Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/40c350d8-3bc0-3793-8928-ecb678b7c49c.roa
File:                     40c350d8-3bc0-3793-8928-ecb678b7c49c.roa (raw, json)
Hash identifier:          5+sbG4QvQXjj0Y46mU/EfUuG2HC2CLDrFpzNwg7fn8Q=
Subject key identifier:   AC:42:1F:99:6C:9B:FC:66:20:19:17:D0:9C:4F:62:BF:AE:52:33:9C
Certificate issuer:       /CN=1e268aaa-6306-4988-99f7-d5802a67b577
Certificate serial:       010D0C9F4328584D0A779CD088672BBF17378000
Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/40c350d8-3bc0-3793-8928-ecb678b7c49c.roa
Signing time:             Tue 03 Mar 2026 02:00:32 +0000
ROA not before:           Tue 03 Mar 2026 02:00:32 +0000
ROA not after:            Mon 01 Jun 2026 01:00:32 +0000
asID:                     14593
IP address blocks:        204.48.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0a:77:9c:d0:88:67:2b:bf:17:37:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577
        Validity
            Not Before: Mar  3 02:00:32 2026 GMT
            Not After : Jun  1 01:00:32 2026 GMT
        Subject: CN=36a69dfb-f8f3-4479-af26-ad97a08fa196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e6:be:95:13:8c:9a:ac:ca:db:f8:ab:d0:2f:
                    7f:ec:a2:a4:81:6d:f4:89:2f:59:12:28:8f:f5:70:
                    65:93:03:25:59:6e:4c:c3:30:a3:fc:07:cb:6a:cd:
                    9b:27:39:79:12:4d:4f:85:ee:a7:8f:2d:35:b5:a6:
                    7e:55:2d:83:50:87:99:63:78:8c:74:92:b2:c5:7b:
                    72:04:d8:d5:1c:40:07:47:b2:8e:0c:88:17:22:11:
                    fa:72:72:93:be:b9:dc:7b:f0:e9:70:ca:6e:9a:85:
                    71:85:29:5e:aa:6f:93:14:bc:07:17:10:c1:46:36:
                    43:14:a4:0c:8c:22:74:67:01:2f:c9:16:2e:2a:dd:
                    5e:47:79:6c:73:da:1f:e7:10:6a:1b:6e:68:6a:53:
                    ed:a1:13:4a:8b:65:97:64:88:16:9c:76:1a:3a:36:
                    40:0e:58:d5:10:82:2d:e9:a7:77:f6:62:c8:8e:1c:
                    80:e4:70:f9:90:81:ae:4f:9c:ec:dc:42:cd:39:0a:
                    52:cf:d9:fb:50:10:e1:aa:4c:60:64:fc:3d:80:04:
                    2a:22:99:89:cf:68:4a:47:1e:c3:96:68:9f:a1:5b:
                    8f:a3:5e:9f:14:fe:21:c1:bc:aa:b4:ec:4f:47:9d:
                    2b:59:76:12:72:e9:77:02:43:f8:17:b2:23:be:04:
                    70:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:42:1F:99:6C:9B:FC:66:20:19:17:D0:9C:4F:62:BF:AE:52:33:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/40c350d8-3bc0-3793-8928-ecb678b7c49c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl

            X509v3 Authority Key Identifier:
                keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.48.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:20:b0:08:a1:32:cf:12:56:98:3e:f9:3c:e3:f3:de:6d:fb:
         65:f9:8a:2b:d6:7f:c6:f6:05:7f:44:72:85:d3:34:6a:34:59:
         97:f1:ac:41:b4:6c:c3:2f:39:9e:93:1c:06:16:9b:d4:5d:dd:
         91:13:73:ef:4f:e6:52:b5:f2:4f:de:ae:59:88:d7:79:d1:aa:
         c5:c3:62:14:32:5a:c0:73:30:6b:f8:2a:a7:de:b9:b4:eb:9e:
         96:cc:e8:cc:35:8a:d5:b1:86:4c:ad:6e:5b:da:f6:57:5a:24:
         af:da:16:14:d4:8e:41:61:30:b0:85:de:09:c1:f6:c3:70:57:
         fd:8c:1a:98:40:b1:ea:f1:48:f0:fc:af:f0:33:ba:ed:5b:0d:
         b7:0a:22:da:30:32:c2:ac:3c:86:3c:a8:e7:d3:92:08:aa:17:
         61:a7:dd:25:d3:28:f6:f2:6d:d3:c0:68:e6:dc:80:fc:58:d7:
         ed:fa:8c:e7:2d:c9:b7:bb:94:80:98:be:91:f2:f1:49:5b:ee:
         72:61:cb:c4:a1:9b:3a:ea:a4:0b:46:2a:3d:d2:d0:2f:4d:9b:
         17:09:0e:7f:31:15:bf:7b:b8:aa:f1:62:00:dd:34:9b:d9:b2:
         fe:32:81:f4:29:d9:3b:9e:1a:77:d4:44:a6:7b:84:82:b8:f5:
         d1:b8:17:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:14:35 2026 by rpki-client