf:90:d9:fb:33:e1:7f:53:1e:14:32:cd:80:30:b7:
                    2c:a9:9c:96:aa:e6:70:19:4d:a0:70:4a:4d:1f:b7:
                    6c:0a:4d:13:07:33:e7:0f:16:a9:56:3f:f0:71:4e:
                    70:7c:c7:c4:9d:fa:d5:7e:25:63:27:b8:b4:a5:f8:
                    53:cb:84:db:d0:e9:80:73:4d:9c:1d:bf:95:9a:43:
                    d5:52:b1:d3:f6:7b:d4:d7:e1:05:8c:41:58:20:f6:
                    7d:7d:d1:96:02:ca:84:06:45:de:8f:2d:d3:ea:21:
                    dd:06:12:22:93:b5:c5:b0:00:dd:62:09:b0:6d:52:
                    cb:e7:47:12:c9:f2:33:db:b7:59:78:0d:b9:45:f9:
                    bc:20:9b:ab:88:8f:9c:0d:58:45:6f:06:2e:0c:9e:
                    19:99:dc:81:d2:e0:f0:da:7b:51:03:e4:48:59:0e:
                    d9:88:f3:6e:c8:ae:d1:99:c0:d4:a3:06:7b:e9:58:
                    f4:a5:74:d8:81:39:60:6c:38:98:28:58:70:98:f2:
                    67:44:1e:db:6e:6c:52:2f:91:4f:d5:da:9d:ba:54:
                    38:5c:d1:e4:62:d4:46:3d:ad:aa:4b:00:2c:22:d0:
                    bc:92:68:87:2f:38:b7:95:c3:f9:04:2f:75:18:6c:
                    f5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:6D:4A:40:39:99:CC:98:57:28:D3:4B:45:DC:F5:89:37:62:2C:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/f1662e56-e1d7-3c92-871a-ec745901c911.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl

            X509v3 Authority Key Identifier:
                keyid:6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.88.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:e5:59:73:5a:d6:53:6c:b1:2e:7d:3a:47:e6:a8:08:07:a4:
         76:98:5e:8b:c8:30:56:05:7d:e3:41:dd:9c:34:d0:51:0c:33:
         c0:16:e6:95:54:d1:20:b3:d2:84:70:53:ce:b7:e4:3e:70:2b:
         21:a2:8a:1e:b4:95:c3:73:04:58:25:35:91:69:9a:c6:f8:79:
         a5:a5:f8:23:2c:a2:f8:36:93:cd:45:dd:a3:6b:90:c4:5b:24:
         28:8c:57:83:21:05:f8:a4:f3:8b:4b:03:ba:bd:90:3f:e1:b1:
         e4:19:12:e3:6d:ea:a9:00:55:6c:6a:0b:49:7d:89:ee:ce:be:
         7a:25:71:06:f3:55:e0:ac:e8:df:27:10:3d:73:d8:7d:08:dd:
         23:3e:1e:cd:16:94:4b:2b:f7:67:d8:6c:c9:eb:7a:59:fd:36:
         bc:a4:84:6d:d6:76:55:ea:ad:f6:97:8d:2e:39:bd:23:4f:e2:
         d6:96:08:56:67:ec:eb:be:a1:92:22:ca:d9:40:b2:f5:35:f8:
         d6:c4:48:10:8a:b7:11:98:e7:14:66:88:51:d4:cb:e5:2f:bf:
         6b:65:d2:15:0a:ac:4a:c5:7b:bc:a9:0a:c5:ac:46:bc:b1:29:
         f6:bb:04:e7:18:e4:79:7f:99:06:01:0f:17:55:9f:90:c8:04:
         3d:ed:79:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:50:37 2026 by rpki-client