Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/474bb24d-5bd4-332a-9955-1eee447e9cf5.roa
File:                     474bb24d-5bd4-332a-9955-1eee447e9cf5.roa (raw, json)
Hash identifier:          1A3nbAafgw4t6liaVKPaYBoHDWYPMMB+k6FXXRyScIk=
Subject key identifier:   78:B3:07:B8:E1:A1:E0:13:1A:FB:B9:85:FE:63:A8:96:D5:42:DF:10
Certificate issuer:       /CN=a9d449fa-f08e-4170-95fc-cd3217049f27
Certificate serial:       010D0C9F4328584D2A74EB1068A1846CA2417480
Authority key identifier: 12:FB:7D:7C:B7:41:01:23:16:58:6A:79:5A:13:90:EF:23:19:34:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/474bb24d-5bd4-332a-9955-1eee447e9cf5.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     19605
IP address blocks:        208.52.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a9d449fa-f08e-4170-95fc-cd3217049f27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a9d449fa-f08e-4170-95fc-cd3217049f27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:eb:10:68:a1:84:6c:a2:41:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9d449fa-f08e-4170-95fc-cd3217049f27
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=2c6f7a41-bf83-445a-ad47-33fa7cd2e79f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:05:bc:5d:46:a8:4a:13:69:38:39:e6:f7:0f:
                    a1:c3:f2:2b:b1:75:3a:7f:79:0a:6d:d8:b6:98:06:
                    ce:67:f1:05:3c:c4:43:74:26:2e:cc:18:a8:36:fa:
                    05:70:bc:53:cc:3d:dd:c0:2a:ec:ad:9b:50:b6:af:
                    26:24:b1:e1:7b:a5:7a:0f:b3:90:fb:ef:57:70:69:
                    06:b1:8a:25:7f:b4:41:b5:3e:0f:92:5c:2d:69:f2:
                    39:08:0e:99:9a:8c:d9:6f:29:b2:1e:a8:80:6f:66:
                    bd:d3:c7:c3:2d:c8:48:fd:1b:28:75:c8:91:91:0b:
                    14:e4:44:5d:e9:b8:2f:bd:7d:c1:11:02:e7:dd:6a:
                    fd:ab:dc:0d:e7:32:68:85:e6:37:b1:51:6a:6d:3a:
                    f9:53:14:9f:35:43:6a:76:cf:d2:8c:63:01:40:c1:
                    64:dd:05:74:c3:d0:c9:cd:02:7c:0e:2e:26:72:db:
                    8b:9b:f2:84:60:d8:84:02:c7:93:40:78:a4:28:68:
                    88:ee:3e:2b:38:ef:3a:01:47:4c:12:28:47:8b:4d:
                    3b:32:2c:27:7c:e3:f0:14:47:89:b1:16:6c:4c:a9:
                    16:ca:be:3d:a3:5e:16:ff:db:9e:bd:33:d0:f3:6b:
                    8c:70:3c:00:7a:85:08:61:28:92:6c:0e:37:0b:12:
                    ed:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B3:07:B8:E1:A1:E0:13:1A:FB:B9:85:FE:63:A8:96:D5:42:DF:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/474bb24d-5bd4-332a-9955-1eee447e9cf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27/a9d449fa-f08e-4170-95fc-cd3217049f27.crl

            X509v3 Authority Key Identifier:
                keyid:12:FB:7D:7C:B7:41:01:23:16:58:6A:79:5A:13:90:EF:23:19:34:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d449fa-f08e-4170-95fc-cd3217049f27.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.52.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:b9:1e:96:af:e2:f9:4e:07:05:f3:70:d1:3b:4b:c5:be:fb:
         dc:1f:e0:0b:9e:46:2a:c2:3a:30:c3:be:85:f8:0d:97:a7:bc:
         79:f7:35:db:ec:43:f9:47:80:32:b8:ae:15:1f:22:1a:52:7d:
         c5:f6:15:ed:93:2e:50:50:56:59:0d:1f:41:95:2f:09:83:97:
         24:d8:fd:f9:66:58:07:7a:07:3e:c2:ca:7c:f1:78:32:c6:2c:
         c8:2d:df:e9:ba:94:9e:e1:6d:1c:7e:05:87:4d:2d:07:6f:79:
         71:0d:32:e8:0d:8c:4b:d8:ab:f9:19:6c:7a:ff:0c:f7:51:95:
         fb:13:bc:0d:1d:5c:70:7c:b9:9f:ba:e4:77:92:71:99:1f:ec:
         86:f0:d8:8a:85:db:c6:c0:88:27:ba:f7:45:ea:a9:2f:05:18:
         10:7e:99:38:95:45:25:85:6f:82:06:72:22:d7:96:98:3e:b3:
         1d:53:41:cf:46:2c:4b:9c:b6:8c:c9:7d:1f:4f:1b:18:7f:5f:
         bb:a4:38:f8:41:37:90:af:1c:d4:d5:0f:aa:f3:8c:a0:13:2d:
         8b:4a:bd:3f:4d:8b:64:b9:37:df:3c:d1:cd:65:52:03:fe:98:
         7c:2f:51:36:10:d6:ec:d9:69:f9:4f:bc:e9:6b:ba:bb:7b:7f:
         c2:95:80:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 05:51:54 2026 by rpki-client