Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/2ea7cf59-7a14-391b-9bfc-a46d16cc748b.roa
File:                     2ea7cf59-7a14-391b-9bfc-a46d16cc748b.roa (raw, json)
Hash identifier:          y7XS2sUsAi4dXkn0Id7N+br9GrtIinSslDuoiavxx5w=
Subject key identifier:   E6:20:7F:21:79:60:04:E7:00:E9:02:3A:CB:95:DE:69:66:45:BE:93
Certificate issuer:       /CN=a8825ed0-210f-48ae-8970-c92773afbb48
Certificate serial:       010D0C9F4328584DFBD5DE638CBFE6DF32918380
Authority key identifier: BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/2ea7cf59-7a14-391b-9bfc-a46d16cc748b.roa
Signing time:             Thu 28 May 2026 13:00:12 +0000
ROA not before:           Thu 28 May 2026 13:00:12 +0000
ROA not after:            Wed 26 Aug 2026 13:00:12 +0000
asID:                     16766
IP address blocks:        208.122.32.0/21 maxlen: 24
                          208.122.40.0/23 maxlen: 24
                          208.122.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fb:d5:de:63:8c:bf:e6:df:32:91:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8825ed0-210f-48ae-8970-c92773afbb48
        Validity
            Not Before: May 28 13:00:12 2026 GMT
            Not After : Aug 26 13:00:12 2026 GMT
        Subject: CN=b91d0666-3888-4639-87a2-01528fc61508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:95:69:75:4d:13:fe:10:49:9e:b0:1c:09:52:
                    00:cc:40:4b:59:56:b6:c5:43:3f:68:33:3a:bb:da:
                    8f:25:29:92:f3:f6:aa:d4:a6:cd:66:16:d1:ef:b4:
                    88:fb:6b:73:a2:2d:d3:db:e1:bf:4e:89:08:ba:69:
                    fd:12:f8:e1:6d:0c:c8:f4:04:60:10:0e:8f:3a:aa:
                    d7:26:58:d7:da:a0:e7:42:3a:fa:11:85:24:58:2f:
                    e4:80:be:7a:61:24:60:ea:b7:2d:0e:4a:e1:0b:98:
                    a9:f7:04:11:69:89:0d:e6:c1:a2:f8:de:d4:be:bc:
                    b7:a8:02:f3:02:84:1a:bd:a8:dc:2a:7f:38:09:53:
                    a8:24:da:03:f9:f0:fe:ce:e5:a9:c2:37:6a:73:60:
                    e7:53:a1:30:08:43:e7:35:0b:46:16:6c:51:ae:4a:
                    d2:f5:29:d5:69:66:6a:5d:d3:e0:6b:20:cd:fc:81:
                    c2:17:51:a6:e8:2e:53:18:37:93:44:52:c1:1a:fc:
                    aa:22:b3:8e:be:81:69:d4:09:4f:35:52:25:e9:17:
                    f7:bf:07:ce:2c:41:ed:d9:f3:ba:ef:5b:dc:e0:0b:
                    de:30:2b:7e:3c:01:ab:17:7a:af:4b:a2:ae:54:79:
                    21:e8:63:b0:77:bd:ad:63:32:47:53:34:4f:27:99:
                    40:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:20:7F:21:79:60:04:E7:00:E9:02:3A:CB:95:DE:69:66:45:BE:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/2ea7cf59-7a14-391b-9bfc-a46d16cc748b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl

            X509v3 Authority Key Identifier:
                keyid:BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.122.32.0-208.122.42.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:e5:c0:62:71:56:e8:29:d1:88:60:46:c0:26:8c:1e:c8:7b:
         f5:d6:63:f5:07:5d:40:53:8a:80:27:de:6e:05:82:eb:51:dd:
         54:c8:78:e7:0c:e5:d9:1f:d1:64:32:a1:03:cf:9b:99:3d:9f:
         07:73:ad:8b:9d:e8:d7:7b:47:fd:43:f9:6f:cd:ba:7d:f8:28:
         78:d5:bd:65:9b:3d:db:53:64:10:00:2b:71:15:49:56:72:86:
         35:a3:b4:80:30:75:5f:4a:ca:37:f2:af:96:76:24:a9:9e:06:
         e9:d3:e7:98:05:fc:c7:0b:e1:fa:ab:ff:79:0e:f1:82:fd:41:
         89:20:01:f7:a7:8f:d3:05:0c:50:98:84:58:fc:14:09:4a:4f:
         1a:08:76:9f:57:43:2b:64:04:ea:b1:8d:f9:c8:f5:61:0c:08:
         43:72:e5:e2:3e:39:a0:e0:bf:c3:0d:bd:27:9f:f7:1c:fb:90:
         74:90:06:58:54:43:c7:db:d2:7c:62:99:d4:6a:b2:4e:b1:ee:
         85:6b:16:31:7f:d2:49:fb:c6:2f:ed:8b:22:02:df:b0:ca:90:
         59:b6:d0:be:0d:ab:e9:ae:1d:4a:0c:1c:86:2f:f6:90:6d:26:
         55:fd:71:6d:36:16:cb:f9:7b:4e:96:bf:ce:d0:61:1e:f3:42:
         6f:2e:b8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:09:33 2026 by rpki-client