Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c39c90a0-ee66-4964-918e-0296541e3ad8/c58d42bb-7c2c-3299-8555-308259e1639d.roa
File:                     c58d42bb-7c2c-3299-8555-308259e1639d.roa (raw, json)
Hash identifier:          i6lqKAm5ZdfkN7HjwNxC1mVZ5JWlE+zK/DqMZ6tnLP0=
Subject key identifier:   80:69:B6:7D:D2:EE:8E:E7:BE:42:59:48:A3:3D:8D:56:D7:91:64:82
Certificate issuer:       /CN=c39c90a0-ee66-4964-918e-0296541e3ad8
Certificate serial:       010D0C9F4328584CAAFC3DD48B72D0DA1E209480
Authority key identifier: C4:E2:8A:79:21:38:3E:E7:EB:2E:97:C7:D7:1E:04:29:97:E1:02:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c39c90a0-ee66-4964-918e-0296541e3ad8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c39c90a0-ee66-4964-918e-0296541e3ad8/c58d42bb-7c2c-3299-8555-308259e1639d.roa
Signing time:             Tue 27 Jan 2026 21:10:18 +0000
ROA not before:           Tue 27 Jan 2026 21:10:18 +0000
ROA not after:            Mon 27 Apr 2026 20:10:18 +0000
asID:                     7029
IP address blocks:        208.79.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c39c90a0-ee66-4964-918e-0296541e3ad8/c39c90a0-ee66-4964-918e-0296541e3ad8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c39c90a0-ee66-4964-918e-0296541e3ad8/c39c90a0-ee66-4964-918e-0296541e3ad8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c39c90a0-ee66-4964-918e-0296541e3ad8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:aa:fc:3d:d4:8b:72:d0:da:1e:20:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c39c90a0-ee66-4964-918e-0296541e3ad8
        Validity
            Not Before: Jan 27 21:10:18 2026 GMT
            Not After : Apr 27 20:10:18 2026 GMT
        Subject: CN=cd42e835-a139-4655-9411-7fba3d7de556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:27:db:49:1e:24:f8:1c:db:79:12:4e:16:ae:
                    be:4b:9f:f5:99:9e:07:4b:d8:4a:ae:8b:7b:0a:26:
                    19:3b:5a:48:e8:f3:90:73:39:6e:ce:f5:8c:1a:f9:
                    0e:a9:2a:99:eb:0d:6f:7b:5a:85:35:f0:a7:7b:9b:
                    dc:67:4b:a1:cd:9c:cf:03:0e:69:50:2e:ff:46:21:
                    7f:ff:c3:bf:30:32:60:16:da:ac:d4:27:29:7f:ed:
                    7a:82:2a:b9:bb:a5:e7:00:4d:13:5f:e5:de:4e:6b:
                    0d:b3:de:19:2f:d1:99:b2:da:41:27:d2:a6:38:45:
                    91:5b:8d:c2:63:f9:ea:7d:c5:18:63:97:38:f6:6c:
                    e2:c8:7b:f3:8b:87:ca:fa:12:16:44:1b:a2:a0:03:
                    5b:dd:6b:20:56:00:d4:22:92:2a:3e:9a:ba:91:95:
                    ae:4c:37:59:6a:c1:ce:24:5f:1b:cd:a0:5b:58:15:
                    a4:92:6e:cb:fa:62:6c:ac:76:6f:42:32:92:08:5d:
                    26:25:a6:76:d2:15:18:78:a6:41:fd:01:77:7c:b6:
                    6d:11:f5:cf:17:65:15:ba:f2:28:04:d0:e5:26:89:
                    f6:e1:bb:c5:85:a8:3c:48:88:c6:14:6d:d2:9b:95:
                    9c:68:69:b6:05:b8:13:96:4c:46:46:14:b7:b2:af:
                    78:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:69:B6:7D:D2:EE:8E:E7:BE:42:59:48:A3:3D:8D:56:D7:91:64:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c39c90a0-ee66-4964-918e-0296541e3ad8/c58d42bb-7c2c-3299-8555-308259e1639d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c39c90a0-ee66-4964-918e-0296541e3ad8/c39c90a0-ee66-4964-918e-0296541e3ad8.crl

            X509v3 Authority Key Identifier:
                keyid:C4:E2:8A:79:21:38:3E:E7:EB:2E:97:C7:D7:1E:04:29:97:E1:02:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c39c90a0-ee66-4964-918e-0296541e3ad8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.79.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:df:c0:00:3f:45:c5:8b:c7:71:d5:e3:8b:fd:67:50:8e:aa:
         70:3d:29:d7:1b:96:54:b4:de:b8:2f:b0:40:01:66:b0:dc:15:
         e5:c2:ce:ce:70:08:45:4f:28:3d:65:08:38:a6:62:80:57:c3:
         d9:3f:ad:bb:c9:d1:e8:0e:b1:27:8c:c4:55:d4:91:9b:93:e0:
         dd:05:1b:ee:64:f0:d6:fd:f7:4d:77:6f:3e:21:db:e4:e1:70:
         36:4b:98:a9:34:72:ee:29:b3:c0:1f:3e:ed:56:25:d0:38:07:
         17:4d:b6:1e:c9:e4:f6:a2:77:76:45:16:50:91:10:1b:8b:ca:
         92:1c:c0:77:e7:bd:98:60:f6:16:0c:8b:16:3a:93:39:b8:b7:
         39:81:70:2b:49:ff:a7:ca:c4:b9:a9:c2:18:80:e1:8b:f0:08:
         0f:59:fd:d4:64:bc:2d:1e:6f:ec:f9:e5:c8:02:f9:3f:da:ba:
         b8:5a:46:47:54:c2:cd:92:aa:d7:58:cd:c0:47:92:bd:b0:c0:
         1a:9e:0f:72:8c:1c:32:e1:af:83:fb:84:a6:e3:81:4e:46:42:
         8b:40:6f:c1:78:0e:73:e7:c5:7a:1b:c5:79:0a:3b:47:d5:8e:
         52:18:c2:65:9d:9f:c9:e5:96:fd:0e:96:0d:ed:51:b7:c8:8a:
         5d:71:81:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:46:49 2026 by rpki-client