Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/408e275f-c077-3b66-9a3f-a4e43e87657a.roa
File:                     408e275f-c077-3b66-9a3f-a4e43e87657a.roa (raw, json)
Hash identifier:          375M0L39l4+ekq9j0S9wIxURwJfA3xZa1I7YPEAeqkI=
Subject key identifier:   2D:EF:8A:1F:46:3C:B9:08:C5:16:CC:D3:E3:47:D8:CB:BE:98:10:B5
Certificate issuer:       /CN=5c24b227-71d8-4de3-9a17-e538fd673530
Certificate serial:       010D0C9F4328584E210EFA3225162C9FADAD5060
Authority key identifier: 47:1C:36:F9:F2:BE:CC:7E:B9:E7:B7:F8:EA:51:AD:BC:CA:C2:D4:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/408e275f-c077-3b66-9a3f-a4e43e87657a.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     22418
IP address blocks:        208.96.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0e:fa:32:25:16:2c:9f:ad:ad:50:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c24b227-71d8-4de3-9a17-e538fd673530
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=b7646109-180f-4a9e-abe9-c689cf17601b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:90:8c:c8:8b:4f:b3:86:2c:3f:30:7e:24:5c:
                    73:6d:06:3f:db:34:93:5d:d3:31:ff:2a:86:47:a9:
                    ef:fc:c1:72:47:e1:7b:1c:32:ca:45:94:68:d3:07:
                    cf:f5:42:9a:4c:d5:71:ec:39:aa:7f:0e:16:8b:25:
                    40:43:b4:68:d0:5b:b0:92:df:d3:59:31:88:f8:e3:
                    24:f6:72:67:85:37:3f:f5:8e:b2:ee:66:1e:81:3d:
                    cb:b4:bb:1f:5c:a0:39:3d:f0:58:e9:c0:d7:dd:25:
                    a4:05:bb:8a:e3:e2:80:59:d2:16:88:de:10:38:c3:
                    28:cb:fd:b9:a0:63:01:e4:57:5f:82:12:99:7b:be:
                    17:08:92:10:96:f8:f4:35:69:3a:21:b8:1e:ad:d7:
                    34:46:e6:75:3f:ee:45:73:32:a3:83:d4:f3:c1:be:
                    0d:fe:0d:c7:77:10:8f:55:1e:8e:8a:1f:82:ca:90:
                    ff:4e:d8:36:37:62:e8:c5:17:83:e2:03:68:f0:e5:
                    a7:f7:18:aa:88:79:c9:69:a3:cf:19:40:1d:e6:83:
                    5e:7d:48:07:22:ec:f4:66:64:1c:9f:94:f7:db:bf:
                    00:40:ba:27:d0:4d:c6:3b:f7:ad:30:65:b7:04:94:
                    82:35:a1:14:81:19:4c:d9:01:2d:cd:96:0c:73:02:
                    93:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:EF:8A:1F:46:3C:B9:08:C5:16:CC:D3:E3:47:D8:CB:BE:98:10:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/408e275f-c077-3b66-9a3f-a4e43e87657a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.crl

            X509v3 Authority Key Identifier:
                keyid:47:1C:36:F9:F2:BE:CC:7E:B9:E7:B7:F8:EA:51:AD:BC:CA:C2:D4:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.96.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:56:8d:8e:0c:ee:f9:74:ec:02:62:4d:f4:e9:dd:eb:21:47:
         95:65:ed:cb:c7:88:40:fc:f7:23:f3:03:16:af:0c:64:3e:db:
         52:ec:58:e6:47:59:35:84:1c:84:4b:c6:57:44:d9:4e:d5:7c:
         5d:1e:85:38:a0:e6:28:3e:80:6e:32:45:3d:4e:a1:49:0b:9a:
         50:bd:72:b7:80:4c:0d:9c:9d:de:3d:1c:35:39:d8:6e:48:bb:
         fd:d1:72:2f:ee:81:49:0b:b0:4c:2c:71:8d:2f:52:40:26:13:
         45:e0:63:c3:62:b8:64:97:a9:3e:88:57:e0:6a:74:23:8f:93:
         b0:fe:c0:e0:25:5c:95:a6:8b:2c:62:c2:4d:b5:12:41:fd:63:
         69:c7:cf:e4:e3:5d:95:16:82:74:03:b9:6e:2a:e4:e0:e8:83:
         28:a6:49:23:30:8e:f3:69:d0:83:51:7f:92:92:16:0b:10:6a:
         61:5b:d5:a2:50:9e:a5:91:39:f9:22:b2:ab:ea:d3:c8:d6:88:
         a5:81:41:97:ca:aa:e1:a3:c2:1c:7b:51:e9:65:f5:93:0a:b2:
         09:45:60:c7:a4:69:a6:f6:b9:0a:24:c6:fa:92:87:d8:70:52:
         3f:7e:16:d2:20:a4:c3:46:c5:bd:4e:ae:4c:e2:f3:74:fc:e3:
         91:f3:6a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:33:57 2026 by rpki-client