Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/933424d9-7724-3d56-928c-ad8645ab2fa2.roa
File:                     933424d9-7724-3d56-928c-ad8645ab2fa2.roa (raw, json)
Hash identifier:          QNzpGAJvoJVs4Dm4cEB5NKlDlWa6CkLAa/csNUOWPS4=
Subject key identifier:   B1:F3:AD:1C:17:92:83:83:1A:2B:2C:95:C2:B2:AA:54:06:5D:1B:78
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584D24E0E2AAFFEB87E5BB3C6960
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/933424d9-7724-3d56-928c-ad8645ab2fa2.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     36040
IP address blocks:        208.117.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e0:e2:aa:ff:eb:87:e5:bb:3c:69:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=85f3c45a-e9da-46ea-b903-6c01dfb3f831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2e:b7:4f:47:65:c6:c8:f1:b6:3d:63:85:9d:
                    19:6c:57:55:7f:b2:54:58:2a:6e:83:3a:c7:d3:ab:
                    10:ea:fb:b4:9f:2b:e0:ed:3e:9a:0e:e6:f1:a1:70:
                    43:ef:c6:24:26:27:ae:fd:c9:81:2a:46:34:1a:88:
                    cb:10:28:6f:4b:c2:f5:4d:8d:2c:ea:7b:21:82:dd:
                    11:40:33:8c:82:c4:42:8b:1a:e7:dd:4e:ce:25:27:
                    cb:f0:31:17:74:e6:b7:b8:b6:de:1b:70:24:00:97:
                    df:62:e6:22:54:6b:86:10:c0:b5:f4:94:88:41:24:
                    b8:bb:c3:6b:ed:31:68:39:34:9e:72:90:4e:e0:e6:
                    1a:e9:70:0b:fa:24:a9:0a:95:e6:94:8b:b8:0b:96:
                    2b:2f:4b:11:50:a2:37:95:4a:da:b9:ce:6d:da:13:
                    8f:d0:73:98:9a:6a:b5:c9:54:86:20:0f:ac:6b:76:
                    5a:57:3a:e6:cf:75:f0:5a:af:be:00:05:df:c4:e0:
                    98:01:ea:ce:52:46:84:78:4c:5d:b8:6c:d6:61:6c:
                    ab:f1:c5:fe:3b:f5:bb:c2:d5:4a:5d:0e:0c:0f:49:
                    7a:c0:58:18:63:54:84:84:6b:b6:4c:63:8a:f3:c2:
                    91:61:02:0a:f7:df:61:11:5d:fd:77:05:b6:75:60:
                    5b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F3:AD:1C:17:92:83:83:1A:2B:2C:95:C2:B2:AA:54:06:5D:1B:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/933424d9-7724-3d56-928c-ad8645ab2fa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:df:79:16:29:41:02:c2:26:bb:2c:bc:b1:2e:ed:65:be:3f:
         20:30:03:ae:8d:9f:30:22:fe:b8:79:37:2b:79:7c:ef:6a:87:
         79:ca:60:86:e9:01:fb:f0:69:b0:db:91:d0:18:b8:a8:90:ae:
         d1:92:c4:05:11:97:64:0a:3f:f6:12:80:1b:a5:04:26:db:fa:
         4a:8c:a9:9d:02:c5:b3:76:de:ac:e7:a6:79:7a:71:10:51:70:
         ef:99:04:6e:db:74:b9:36:c7:8c:e1:fd:de:8c:2b:cc:1e:e3:
         7a:88:be:f2:51:03:4d:37:bc:f7:a0:60:2d:bb:62:c1:6b:5b:
         42:e1:2a:84:1f:97:6c:20:4c:02:ff:f4:45:5e:72:b8:44:a3:
         e2:de:47:8f:8f:c6:ed:a3:6b:fd:05:f1:25:88:85:16:88:1e:
         8b:d3:2d:04:58:1b:7f:34:30:ad:43:2d:56:b2:00:e5:e3:1a:
         50:68:eb:75:38:f6:2b:88:47:ba:ee:df:6f:70:0d:66:01:d0:
         24:59:16:62:b1:65:93:2c:16:5e:20:92:d6:cd:0e:c9:f6:18:
         89:27:b4:21:23:7d:87:12:d9:ca:a9:f9:c1:5d:6b:6b:41:f7:
         13:04:5d:61:79:46:5e:bd:ae:99:c1:15:7a:97:9f:6a:6a:42:
         83:05:97:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 01:55:54 2026 by rpki-client