Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/91565ae2-2cce-3e74-91c3-0efa72313489.roa
File:                     91565ae2-2cce-3e74-91c3-0efa72313489.roa (raw, json)
Hash identifier:          coV0gWSJQKeWiAHTTWY3Kk2XqVCuyaRPk2S6XKB6xpg=
Subject key identifier:   C7:8F:B5:B0:0B:DE:C3:62:51:0D:86:80:B3:87:B4:5F:F9:24:A7:F4
Certificate issuer:       /CN=fd2ef99c-c00c-431b-8519-cabb9d2a4d50
Certificate serial:       010D0C9F4328584D7A0514D41888EC22F13CE280
Authority key identifier: 39:01:7E:8B:7D:40:09:7F:64:0F:1D:C3:2E:AB:DF:9E:79:8B:CA:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/91565ae2-2cce-3e74-91c3-0efa72313489.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     33164
IP address blocks:        208.89.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:14:d4:18:88:ec:22:f1:3c:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd2ef99c-c00c-431b-8519-cabb9d2a4d50
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=732c4144-97e5-46e9-b055-9062928fdcb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:22:d1:a9:1e:89:ef:e7:a9:62:2e:09:cf:3a:
                    84:43:e6:f2:db:43:15:7f:e4:72:14:bb:31:61:8d:
                    09:9b:b4:be:c2:da:a4:5a:2d:b6:06:d8:0e:4d:27:
                    47:11:78:69:6e:8d:0b:d0:b9:3d:f1:57:ba:14:b5:
                    84:24:d0:17:a3:07:fe:fe:5b:3c:c6:00:18:9d:10:
                    bf:fd:29:10:ee:95:fd:d6:b2:db:b6:40:54:9f:8a:
                    8b:f9:fb:cb:23:1c:9d:ba:19:82:da:4d:a8:94:19:
                    aa:f5:4c:a6:fb:6d:08:dd:c3:13:d4:75:a6:2d:01:
                    f9:32:a0:df:8e:ef:69:f2:b9:59:16:3c:3c:0b:bc:
                    40:27:91:96:6b:0a:27:b0:57:6f:ef:65:24:e3:e5:
                    c3:ac:f4:78:f4:7a:9e:1a:af:5d:56:fd:ee:47:16:
                    af:07:76:a9:18:e9:3a:4e:a9:6f:a1:9e:b9:97:9e:
                    9f:27:f1:b2:a1:47:5d:1a:4f:c4:69:a3:1b:6e:65:
                    9f:db:eb:ee:6c:23:08:92:1d:92:30:61:81:f8:79:
                    da:79:51:40:2d:35:b7:45:af:dd:9c:18:f3:cd:2a:
                    92:7d:9a:12:66:52:3f:78:c6:a7:66:5a:90:ce:1d:
                    e5:c6:d3:a4:b6:34:ec:e9:c1:83:18:5e:47:21:f4:
                    8f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:8F:B5:B0:0B:DE:C3:62:51:0D:86:80:B3:87:B4:5F:F9:24:A7:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/91565ae2-2cce-3e74-91c3-0efa72313489.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.crl

            X509v3 Authority Key Identifier:
                keyid:39:01:7E:8B:7D:40:09:7F:64:0F:1D:C3:2E:AB:DF:9E:79:8B:CA:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fd2ef99c-c00c-431b-8519-cabb9d2a4d50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.89.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:0d:f1:3a:bd:b4:14:ac:25:9a:15:d0:a9:66:ca:7b:79:9c:
         5b:8b:d4:32:03:94:1c:7b:a7:bf:ea:41:6e:5f:67:81:9e:54:
         76:b6:96:4c:2a:4e:5f:85:51:e8:38:07:01:f5:3b:47:d1:a4:
         c5:17:20:a6:39:1f:be:69:b6:67:43:b2:b3:e9:3e:d2:93:0a:
         b3:c5:8c:97:23:b9:7a:51:00:7e:13:c0:fb:00:a1:f5:6c:06:
         02:9e:5b:61:e3:9e:be:67:8e:88:4f:06:42:81:2f:10:15:71:
         68:17:1c:1a:a5:59:7e:f9:86:99:6b:c2:ed:ec:77:d6:92:67:
         ad:c4:f7:44:d4:28:b6:7b:66:eb:21:51:7e:49:9b:63:dd:51:
         8c:d7:36:08:02:a3:87:8f:4b:e7:27:23:96:88:48:95:57:5a:
         8a:e0:07:3b:36:f0:ba:a3:ad:df:ba:fc:d8:9e:80:3e:37:53:
         a5:fa:5f:d3:5c:e3:3a:8c:e1:b8:fb:40:99:44:c0:09:54:00:
         14:2a:3e:24:c6:3b:20:4b:92:c7:fd:55:18:38:38:10:8e:a0:
         e2:4b:cc:12:d8:02:31:b4:b4:fb:d5:4b:71:4a:45:c7:12:ae:
         a2:d5:55:45:17:7b:d9:5f:cf:9f:34:cc:b2:a4:d4:5f:49:21:
         09:be:94:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:34:21 2026 by rpki-client