Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/630fa1c3-62ba-3aff-b4ca-42bdb0763470.roa
File:                     630fa1c3-62ba-3aff-b4ca-42bdb0763470.roa (raw, json)
Hash identifier:          NHBCJlBA2pZOGxWM/q1VMcC1zrSt5OdvIKEroi5l2Ck=
Subject key identifier:   9C:41:B3:00:BE:B0:F2:39:4B:F3:00:93:85:35:51:18:C8:49:48:A8
Certificate issuer:       /CN=a8825ed0-210f-48ae-8970-c92773afbb48
Certificate serial:       010D0C9F4328584D67DFFCE1009433C49F232E5C
Authority key identifier: BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/630fa1c3-62ba-3aff-b4ca-42bdb0763470.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     16766
IP address blocks:        208.122.51.0/24 maxlen: 24
                          208.122.52.0/22 maxlen: 24
                          208.122.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:fc:e1:00:94:33:c4:9f:23:2e:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8825ed0-210f-48ae-8970-c92773afbb48
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=87857395-622a-4f36-9321-206b8d18ccd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0c:b9:5c:6f:28:f6:e3:cc:e5:53:dd:2d:d8:
                    01:1a:7b:9e:76:cd:83:64:01:ce:f7:37:5c:0c:d0:
                    cc:45:f0:50:f5:07:cb:0f:90:28:3c:26:55:a5:49:
                    d9:67:1f:be:f1:a0:ad:76:de:76:e1:c4:72:ac:39:
                    2d:3d:01:16:71:f2:6d:68:3a:7e:1e:da:1d:b0:40:
                    3b:b5:2c:42:9d:d6:c9:1d:18:1a:ad:a6:1f:fe:90:
                    d0:62:92:43:a2:dd:69:8d:e7:2e:98:4c:c2:dd:31:
                    13:28:01:37:4b:c8:50:5f:bc:79:d8:f5:15:3f:01:
                    86:e8:f8:5c:c6:c0:fb:2c:65:0c:38:ff:37:3a:b7:
                    5c:78:ed:5b:97:e2:d3:b5:63:79:03:7e:b6:24:19:
                    f8:64:0c:3b:6f:08:e5:c3:3c:68:46:5e:54:41:33:
                    ba:f9:2d:47:b2:72:7b:d8:e8:09:a4:2a:bc:e7:9d:
                    57:11:85:2a:06:db:b4:23:69:91:e6:20:67:9a:46:
                    3d:83:41:3d:7f:0d:86:c9:b2:04:c7:03:c4:0e:32:
                    43:a1:e6:38:6c:bd:a7:ec:ac:7c:27:58:c9:f5:25:
                    1d:b1:9b:6c:7f:8c:c2:74:34:6d:a3:f3:01:50:21:
                    01:8b:5d:50:4b:59:5b:fc:ac:83:a8:de:d6:0b:b9:
                    28:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:41:B3:00:BE:B0:F2:39:4B:F3:00:93:85:35:51:18:C8:49:48:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/630fa1c3-62ba-3aff-b4ca-42bdb0763470.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl

            X509v3 Authority Key Identifier:
                keyid:BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.122.51.0-208.122.59.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:76:03:d8:19:83:cb:fb:9c:55:1e:a3:ea:0f:68:07:83:9b:
         ed:2e:30:51:46:5b:84:81:8c:3d:44:c2:f5:38:7b:db:6b:d4:
         5d:d2:26:85:bb:6e:06:06:8e:c4:01:5e:29:cd:8f:e1:49:8f:
         da:65:b1:de:0e:ca:97:03:68:a0:9a:3f:b7:e3:db:17:a9:9c:
         5e:48:16:d7:98:ed:84:29:5d:7a:49:dc:18:aa:3f:98:e7:6f:
         17:10:7e:9a:5a:17:99:c7:d3:db:5d:99:25:ce:d5:af:bb:9e:
         b5:a3:51:9a:01:d8:d5:3b:84:44:eb:1b:89:07:0e:06:f8:4a:
         d6:b4:11:ab:b1:31:05:e1:72:c0:87:37:1b:7e:60:64:20:0f:
         23:36:ff:f5:9a:47:9a:62:ae:56:5e:ca:58:8e:15:c1:e1:de:
         9a:08:49:c3:a7:7b:23:81:71:14:b1:2d:93:bf:d8:75:74:e4:
         27:32:a9:0a:3c:d0:c4:44:08:3b:e7:73:d2:88:89:a0:c6:6c:
         89:11:1f:09:b0:fa:f3:0b:bc:b6:49:62:39:73:25:c7:f9:db:
         53:e3:f3:7e:17:fe:7c:26:4a:d5:7c:23:03:3f:14:e4:15:63:
         10:70:39:da:11:1a:9f:0b:45:ed:fe:a5:6e:4b:71:76:cc:06:
         19:f3:55:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:30:48 2026 by rpki-client