Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/276c1e36-48fa-3db3-a4b0-eaf471d5a90a.roa
File:                     276c1e36-48fa-3db3-a4b0-eaf471d5a90a.roa (raw, json)
Hash identifier:          8BHLVqSdA3dRkLLfUsUShANbZzMvYlr+gTPZ/AegiEg=
Subject key identifier:   1C:30:1B:46:2A:7A:5C:BF:21:42:8D:AA:23:B3:5E:41:5C:F3:74:2C
Certificate issuer:       /CN=208dcf74-3dce-4384-beaf-70319895fc4b
Certificate serial:       010D0C9F4328584D571FB30A2EAEED44EA7F5848
Authority key identifier: B4:56:5E:FB:60:62:B4:E7:31:22:9B:90:F1:66:8D:39:BD:63:07:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/276c1e36-48fa-3db3-a4b0-eaf471d5a90a.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     8075
IP address blocks:        134.65.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:b3:0a:2e:ae:ed:44:ea:7f:58:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208dcf74-3dce-4384-beaf-70319895fc4b
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=7499ad43-e59a-4c50-a291-da9d6261ef5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:da:f0:80:b0:72:b9:5a:e5:34:6b:50:14:e3:
                    70:05:44:23:dd:77:26:7e:ae:a5:e0:a7:3c:ab:b6:
                    09:65:8e:de:1f:91:be:d7:a5:47:23:8b:d6:fe:16:
                    d4:31:76:30:49:4d:a7:a3:14:af:6a:ad:f9:ec:82:
                    8f:5d:62:b7:12:be:49:4d:97:75:75:0c:b2:f8:8d:
                    f1:8a:5e:a9:69:08:4a:ef:11:86:32:19:1c:97:34:
                    d2:9f:df:9f:97:c9:a3:f4:35:01:44:b8:76:da:9d:
                    58:8b:fe:a3:6e:b8:2e:10:58:94:b9:0d:b3:b1:68:
                    ed:0a:32:17:04:08:c8:3b:4e:e4:1d:ab:61:aa:38:
                    66:2a:12:aa:34:db:88:2a:12:ac:86:23:92:3e:df:
                    38:20:b1:f2:00:86:6a:e1:8a:9c:d7:47:65:ea:0a:
                    ef:24:87:73:bf:3b:c6:cf:d2:5b:75:05:53:67:fd:
                    00:a5:f8:7d:f8:cf:cb:7f:a2:80:f2:45:46:d8:85:
                    83:fc:55:6d:db:41:14:14:6f:8a:6a:83:8b:ed:13:
                    e4:d7:dc:0a:8c:5e:8d:80:07:d4:58:96:54:65:cd:
                    75:86:1d:05:49:86:0a:76:98:f0:d6:21:21:0b:42:
                    bb:e8:b0:e7:7e:39:4c:16:fb:89:ae:1f:43:8c:65:
                    56:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:30:1B:46:2A:7A:5C:BF:21:42:8D:AA:23:B3:5E:41:5C:F3:74:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/276c1e36-48fa-3db3-a4b0-eaf471d5a90a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.crl

            X509v3 Authority Key Identifier:
                keyid:B4:56:5E:FB:60:62:B4:E7:31:22:9B:90:F1:66:8D:39:BD:63:07:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.65.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:24:ba:0c:79:83:d4:b0:21:06:9f:b9:b0:3a:82:0b:3b:9d:
         e9:95:7b:7d:6f:b7:73:6b:81:a8:c9:14:c6:a1:7a:c6:c4:53:
         1f:c5:2a:e9:a1:91:2f:08:ad:b7:3b:8e:99:dc:b2:b0:c7:2d:
         f7:23:fa:4d:ef:72:a2:98:87:72:d0:4a:56:a9:9b:1c:5f:21:
         0c:f0:99:08:4d:c6:46:6a:7b:e8:c1:af:62:44:e4:e6:e5:9e:
         33:d5:6b:49:f3:44:67:3f:ec:56:b1:20:f9:b6:84:91:30:b6:
         10:6a:58:6c:ed:a9:41:50:5f:1b:49:70:15:d6:fb:a0:13:a3:
         57:06:74:20:83:f7:23:3e:67:22:47:ee:dd:df:67:a4:1b:a2:
         e6:f5:91:72:0c:5e:4a:23:64:8f:01:35:18:85:45:8c:c3:6d:
         3a:e4:e6:94:fe:55:1f:0c:02:44:2b:33:ce:1c:54:58:55:ce:
         fd:a1:85:58:0d:27:aa:72:2e:5f:12:6f:0a:06:6f:ed:c3:e5:
         b9:49:1e:94:cb:77:2d:71:ec:23:02:fe:a3:b0:f5:8d:2d:b9:
         40:b7:aa:e8:0f:c2:55:24:02:ee:ba:d0:05:81:29:87:7e:12:
         07:6b:2c:e3:cd:82:14:1b:57:6d:f2:43:30:ad:90:3a:03:9e:
         23:b1:2c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:04:38 2026 by rpki-client