Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18/7527f743-2278-3ef2-aeb2-cc3dd95380bf.roa
File:                     7527f743-2278-3ef2-aeb2-cc3dd95380bf.roa (raw, json)
Hash identifier:          Q3Eo/pBDrF4oc9zoM0l9FqPHDKZNDEju7LFVb1suwnM=
Subject key identifier:   10:97:09:D2:8B:65:A6:E8:BA:5B:C5:EC:7B:28:7B:83:AF:25:11:7E
Certificate issuer:       /CN=5937a29a-1b30-48a0-ad3c-37d4a97ffe18
Certificate serial:       010D0C9F4328584E66DA0CCE2F870A4CB8720340
Authority key identifier: 83:9F:E5:51:A0:D2:09:AB:21:3E:8D:4D:B5:CD:63:25:6C:B1:B4:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18/7527f743-2278-3ef2-aeb2-cc3dd95380bf.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     40860
IP address blocks:        208.93.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18/5937a29a-1b30-48a0-ad3c-37d4a97ffe18.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18/5937a29a-1b30-48a0-ad3c-37d4a97ffe18.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:0c:ce:2f:87:0a:4c:b8:72:03:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5937a29a-1b30-48a0-ad3c-37d4a97ffe18
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=40d72c55-da55-4b00-8d79-add7ef08463e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c3:fc:0a:2c:4e:f9:dc:19:e3:ad:cf:56:61:
                    8b:38:6d:20:b7:4f:13:fe:db:65:6e:00:d7:a3:c9:
                    63:34:6d:fc:5b:ed:6b:0d:1e:71:e1:02:3a:79:5a:
                    72:46:27:7a:3f:73:fa:f4:d6:47:55:35:f8:9f:69:
                    9c:b3:23:33:26:d4:38:d2:c5:9b:b5:92:dd:a2:3c:
                    d0:55:39:01:ec:3c:d7:62:02:fd:30:ef:c4:3a:d9:
                    12:23:d3:ad:37:01:a6:0b:5e:30:7e:77:c2:23:62:
                    43:93:81:47:27:62:c1:6e:e7:bb:39:0f:34:58:fc:
                    b5:7a:28:68:f1:c2:ce:05:e8:c9:b1:29:51:74:1c:
                    a8:35:ec:b0:f6:91:2d:f1:1c:b8:ca:65:ba:a2:4b:
                    e7:6b:c3:86:3a:af:ea:3a:1a:b6:d8:46:de:ef:b1:
                    fa:5b:5a:0d:e9:38:18:96:e0:b4:c5:67:46:5d:fe:
                    3d:0b:bc:74:fa:38:43:ff:e7:7e:3d:99:a9:5a:36:
                    de:da:17:65:1a:ef:d9:ae:ee:38:0e:56:9f:cd:58:
                    dd:c7:96:5d:eb:29:46:ce:74:43:7c:e4:aa:6e:86:
                    70:3f:3e:5d:3c:9f:ea:25:bf:fb:07:be:f1:21:96:
                    a8:1f:8c:9f:ae:ee:47:da:72:08:05:36:f9:0a:61:
                    34:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:97:09:D2:8B:65:A6:E8:BA:5B:C5:EC:7B:28:7B:83:AF:25:11:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18/7527f743-2278-3ef2-aeb2-cc3dd95380bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18/5937a29a-1b30-48a0-ad3c-37d4a97ffe18.crl

            X509v3 Authority Key Identifier:
                keyid:83:9F:E5:51:A0:D2:09:AB:21:3E:8D:4D:B5:CD:63:25:6C:B1:B4:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.93.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:51:e1:10:a0:aa:64:f1:a5:96:b1:af:9a:e8:d4:37:a6:58:
         f2:b8:03:2c:08:a2:2f:0b:90:52:08:88:97:8f:98:07:81:88:
         23:a0:b0:dd:c0:d7:24:b9:20:d3:fd:35:b1:12:80:94:4c:84:
         6a:1b:44:da:ca:05:d0:5e:8d:c5:da:31:99:cb:4c:db:bc:0a:
         8a:96:50:4b:26:88:6b:b0:3a:83:9b:28:73:e0:26:e2:cc:a1:
         4a:63:77:d3:ed:70:d2:45:b4:41:b9:e9:c3:f6:f4:e4:ca:58:
         37:fa:7e:ef:c2:1c:95:53:a5:c2:ea:33:5b:a3:4d:ba:10:f8:
         6b:7f:b8:99:98:f4:24:2e:55:ab:a6:e5:12:ef:13:4a:bc:57:
         cf:70:cb:24:b1:b0:35:8d:3f:cd:ad:95:bb:1e:3d:d8:88:3e:
         d2:62:d6:c7:a9:7b:d2:31:0a:4c:f7:27:74:fa:48:1c:88:c2:
         47:81:46:5b:1a:37:72:5f:20:b1:16:4f:8f:73:62:07:44:44:
         70:c5:e6:38:1d:bd:0b:15:d4:fe:e9:67:64:17:02:74:1c:c3:
         99:ba:7e:c3:5e:a0:bf:6d:61:0c:24:2c:59:bc:ab:5e:b4:97:
         99:42:f4:c8:75:b5:42:cb:d1:f9:99:52:bf:58:78:c0:54:14:
         27:ab:80:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:29:27 2026 by rpki-client