Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/3131e6dc-7164-3f03-84c1-c68697ea362c.roa
File:                     3131e6dc-7164-3f03-84c1-c68697ea362c.roa (raw, json)
Hash identifier:          B2khH2QAkB3x2fEncfhW1SNlJ8RrzObAP9tlgicqskg=
Subject key identifier:   AD:E2:2D:D2:D4:F6:20:51:3D:59:FE:F7:B1:81:FB:17:6E:D2:33:C9
Certificate issuer:       /CN=804b1e4b-89d3-4769-bab1-38df1d9bb72e
Certificate serial:       010D0C9F4328584E508490A3969A663C5C2D2540
Authority key identifier: 55:03:65:2A:F7:7F:0C:AF:50:52:FA:C9:87:C9:4F:62:04:2F:B8:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/3131e6dc-7164-3f03-84c1-c68697ea362c.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     14618
IP address blocks:        208.80.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/804b1e4b-89d3-4769-bab1-38df1d9bb72e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/804b1e4b-89d3-4769-bab1-38df1d9bb72e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:90:a3:96:9a:66:3c:5c:2d:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=804b1e4b-89d3-4769-bab1-38df1d9bb72e
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=f17aad9d-6bb8-493b-bfcb-ee5a083491ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:1c:a6:bc:ce:88:1d:0c:a1:52:53:7f:96:56:
                    3b:7d:d8:e4:c8:72:82:1f:20:6d:dd:03:82:3f:aa:
                    78:4f:3f:c1:58:a2:b7:7a:58:25:3e:fd:34:b3:64:
                    cd:9d:f6:c5:4f:7c:ed:6e:94:73:7e:78:d3:19:10:
                    5b:92:dc:63:e7:e1:cb:2f:8b:ad:c9:7f:e1:3d:85:
                    85:c2:49:f8:3c:0a:8d:2a:2f:6b:73:51:88:78:34:
                    90:fc:5e:75:7b:42:d2:4b:56:9c:0c:c6:e6:82:50:
                    e4:32:9e:45:54:aa:17:73:9a:77:73:ea:f9:17:94:
                    52:47:7d:e0:a0:8a:67:d1:3e:21:f6:1b:f4:e3:2e:
                    71:f2:f6:2b:05:9d:65:c5:87:1e:e0:0a:06:c3:03:
                    b9:31:94:bb:41:33:32:a6:4d:ba:d5:0b:b2:9d:a5:
                    17:bb:28:ed:a3:cc:e3:89:51:33:e9:c6:44:da:5d:
                    71:e2:aa:58:da:2a:85:40:9b:38:95:d0:25:78:f0:
                    3e:1f:ca:b8:09:68:4f:91:27:7f:16:4b:a7:5d:b0:
                    20:22:86:e6:8f:64:30:88:cc:6d:c1:78:01:6c:2f:
                    c1:44:b1:85:d3:08:7b:46:e8:10:8f:e2:f6:f5:1f:
                    1a:7f:65:4c:fb:c6:ef:4f:1f:3c:d9:96:92:7f:13:
                    11:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E2:2D:D2:D4:F6:20:51:3D:59:FE:F7:B1:81:FB:17:6E:D2:33:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/3131e6dc-7164-3f03-84c1-c68697ea362c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/804b1e4b-89d3-4769-bab1-38df1d9bb72e.crl

            X509v3 Authority Key Identifier:
                keyid:55:03:65:2A:F7:7F:0C:AF:50:52:FA:C9:87:C9:4F:62:04:2F:B8:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.80.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:f1:7e:0c:00:61:13:a3:e9:c3:85:00:33:55:de:25:11:3f:
         ad:b5:cc:d4:18:e2:41:9e:d0:c1:64:3d:93:81:cd:30:b7:36:
         ff:3e:4e:49:4a:cc:94:df:d4:9b:70:33:c1:8d:b6:70:76:81:
         da:bb:d0:12:ab:b6:c7:70:68:05:36:8d:39:d5:05:43:2d:d9:
         90:8a:77:d7:dd:ac:64:b2:f9:ed:88:d8:dd:2f:43:4c:de:05:
         43:f7:0d:e5:5c:15:d8:00:77:a7:a8:f9:9a:34:dc:77:0b:a3:
         08:2e:67:46:7d:f3:bb:d7:98:d7:c3:ce:1f:6d:af:f0:90:de:
         c6:e1:27:0b:2a:10:fe:5e:b6:c4:59:c2:aa:49:fe:26:92:62:
         0d:42:47:8b:77:0c:2d:b9:db:70:8b:46:8d:ec:17:fc:2e:cd:
         49:b4:11:54:5a:11:2e:8a:ba:9b:1e:2c:15:0f:88:33:57:4b:
         fa:42:4f:3e:ea:f5:42:ec:90:0e:f4:a3:13:05:6c:89:bd:44:
         d7:01:a2:4c:32:0c:4f:c9:83:c6:8b:1b:51:91:19:50:52:2c:
         8e:3d:bb:bc:1f:af:54:3f:ba:7e:58:89:37:11:f9:38:ba:f0:
         ea:75:f2:0d:13:1f:88:f8:36:02:14:f5:40:57:46:c5:0f:55:
         30:e4:47:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:20:54 2026 by rpki-client