Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/43ff921f-178f-32c6-8c26-1f2e30875eab.roa
File:                     43ff921f-178f-32c6-8c26-1f2e30875eab.roa (raw, json)
Hash identifier:          yinsGQ5pc9QtZoB6yPNYFrUnffZeOl7JCDYseU3YJnY=
Subject key identifier:   34:E8:B9:58:73:88:0C:36:8D:73:0B:0E:81:21:99:A5:E1:FE:3A:7F
Certificate issuer:       /CN=03b51393-7784-45a0-9621-168719782436
Certificate serial:       010D0C9F4328584E0435F16D3481650C741AF1C0
Authority key identifier: EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/43ff921f-178f-32c6-8c26-1f2e30875eab.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     10384
IP address blocks:        152.85.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:35:f1:6d:34:81:65:0c:74:1a:f1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03b51393-7784-45a0-9621-168719782436
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=70e1fe4e-e959-45ae-b034-293574893729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bf:3b:9b:bb:a1:e7:27:60:93:ed:13:59:0a:
                    64:fd:08:1a:f0:9e:c9:6f:95:50:9a:fd:b7:ed:d5:
                    30:c9:63:b7:d2:51:e9:ce:c3:91:55:db:33:ca:06:
                    67:53:bb:f2:1b:bd:fd:ed:dc:19:e3:fe:57:49:17:
                    e0:29:db:42:29:2e:ae:c7:22:ba:4c:7e:93:dc:84:
                    67:00:91:f0:76:53:0c:7b:b3:4c:73:64:5c:4c:c8:
                    e6:44:36:7c:11:4f:b4:04:6f:ed:1f:e3:b9:ea:9c:
                    b9:e5:eb:0f:f5:4d:47:d8:4b:50:66:87:8d:c0:55:
                    27:c9:e6:51:f2:a1:b2:4f:43:25:af:a4:23:e6:42:
                    cf:20:b4:e2:54:3c:38:a9:11:ed:ad:5b:a7:e5:30:
                    a1:08:76:6c:10:ec:60:9b:50:40:22:55:90:f1:9a:
                    54:0f:8b:c2:75:9a:9f:16:f0:fd:ee:79:2e:6f:78:
                    d1:1e:bf:b5:9f:67:7d:c9:84:4e:bd:12:65:dc:64:
                    03:ff:e5:1f:4f:76:3f:58:db:31:f4:59:e4:98:63:
                    1e:c5:d1:86:3f:bf:00:f0:40:15:76:33:40:83:6f:
                    7d:81:8b:4e:49:d1:b5:eb:1c:99:af:7d:56:b0:d9:
                    96:f8:fd:e0:01:aa:3d:b4:b7:3a:76:aa:0f:8e:f7:
                    f3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E8:B9:58:73:88:0C:36:8D:73:0B:0E:81:21:99:A5:E1:FE:3A:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/43ff921f-178f-32c6-8c26-1f2e30875eab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl

            X509v3 Authority Key Identifier:
                keyid:EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.85.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:0c:60:2e:f9:ac:3a:c4:83:a1:0b:3d:4b:2e:32:49:96:e5:
         4f:f2:76:91:da:7d:6f:ae:87:c9:00:1e:c9:93:ff:3c:ea:ae:
         48:2a:85:f0:21:35:03:23:7f:7c:70:b6:ba:05:31:43:44:c1:
         29:71:5f:ba:09:47:f6:7a:b5:ad:ad:c3:3b:c3:ba:74:a6:30:
         87:40:f0:49:39:1d:16:04:40:4e:0a:5f:b8:ed:57:ec:9c:f6:
         66:63:9a:aa:8f:2f:8f:dd:b4:3a:13:c7:67:52:37:24:cd:95:
         ae:e3:81:f5:f1:69:74:c2:00:a4:09:9a:fb:10:a4:26:83:bc:
         c7:43:b9:da:f8:51:fa:08:1d:d2:7f:75:60:f5:52:fb:da:2c:
         bf:13:32:55:95:b6:62:73:a9:c2:9d:de:4f:a4:e0:bb:a4:b1:
         8a:36:cf:70:35:ba:d2:d0:07:02:da:23:cc:d2:97:6d:5c:3b:
         90:05:5a:14:ab:4b:ed:d0:73:04:d7:66:26:0d:ae:01:f1:04:
         9a:12:eb:1a:40:36:c5:d3:85:39:e2:14:af:9a:e1:7c:fb:3e:
         aa:61:b0:06:37:10:71:fd:42:7a:f6:4c:26:d0:ca:e9:67:1a:
         00:ad:fc:e3:ca:a3:46:79:cc:ec:25:99:d4:3b:33:87:f9:05:
         b6:4b:0a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:54:16 2026 by rpki-client