Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/410764fb-ae4e-3b8c-bc5b-8b6db3c63fe1.roa
File:                     410764fb-ae4e-3b8c-bc5b-8b6db3c63fe1.roa (raw, json)
Hash identifier:          EXmV9giwmMMvDXitl/pe7QEV5Ts0PHRQjLdVXQp6ygQ=
Subject key identifier:   3B:A2:FB:14:71:D7:2A:6F:C9:54:F7:1F:63:5A:0B:79:21:87:3E:7D
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584E1AC79B61B0FBBB26EBE022C0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/410764fb-ae4e-3b8c-bc5b-8b6db3c63fe1.roa
Signing time:             Mon 08 Jun 2026 15:01:43 +0000
ROA not before:           Mon 08 Jun 2026 15:01:43 +0000
ROA not after:            Sun 06 Sep 2026 15:01:43 +0000
asID:                     3949
IP address blocks:        204.27.88.224/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1a:c7:9b:61:b0:fb:bb:26:eb:e0:22:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Jun  8 15:01:43 2026 GMT
            Not After : Sep  6 15:01:43 2026 GMT
        Subject: CN=83912cd5-e89e-4cb0-893e-085ccb5ee693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b3:68:e2:7c:e3:dd:e7:8f:ec:d8:32:52:3c:
                    bd:6b:3f:5a:9a:e0:fa:f8:78:1e:d7:e1:83:83:9f:
                    74:a9:9c:b4:62:78:2e:50:6b:78:89:c8:dd:e5:9f:
                    39:1d:e6:64:4b:25:04:57:5a:59:7e:7f:61:b3:ae:
                    ec:dc:b7:71:ab:8a:ca:ea:e8:90:2f:31:3b:35:e5:
                    ec:de:6c:ee:a0:79:b7:c9:f0:25:bb:25:30:fb:3b:
                    b1:0a:54:be:92:bf:a8:44:7e:5c:de:99:64:e9:ad:
                    fd:d1:17:9a:af:3b:ee:e9:2d:45:3e:41:29:58:8d:
                    98:ed:45:4a:e3:79:3e:9f:31:a8:0a:09:2b:d9:02:
                    ed:5e:71:10:fa:53:7c:b3:6f:f8:e4:3c:d3:e8:d6:
                    0a:02:44:eb:ad:74:0d:6a:44:87:e6:31:86:e9:7a:
                    be:72:38:8a:a8:25:6e:9c:aa:44:b9:f2:49:2b:22:
                    09:68:f4:c9:a7:07:25:44:67:5f:ca:99:d5:c0:a4:
                    3d:e7:68:2c:a1:9d:d8:b1:f5:97:cb:70:cc:be:15:
                    e7:37:56:4a:74:2b:df:16:a2:91:14:e5:99:61:51:
                    ba:6e:a2:3b:32:2e:b3:fa:33:79:67:75:35:5c:4b:
                    40:25:55:28:6c:b5:cd:92:ae:9c:db:3a:e4:81:87:
                    58:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A2:FB:14:71:D7:2A:6F:C9:54:F7:1F:63:5A:0B:79:21:87:3E:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/410764fb-ae4e-3b8c-bc5b-8b6db3c63fe1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.27.88.224/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:a5:22:75:3f:69:8f:3a:71:39:75:9b:79:e6:13:42:e4:33:
         24:01:1c:d2:57:02:11:1d:ce:40:f7:9d:90:1d:bd:70:93:b3:
         05:95:c5:5a:03:18:e5:3f:f9:c1:3c:19:ce:ed:09:e9:aa:51:
         b4:f1:f7:1c:fe:fc:d8:8d:c6:83:07:54:09:80:b4:2a:e7:e4:
         10:3b:f1:b1:e7:52:87:be:f0:0e:02:a8:4f:3d:3d:8e:b3:3e:
         9c:3a:00:7e:64:79:5c:e4:ea:e3:a9:da:97:8f:c6:ec:76:c0:
         cf:1f:70:42:10:e0:81:76:05:61:47:08:82:4d:89:ff:bf:14:
         aa:28:96:45:59:b2:1f:01:d8:5f:c5:45:b3:4f:b8:c5:2c:7a:
         5e:f1:f1:00:38:db:08:98:9f:70:5d:7b:41:50:20:80:d8:0e:
         06:98:f3:a5:37:a3:94:b9:b2:d3:3c:13:9e:a7:de:16:b2:03:
         8d:ee:9c:27:90:66:b3:59:ed:1c:8c:8c:2c:e6:6f:a0:27:bd:
         2e:ac:39:81:bc:2d:1b:7c:77:67:57:a7:2e:16:2c:3e:21:17:
         50:68:50:4d:54:4c:a2:56:78:be:43:38:0e:02:12:0a:91:ad:
         de:b1:79:20:fa:1d:e0:44:a1:13:44:3c:89:d6:10:be:dc:c1:
         2e:de:8c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 22:07:34 2026 by rpki-client