Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/436edc25-dcad-31ee-8994-4e0bfaac1d73.roa
File:                     436edc25-dcad-31ee-8994-4e0bfaac1d73.roa (raw, json)
Hash identifier:          xyHbAFnoa1kH3Luzpo+tQ8wf47EFM1sNmhmJ0b+1yN8=
Subject key identifier:   EC:8E:D7:81:8F:D9:7C:3C:8F:BB:26:57:E6:6B:AA:DC:AC:5C:ED:95
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D6945011909E2C8B7E9C3E080
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/436edc25-dcad-31ee-8994-4e0bfaac1d73.roa
Signing time:             Mon 06 Apr 2026 01:00:24 +0000
ROA not before:           Mon 06 Apr 2026 01:00:24 +0000
ROA not after:            Sun 05 Jul 2026 01:00:24 +0000
asID:                     10361
IP address blocks:        208.22.56.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:69:45:01:19:09:e2:c8:b7:e9:c3:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Apr  6 01:00:24 2026 GMT
            Not After : Jul  5 01:00:24 2026 GMT
        Subject: CN=ac9bf43d-406b-4a15-99fc-152949e1fbc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:48:15:ad:a8:10:f7:38:5e:11:ed:75:89:fc:
                    bd:8e:fb:18:31:75:b5:aa:b8:ed:8d:94:bc:55:0f:
                    28:d2:a7:19:b2:ad:00:cc:4f:cb:e9:14:aa:4b:ca:
                    ca:5b:bb:8f:a0:d3:e1:17:86:d4:91:9e:14:05:a4:
                    67:d3:0c:f0:b1:62:20:84:22:74:81:05:63:cb:a4:
                    4f:a7:87:62:1b:fd:ae:c3:b9:0f:93:11:2a:fa:14:
                    45:fc:5a:5d:69:0c:7c:f2:3d:b1:52:2f:08:98:1e:
                    4f:f5:29:72:af:1d:cc:ff:56:5e:a6:c6:b5:e0:67:
                    d9:26:28:eb:da:9f:8e:7d:a5:62:d7:47:c4:55:78:
                    68:74:1b:08:2b:5a:d7:1a:1f:3b:9f:30:53:98:17:
                    55:9a:66:14:a5:e7:c7:2b:54:a8:7b:a2:3b:15:28:
                    e7:6e:15:ad:b5:5d:72:d5:c2:b7:6d:f0:44:9d:09:
                    78:58:1b:cc:05:72:d6:6d:06:fc:3a:29:33:c0:e9:
                    4d:26:9f:6d:ef:44:9d:1b:c2:4c:57:be:27:c1:5c:
                    0a:05:76:65:5a:43:b5:2e:9c:1b:e8:7f:b4:19:9c:
                    86:51:95:1a:be:d0:eb:66:71:3c:8f:95:58:f5:d0:
                    b8:9d:09:ff:45:f0:c5:7f:4a:8f:2c:34:e6:71:af:
                    b8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:8E:D7:81:8F:D9:7C:3C:8F:BB:26:57:E6:6B:AA:DC:AC:5C:ED:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/436edc25-dcad-31ee-8994-4e0bfaac1d73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.22.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:d6:de:c7:c6:ab:60:27:26:77:54:eb:4d:dd:24:4c:a7:03:
         9c:15:3d:42:54:80:35:6d:20:d2:c9:fa:e8:4c:b9:a5:1c:81:
         34:78:4e:bd:53:03:4d:6a:65:71:ad:be:1c:3b:f9:91:58:dc:
         3c:ea:e2:8b:3b:41:06:ff:0f:95:d2:5b:5e:a0:0f:64:46:28:
         bb:22:df:a3:e3:11:d2:b5:b7:fd:dc:69:22:27:7b:3d:b5:45:
         89:59:98:87:62:d5:2d:e1:fd:d7:e7:7b:69:6a:0f:17:40:a6:
         8e:4a:f6:6e:3b:40:69:ff:ab:0b:72:aa:fe:c0:10:3c:11:2d:
         4d:61:d7:e5:c0:be:7b:fd:6c:5a:c7:0f:32:2e:94:be:96:17:
         10:78:84:3b:a2:1f:99:72:df:ee:9e:b7:39:df:a2:53:2f:f3:
         29:09:74:21:9b:40:65:f9:44:71:4f:fd:80:6b:d7:66:94:b0:
         1e:d5:33:8f:86:50:5e:d7:1c:71:19:52:1c:2f:63:02:3f:ea:
         49:c0:7e:68:86:0c:6d:34:4c:2a:13:84:b3:a2:c5:9d:ec:8e:
         7d:7d:c0:ce:91:b0:9f:a0:bf:08:d1:81:fc:d3:c7:b0:70:a6:
         7b:ff:e1:d0:e8:e8:9c:b6:3f:9c:7d:e0:f7:0e:25:61:c7:23:
         8d:71:9b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:57:52 2026 by rpki-client