Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7145a76b-bc44-3ebb-87cc-73d1eafdc55b.roa
File:                     7145a76b-bc44-3ebb-87cc-73d1eafdc55b.roa (raw, json)
Hash identifier:          uMcbpLC/wNeaqO5ikwMTyV3JAjJ+1BGitleA6hmnSsk=
Subject key identifier:   B0:A7:49:B5:7C:4B:FE:03:78:A9:21:E1:CE:66:0A:4E:BB:9B:92:E1
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584CCBA779007725C3EE4F5AE588
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7145a76b-bc44-3ebb-87cc-73d1eafdc55b.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     11404
IP address blocks:        208.53.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:79:00:77:25:c3:ee:4f:5a:e5:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=4a31cd45-302c-4c29-98a9-6c5377a0a6bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:77:0e:c9:30:2f:9a:ea:64:fc:6d:53:f5:dc:
                    9e:e7:76:75:85:5f:c0:a4:16:3d:1b:e8:80:24:ed:
                    58:8d:ef:ec:53:66:54:58:22:14:ed:f6:29:71:e3:
                    46:64:5e:14:3e:5f:2b:e0:32:c8:9c:41:b4:54:be:
                    91:33:15:d7:a1:8d:16:01:d4:c9:f8:cf:75:2f:57:
                    02:d3:2b:60:6f:76:b5:d9:37:c1:50:09:49:f6:41:
                    a6:dc:39:82:8b:4f:b5:6f:17:70:fe:3b:ea:ba:a0:
                    53:70:81:06:81:2d:21:1d:14:ed:12:d9:70:a8:e5:
                    e3:ee:94:33:8b:2d:3e:70:df:7a:13:49:18:11:51:
                    e0:65:f2:5b:92:d3:4b:0f:4b:bb:9f:80:75:34:61:
                    ca:36:a6:09:4c:63:88:29:02:69:11:bb:46:18:3b:
                    fe:dd:0d:04:c8:20:ca:11:b0:f6:65:d8:38:00:81:
                    fb:ca:3e:30:51:d2:a5:75:f3:21:cd:de:db:a3:85:
                    f8:52:41:7d:d4:ea:af:b7:aa:ba:e9:a6:d8:a0:f8:
                    12:9e:44:c1:0f:17:da:f6:db:c3:7e:01:5b:07:1c:
                    ad:1f:7d:09:a9:05:d3:b7:e5:55:53:0a:bc:57:49:
                    95:fd:29:7d:e8:94:1e:36:30:67:4a:ba:2a:b9:dd:
                    58:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A7:49:B5:7C:4B:FE:03:78:A9:21:E1:CE:66:0A:4E:BB:9B:92:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7145a76b-bc44-3ebb-87cc-73d1eafdc55b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.53.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:b1:f3:46:f1:39:7d:b7:6d:cb:71:3b:5b:35:fb:e1:c8:4e:
         9d:41:45:22:9a:5a:23:ca:25:c7:91:a5:af:9e:04:00:df:ed:
         8d:fb:cc:6e:7d:60:46:26:3f:cb:4f:6c:5b:93:fe:f4:7b:6d:
         cc:ba:01:f1:29:51:0f:7f:e2:59:1a:dd:0a:2e:e1:54:27:0e:
         59:95:99:95:e1:1d:57:a4:fc:44:83:89:ed:99:00:a7:17:0d:
         1f:cc:5c:78:98:32:b9:40:df:3a:b0:52:d9:7e:bf:ee:9d:5e:
         6a:6e:0e:7d:c3:bd:bd:6f:06:94:03:29:ce:83:81:0b:18:a7:
         3a:c1:bc:b6:56:16:0e:19:df:5c:e5:ad:57:01:a6:d7:05:a6:
         48:ec:28:de:6b:58:35:9e:0f:06:e7:c5:dd:41:19:a4:08:05:
         16:dc:e4:b0:32:b9:b9:15:35:ce:ea:45:d1:52:e8:90:dc:02:
         99:81:93:62:fe:25:49:fe:52:a3:d4:67:18:25:1c:60:69:55:
         a9:c4:9c:9e:70:ab:70:97:87:f6:d6:38:b2:91:13:a4:43:19:
         2b:1c:5a:c3:87:ee:95:ef:1e:6e:ab:63:25:84:5a:cf:3e:a8:
         da:26:c9:af:7a:cd:82:5b:0d:7b:c6:7f:c1:38:53:ef:81:58:
         94:ae:d2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:54 2026 by rpki-client