Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/f0ee9cc8-ea03-32d8-8af2-6bd0b4ecec99.roa
File:                     f0ee9cc8-ea03-32d8-8af2-6bd0b4ecec99.roa (raw, json)
Hash identifier:          rV/SauL7//Gso2bReNHNHQgM/5ksNaditakhg5/A/r0=
Subject key identifier:   56:62:A8:F3:F7:A0:5E:2B:B5:66:8A:7C:4D:B5:48:FB:4A:C5:73:72
Certificate issuer:       /CN=208dcf74-3dce-4384-beaf-70319895fc4b
Certificate serial:       010D0C9F4328584D571FB3232A0347AE5DD9DE00
Authority key identifier: B4:56:5E:FB:60:62:B4:E7:31:22:9B:90:F1:66:8D:39:BD:63:07:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/f0ee9cc8-ea03-32d8-8af2-6bd0b4ecec99.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     14618
IP address blocks:        134.65.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:b3:23:2a:03:47:ae:5d:d9:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208dcf74-3dce-4384-beaf-70319895fc4b
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=f36a62e1-4b1f-46d3-be52-29ceaae68fa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a6:77:af:51:bc:53:cc:63:df:fa:b7:cb:d9:
                    49:4f:65:e7:e7:df:91:43:4f:98:6a:8b:a8:f1:39:
                    8d:23:12:9d:1c:54:54:da:a9:7f:3a:24:a3:6f:f6:
                    0a:da:ac:4b:76:d8:5e:f9:d4:e8:d0:19:d7:66:28:
                    4d:41:0f:39:52:ca:b0:e6:30:54:4f:64:a6:95:4b:
                    3f:57:ba:55:b6:9a:95:d2:2b:ca:0f:4a:3f:1c:c5:
                    80:08:42:92:0a:09:ad:8a:c9:e8:44:96:b6:25:53:
                    b2:8e:6e:06:7b:6e:db:50:a7:d1:2a:94:c0:65:da:
                    94:20:7b:16:0f:18:5c:2f:71:5f:aa:ac:65:e4:5e:
                    36:82:32:09:97:98:c6:1b:27:25:03:96:de:a7:67:
                    fb:24:2a:fe:73:a6:6d:2c:08:cc:13:d3:c4:e1:8d:
                    6a:15:cd:db:ed:41:f3:87:15:de:ba:e3:f3:e5:fa:
                    21:f5:ac:6c:ec:53:13:23:a2:01:53:8d:cb:c4:9a:
                    8b:4d:28:9a:f9:ca:22:64:5b:88:e2:90:ed:e0:0a:
                    59:d7:a1:cc:31:72:bc:cc:89:44:39:4a:ec:3c:6e:
                    63:6b:17:5e:5c:ee:7f:13:ff:9b:08:95:7e:42:4c:
                    65:bd:22:fb:33:68:9b:c9:31:42:63:83:9c:41:16:
                    d2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:62:A8:F3:F7:A0:5E:2B:B5:66:8A:7C:4D:B5:48:FB:4A:C5:73:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/f0ee9cc8-ea03-32d8-8af2-6bd0b4ecec99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.crl

            X509v3 Authority Key Identifier:
                keyid:B4:56:5E:FB:60:62:B4:E7:31:22:9B:90:F1:66:8D:39:BD:63:07:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.65.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:40:2f:2c:eb:69:f1:e1:0b:f5:4d:cd:e8:e6:09:dd:c5:8b:
         fb:4b:30:9f:35:3c:5c:0f:f0:2a:e1:48:7b:dd:be:5f:3b:7d:
         37:94:55:01:b1:bd:3a:4e:0c:fc:e9:52:81:e1:d6:db:50:b7:
         48:22:d5:96:e2:55:88:cf:12:5f:7a:17:d4:49:29:4e:7a:7e:
         1b:e1:d8:ab:c1:83:3e:63:8b:ae:05:8f:97:25:58:10:22:4a:
         2b:8e:81:82:d1:75:b5:2a:d3:46:db:fb:05:87:2d:c8:d3:49:
         a4:c1:f3:3f:da:cb:7e:bf:12:48:9c:77:d7:03:86:b2:1e:ee:
         1a:df:c6:04:b7:fb:f5:82:b2:7d:7d:7e:44:b6:fb:37:16:e4:
         64:91:03:a7:a3:e0:52:01:da:15:e1:66:e6:c7:26:cd:00:93:
         82:36:06:84:7a:02:12:eb:73:f9:f7:83:a4:ad:8d:3c:ff:2f:
         35:67:bb:11:2f:62:78:05:42:75:56:05:1d:fb:81:15:1f:ab:
         de:0d:a7:42:8f:6a:ae:f9:81:b0:15:f7:41:e4:23:ad:3e:18:
         fb:a6:bf:44:c6:49:dd:77:f2:29:a6:b3:6e:0b:39:24:b0:7c:
         4b:0b:96:d0:64:fa:b0:61:bc:59:f8:09:87:a1:e0:bc:7e:5a:
         a6:d8:89:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:04:58 2026 by rpki-client