Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/4044bbf2-5435-3a70-aa48-fc48565669d0.roa
File:                     4044bbf2-5435-3a70-aa48-fc48565669d0.roa (raw, json)
Hash identifier:          mZb/X/UlOXdOk+U6Wa4XKruI2ihIUhmcnny/NZkbccA=
Subject key identifier:   80:22:40:FE:05:E1:CE:E3:D2:8D:70:20:36:27:75:9B:74:C1:1F:B3
Certificate issuer:       /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75
Certificate serial:       010D0C9F4328584D651527FDBE3FE021557E6F80
Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/4044bbf2-5435-3a70-aa48-fc48565669d0.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     8014
IP address blocks:        216.137.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:27:fd:be:3f:e0:21:55:7e:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=e821d816-b3d9-4215-9718-698271877db7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:51:13:f7:ab:75:a8:4a:4d:95:29:7c:81:2e:
                    2f:8e:f6:d8:21:88:b2:f6:70:95:30:67:d7:99:8d:
                    5e:79:9f:eb:de:07:51:9f:f2:8e:26:9d:e1:62:a5:
                    08:ff:67:0b:78:e1:de:87:00:bb:cd:dc:6a:b7:ad:
                    19:71:15:59:6a:30:91:93:5b:a0:7f:23:8b:87:8e:
                    75:03:8c:9e:61:df:42:e5:be:57:cd:d0:f8:33:86:
                    ca:6b:ca:b0:35:26:34:f8:e7:3e:e9:1b:5a:9b:3c:
                    98:ba:d2:f6:ce:63:35:a7:7d:cf:de:c2:eb:b4:26:
                    41:95:26:d5:77:fa:94:09:fa:41:a4:8a:92:e7:01:
                    90:20:ee:fc:41:63:4e:bb:57:f3:05:b2:7d:a8:e7:
                    c8:0e:b5:9b:ca:a9:05:25:2f:70:4d:a1:23:6c:f5:
                    34:6f:cc:9f:25:26:bd:12:8b:cc:fa:5c:a3:0d:8b:
                    34:c2:e6:ab:44:d4:13:f8:48:b2:23:fd:1d:4a:d0:
                    00:a5:f2:9b:72:fe:47:1e:ed:a1:0d:54:da:04:cc:
                    2c:dc:0c:37:ef:5e:39:f1:a7:95:56:2b:1e:4c:a8:
                    ad:86:cf:7d:ae:ff:8c:33:72:db:df:90:de:c5:93:
                    18:f2:d5:17:1a:e0:3d:ec:0a:09:1c:c7:a2:22:d1:
                    43:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:22:40:FE:05:E1:CE:E3:D2:8D:70:20:36:27:75:9B:74:C1:1F:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/4044bbf2-5435-3a70-aa48-fc48565669d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl

            X509v3 Authority Key Identifier:
                keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.137.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:1f:37:7a:d0:5d:c9:70:53:a4:48:25:10:4f:be:27:47:12:
         da:eb:16:fa:91:07:c8:32:fd:fa:aa:ac:62:44:76:1b:1a:32:
         dc:c3:af:60:0c:5e:85:55:c1:2a:ff:c2:60:98:55:9e:00:a2:
         78:ba:c8:96:14:30:c6:3b:fa:72:45:43:30:5e:b4:99:63:4c:
         85:66:72:a0:ae:b7:16:c2:d2:d5:4a:f2:a8:d1:79:83:dc:1e:
         4d:5e:d6:8d:4a:da:3c:91:8d:9b:12:7e:b2:a7:6b:7d:fd:2e:
         5d:2c:c6:56:d5:02:60:02:40:e9:87:a8:ea:d6:7c:94:c5:43:
         84:b5:6d:66:b6:cf:60:1a:96:ce:ae:15:7a:3d:0f:b0:a4:df:
         5e:2d:e3:61:f7:32:42:2d:1b:a4:4c:09:73:5b:24:2a:de:e6:
         19:77:ed:4b:d3:3d:7f:36:5a:66:e6:6c:e3:42:37:d4:89:94:
         8d:a2:91:a3:ef:89:1e:15:ba:e1:4b:8d:c7:7f:61:de:fa:4e:
         35:9a:e3:07:63:51:9a:83:49:2e:a7:a5:27:cd:b7:e3:33:a3:
         8e:5a:ff:87:c1:25:e7:f0:66:75:53:99:be:0c:e6:f6:1c:f3:
         96:97:40:1f:65:0b:1c:bd:d7:7d:6f:e0:5f:05:a4:08:69:b3:
         f9:8d:1c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:46:26 2026 by rpki-client