Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/308dc337-8592-3e39-bd79-d5b7cb14ad8b.roa
File:                     308dc337-8592-3e39-bd79-d5b7cb14ad8b.roa (raw, json)
Hash identifier:          J9gdnbhJlrTTzWSQmE1+dvL6q5yE3TMoXNNyLMGZz2s=
Subject key identifier:   58:BB:38:B6:FE:69:DD:76:6C:68:F0:CE:4D:1D:F3:34:D1:97:0C:71
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F4328584D5E1A6E7B23DB121290DE7EA0
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/308dc337-8592-3e39-bd79-d5b7cb14ad8b.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     16509
IP address blocks:        207.202.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:6e:7b:23:db:12:12:90:de:7e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=208c91ff-7009-4422-86e7-897db0b08d03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:0e:79:c8:05:17:4e:8a:4f:54:e7:1c:7d:77:
                    69:a3:2b:0e:1e:58:52:6b:6e:7c:99:eb:b0:95:9f:
                    a5:4a:17:6c:bb:9d:3a:d7:40:22:72:37:84:40:37:
                    ef:e2:17:26:d0:b2:22:60:7e:07:e9:90:9c:2e:2e:
                    da:eb:b6:2f:0d:f4:d6:84:c6:43:42:62:36:44:66:
                    a1:18:21:bb:46:86:87:50:62:ab:32:dd:bb:9c:cd:
                    0b:2f:77:5d:c0:59:af:78:f8:c9:57:9f:9b:f6:da:
                    0e:9b:dd:9c:08:ac:63:dc:23:88:f2:70:f2:ee:a8:
                    e1:08:58:3d:c9:fd:cd:15:56:fe:09:72:34:c9:10:
                    e5:23:ac:f7:2e:49:11:2c:e4:05:de:d8:b6:1f:83:
                    a3:60:5f:b2:f2:71:75:4e:06:a5:37:97:24:95:a5:
                    67:60:89:1b:52:25:90:85:3f:1a:bb:e5:10:c7:92:
                    77:50:35:e1:1c:76:b9:92:0f:da:82:4b:26:6f:c3:
                    ac:19:e5:3d:0b:82:c9:8e:ff:78:75:f8:8c:41:ce:
                    d5:d0:26:3b:98:11:a3:1c:c0:38:eb:a5:41:59:3a:
                    02:6a:e5:f8:66:f6:5e:b8:a1:9d:16:cb:77:79:cb:
                    c8:64:01:c9:19:32:8e:9a:cf:fa:87:8f:4b:b2:58:
                    17:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:BB:38:B6:FE:69:DD:76:6C:68:F0:CE:4D:1D:F3:34:D1:97:0C:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/308dc337-8592-3e39-bd79-d5b7cb14ad8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.202.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:9e:5e:8f:05:27:f4:8d:32:6a:4b:fc:9c:f2:4d:21:f9:8d:
         83:fb:3d:b4:f3:ee:67:97:58:d1:e9:b9:83:fe:47:25:45:a4:
         a1:1e:c7:3a:2b:e4:d6:1a:2a:72:6f:6c:7d:76:1e:05:2e:b7:
         50:5c:9b:14:a9:68:87:d1:84:c6:27:49:5c:b1:b0:40:46:90:
         04:c0:6e:dc:d7:94:2d:47:3f:af:d8:6c:b0:3a:9a:77:73:f1:
         58:07:10:47:ad:d7:27:30:d1:b3:6a:fe:2e:25:7f:1e:81:9f:
         f7:ea:f8:0f:44:fd:81:f6:be:d4:33:4f:4b:d1:26:9b:54:b0:
         08:2b:bd:a3:ed:2e:0b:89:52:1c:ea:3b:51:5b:94:1d:fe:2f:
         e8:47:0d:3d:82:b2:5e:17:ab:f6:7a:4e:3d:8f:9d:ff:12:28:
         cc:b0:3d:4b:8f:ea:61:35:a9:88:ce:97:3e:e0:bf:5e:03:8f:
         59:7c:6a:7d:3a:fd:79:66:97:f3:7d:45:cf:78:15:98:c1:ea:
         58:c9:80:38:f0:48:c3:69:54:35:69:b0:3b:af:b9:88:8b:0b:
         d4:f2:a4:88:4c:76:14:f0:f1:33:51:8d:c0:18:41:f1:2d:ae:
         81:72:7c:72:5c:ab:f6:09:7e:84:ce:b6:dd:2d:25:4d:d8:4c:
         a5:15:43:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:03:44 2026 by rpki-client