Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b/342975f3-bb51-368c-96e3-51ffebef6d84.roa
File:                     342975f3-bb51-368c-96e3-51ffebef6d84.roa (raw, json)
Hash identifier:          DS97NAvbRt2ox/dxghz3e5oLa2yxDnkgr/TH6Z4WZzc=
Subject key identifier:   F0:F0:80:A3:AF:72:BE:2B:EA:45:5D:38:54:A4:1B:67:12:7B:76:1A
Certificate issuer:       /CN=e85794f9-a8df-4d59-8974-f686e8987f1b
Certificate serial:       010D0C9F4328584E104EF3BF2AFAE3E821AE9E00
Authority key identifier: 42:2D:F4:AF:AF:93:BC:42:C6:1C:43:7B:9C:16:F8:E7:E3:C9:EB:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b/342975f3-bb51-368c-96e3-51ffebef6d84.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     376
IP address blocks:        205.237.8.0/21 maxlen: 21
                          205.237.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b/e85794f9-a8df-4d59-8974-f686e8987f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b/e85794f9-a8df-4d59-8974-f686e8987f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4e:f3:bf:2a:fa:e3:e8:21:ae:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e85794f9-a8df-4d59-8974-f686e8987f1b
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=63c4b609-97c0-4d17-bcb0-0dc1f6c3aafc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f9:c5:f3:53:53:d7:33:ea:db:c1:3e:6c:9b:
                    83:f9:0f:66:19:94:4f:90:c3:e9:34:6b:bc:d6:0e:
                    fb:bb:7e:16:fc:25:5b:27:3b:b7:1d:5d:06:3c:cd:
                    99:82:b1:76:e5:3b:eb:75:4f:de:f0:ad:e8:4c:e8:
                    9f:74:af:0d:12:2b:ea:53:78:4a:ce:c7:98:da:e1:
                    15:d4:f8:d6:8a:fb:ad:b8:49:d4:33:8b:25:d7:75:
                    1a:36:de:30:ce:02:d0:f3:1f:5d:72:7b:d8:71:1a:
                    8c:30:00:1f:01:22:d8:01:74:a1:c5:01:8d:ae:cd:
                    2a:de:0a:5e:39:a5:84:6b:47:2f:6a:a6:0b:58:aa:
                    da:e4:f6:7e:9e:f1:ac:3b:77:e4:48:dc:ba:3a:d3:
                    e8:39:17:2a:1f:19:b0:26:42:62:61:11:0c:f0:6c:
                    ae:96:26:9d:29:f1:5d:17:fc:15:21:01:b0:1e:28:
                    fb:94:2a:d3:9f:a4:b1:f0:fe:5e:5b:02:46:a5:97:
                    ad:eb:11:e4:9b:c6:a1:93:2f:97:6f:8b:98:b0:29:
                    ac:dc:ae:9a:13:c3:72:76:d7:a4:3c:b8:82:38:c7:
                    09:cb:6c:d1:06:a3:81:72:88:dd:f0:1f:07:3e:71:
                    73:85:f8:14:40:46:22:03:d9:9a:42:0b:7e:1c:96:
                    08:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F0:80:A3:AF:72:BE:2B:EA:45:5D:38:54:A4:1B:67:12:7B:76:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b/342975f3-bb51-368c-96e3-51ffebef6d84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b/e85794f9-a8df-4d59-8974-f686e8987f1b.crl

            X509v3 Authority Key Identifier:
                keyid:42:2D:F4:AF:AF:93:BC:42:C6:1C:43:7B:9C:16:F8:E7:E3:C9:EB:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.237.8.0-205.237.19.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:23:e7:83:15:74:52:ca:c0:b0:e4:69:74:f0:16:d8:6d:0a:
         67:51:86:ae:8f:04:ff:e6:26:3a:bb:12:27:8a:d6:0e:67:15:
         c7:56:29:c4:0d:87:6b:f5:49:7b:ec:28:20:74:c9:2a:1c:4b:
         92:a6:8a:25:80:e1:b9:f7:72:fd:d7:3b:62:7c:a6:4a:6f:d5:
         ec:09:eb:35:3d:c0:63:de:4c:27:7e:95:d5:bf:e4:3f:7d:65:
         1a:95:96:c7:5d:55:ab:e1:26:3f:d2:d1:5b:2b:8c:4f:1e:c6:
         61:4f:b9:9d:a8:8a:36:e2:08:9f:0b:4b:9e:7d:64:39:48:c2:
         dc:b3:36:5b:3d:80:12:52:d0:5b:24:d1:73:82:45:d8:db:73:
         44:ed:4b:a9:4b:2a:02:7c:14:55:98:43:c5:87:aa:28:9c:8e:
         43:03:b7:d0:0e:fd:2b:1a:4f:ed:fa:19:7a:6f:49:bf:51:65:
         a4:da:bd:66:ae:4e:96:28:df:8d:c7:eb:2f:06:7f:8a:5f:91:
         fe:43:4a:45:cb:c2:61:6c:11:75:a4:d0:eb:57:d8:fd:76:69:
         69:7d:14:27:20:d9:1f:f3:0e:aa:e1:41:9f:86:03:db:3e:c7:
         c2:dc:da:f7:da:e7:e7:5c:90:78:fe:a3:e0:63:3f:99:c1:b3:
         50:13:15:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:54:09 2026 by rpki-client