Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/ebb7f3b5-edf9-3fe6-9230-f1b4ca389724.roa
File:                     ebb7f3b5-edf9-3fe6-9230-f1b4ca389724.roa (raw, json)
Hash identifier:          99yowIrotQWZqaUS6GqThF2ohlGKRLGyZgnbqDKrBI4=
Subject key identifier:   8D:AF:38:7B:CF:A9:2C:FF:D5:B7:72:03:ED:32:A9:FA:85:49:8A:E4
Certificate issuer:       /CN=876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c
Certificate serial:       010D0C9F4328584D5E1A6624ECE6F8B5C12A4780
Authority key identifier: 13:61:A2:4C:08:64:BC:39:33:E4:48:5C:D6:30:E7:8A:AA:9A:A4:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/ebb7f3b5-edf9-3fe6-9230-f1b4ca389724.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     14618
IP address blocks:        208.70.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Apr 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:66:24:ec:e6:f8:b5:c1:2a:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=6e12eebf-b96b-4f90-9966-c11fed70e191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:38:f5:38:74:da:62:f1:49:e8:01:7d:b5:46:
                    3d:bf:34:06:9e:89:80:3b:e3:9c:fb:93:2c:75:8c:
                    2a:54:8e:63:8f:9c:2d:02:b8:39:5f:b1:48:77:44:
                    51:89:9c:ea:32:6b:69:f6:ad:7e:95:21:95:fd:44:
                    aa:5c:c6:60:22:f1:a8:06:1c:10:36:f1:58:6d:b6:
                    83:ba:2e:9a:73:a5:77:4c:fa:17:5e:1c:8d:70:e7:
                    86:c6:de:af:36:4e:d3:1b:24:99:df:07:27:b0:cb:
                    dc:e6:71:42:f4:75:4e:36:a2:e3:9c:8f:a4:63:23:
                    95:e3:50:79:5b:96:04:1a:99:a9:f2:6f:c2:e1:7a:
                    02:b6:52:21:dc:b4:4b:cd:ee:78:50:b5:bf:64:c6:
                    b3:e8:49:0d:54:2d:24:f7:58:ee:09:4b:ef:d0:f9:
                    12:83:77:12:f1:ad:34:3b:49:3d:05:6c:82:46:5c:
                    5b:10:6f:1f:9c:03:cd:06:05:15:ad:68:b3:88:9e:
                    5a:61:2c:88:52:ea:a3:ac:f0:a8:64:b0:69:b2:2e:
                    90:14:c8:90:57:d1:22:2d:8a:7d:a8:b1:f5:7f:43:
                    f2:cd:63:9b:36:d7:cc:d1:00:53:9b:c4:16:00:c7:
                    a2:57:1b:4d:82:45:7f:b1:ab:98:ab:ef:85:5a:48:
                    e8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:AF:38:7B:CF:A9:2C:FF:D5:B7:72:03:ED:32:A9:FA:85:49:8A:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/ebb7f3b5-edf9-3fe6-9230-f1b4ca389724.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.crl

            X509v3 Authority Key Identifier:
                keyid:13:61:A2:4C:08:64:BC:39:33:E4:48:5C:D6:30:E7:8A:AA:9A:A4:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/876bb5a4-71e5-497f-a4a4-eb3f1a8afd1c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:96:97:a5:42:7e:49:a1:a8:3c:23:01:50:c8:01:22:f4:7a:
         f4:3f:39:c9:25:f3:71:db:a5:4f:fc:31:58:7e:f7:8b:68:ea:
         5a:93:69:af:42:3f:41:00:2c:a8:c8:a6:20:47:3e:64:d8:76:
         3d:97:86:aa:43:83:c0:60:04:6b:31:fb:a1:6f:2d:1f:c5:8a:
         22:1f:a5:9b:15:f3:de:d9:05:6d:bc:8b:b9:96:a3:91:80:cc:
         c0:a9:40:b9:41:b7:5c:7f:e0:2b:41:74:5e:75:56:ca:ef:33:
         3a:96:70:98:38:95:66:ad:f7:83:c9:e1:14:13:92:12:60:6e:
         df:1c:e0:20:e0:6e:0d:55:cc:cb:ed:9e:b1:21:54:df:93:31:
         98:ee:c1:fe:ad:cb:f0:c5:4e:d9:99:78:4a:94:cc:92:92:87:
         68:20:53:e4:1c:93:c4:d2:e1:28:29:70:f7:95:eb:40:97:c0:
         ad:5c:91:b8:de:7c:39:45:6c:a3:d0:7b:a2:28:b1:c8:ad:d6:
         94:73:9f:f3:6e:24:64:75:c3:62:78:95:eb:6e:9b:47:cc:f1:
         da:28:3c:ea:0c:30:b0:ba:1b:a6:25:55:a4:3d:31:86:91:02:
         0f:e7:ea:ed:29:89:3a:59:86:76:26:cb:0e:56:66:1a:e2:b4:
         92:5f:17:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 18:52:23 2026 by rpki-client