Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/3298f122-5e93-3fd2-a5ee-4b25fbaf12ea.roa
File:                     3298f122-5e93-3fd2-a5ee-4b25fbaf12ea.roa (raw, json)
Hash identifier:          n/yTTKKfPXxYNpwQlDDAh+HEFcz12u9GRE7YZwHlyXk=
Subject key identifier:   DE:4F:57:AA:E3:C3:7F:E4:2C:84:C0:45:5E:C5:35:12:6D:47:C2:C7
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584D24E03F9DC3DF0ABE00E70540
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/3298f122-5e93-3fd2-a5ee-4b25fbaf12ea.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     36040
IP address blocks:        208.117.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:3f:9d:c3:df:0a:be:00:e7:05:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=c9166663-c5c0-4416-b469-e25cff8df47a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:86:15:f7:6d:d5:64:bd:56:ac:f6:f7:55:b2:
                    fe:3c:88:0c:67:d8:50:61:9a:93:67:4a:cc:0e:e2:
                    3c:95:35:b4:84:88:e6:f9:11:cd:5e:78:09:59:0a:
                    99:20:fa:9a:af:02:b1:68:0e:f4:11:6b:ea:c4:b7:
                    8a:a0:23:2a:fc:ae:44:ba:fb:e4:67:25:da:24:a3:
                    64:95:d2:b3:57:6f:fc:ca:84:80:4f:2b:c3:35:1b:
                    b4:5e:19:f4:80:82:dc:d8:99:f3:e1:64:28:a9:c5:
                    e8:84:9e:69:15:06:ab:9d:06:7d:b0:0a:19:dc:7a:
                    da:21:cd:a8:2b:1a:7c:6c:65:12:57:7f:df:11:19:
                    40:a7:8b:f4:81:47:f2:0c:2d:43:15:d1:e8:a3:2d:
                    d3:c8:fc:57:7d:3e:35:4c:ef:dd:07:b5:50:fe:cb:
                    d8:b4:9e:29:9e:9b:87:58:f2:10:cc:1a:e7:b0:59:
                    97:38:4f:b1:92:ad:a0:b7:2b:9c:06:d4:01:d6:1a:
                    d6:4f:cf:d6:08:3b:d1:b6:72:57:f7:1e:3f:df:4c:
                    0d:7d:d3:99:f7:9e:e8:97:b3:c7:bb:3c:b3:20:f5:
                    cc:57:1b:36:90:a2:78:1f:2a:11:02:a4:fb:13:7a:
                    6f:5d:22:69:96:c5:fd:63:ca:d1:71:c6:6c:81:60:
                    7c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:4F:57:AA:E3:C3:7F:E4:2C:84:C0:45:5E:C5:35:12:6D:47:C2:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/3298f122-5e93-3fd2-a5ee-4b25fbaf12ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:2a:00:d0:5f:37:9f:89:3b:95:38:9a:f3:39:29:ef:ac:00:
         e7:5a:42:17:61:61:29:54:5f:ce:5b:25:65:a2:5d:8a:75:41:
         38:7b:64:74:cd:be:83:66:0a:4f:0b:06:26:cc:fd:04:2b:b3:
         02:95:da:0c:5c:32:c6:24:c9:ab:34:85:41:78:e0:95:93:21:
         82:16:20:97:18:64:76:ba:ad:c5:fe:aa:85:4b:52:f9:4e:c4:
         b1:e8:3e:a4:97:fa:6e:7c:a4:d3:ab:98:35:89:6e:50:04:5b:
         d8:d4:43:5e:45:fe:c6:59:26:f8:13:f8:4c:09:07:3f:3c:03:
         01:a1:b2:c0:d3:df:06:f3:51:5c:32:c0:4a:fe:8e:64:e6:e2:
         99:77:0c:33:d9:02:ef:86:e2:c9:3f:e5:0f:61:5c:99:0f:5c:
         d7:82:82:1b:77:cf:60:9e:26:c4:cc:6f:93:02:10:14:86:fb:
         30:85:ca:97:5c:1e:bb:76:e2:c9:4c:6d:d5:0d:b1:c2:82:12:
         4c:ca:06:e9:67:71:90:52:ae:55:61:6b:d7:dc:33:6b:83:0b:
         09:bf:e7:f5:84:f9:c8:2d:09:0f:a9:10:2e:a6:4a:9f:52:c2:
         81:5d:e1:cf:d8:cf:92:19:ae:d4:0f:99:c2:e1:e7:2d:c7:c8:
         e8:31:be:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:59:57 2026 by rpki-client