Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0570ebae-fcff-332a-9a31-c6bb30ad19a9.roa
File:                     0570ebae-fcff-332a-9a31-c6bb30ad19a9.roa (raw, json)
Hash identifier:          QAeaxriolEv2kysFZvEOsnHpq6ilz3xfuqMNWx6ckuA=
Subject key identifier:   34:FE:23:40:7A:9B:7C:5B:58:C1:45:74:41:A5:0D:90:B0:81:E0:DB
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584DEDE0926197C8AFF360D90100
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0570ebae-fcff-332a-9a31-c6bb30ad19a9.roa
Signing time:             Sat 23 May 2026 13:00:31 +0000
ROA not before:           Sat 23 May 2026 13:00:31 +0000
ROA not after:            Fri 21 Aug 2026 13:00:31 +0000
asID:                     25668
IP address blocks:        208.181.120.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ed:e0:92:61:97:c8:af:f3:60:d9:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: May 23 13:00:31 2026 GMT
            Not After : Aug 21 13:00:31 2026 GMT
        Subject: CN=3ed5ba75-9b4b-4bf3-a9df-a7401e5e3cc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b5:d5:63:23:fe:81:bf:08:43:18:81:8e:49:
                    51:5f:4e:18:fb:7b:35:7e:ab:3a:d9:31:c8:a8:e7:
                    3d:e8:ce:ac:b3:cb:9d:1b:70:c8:33:28:fe:79:68:
                    c9:fb:2f:3f:3e:3e:de:b9:07:19:c6:77:61:3a:a9:
                    e3:92:50:3c:a8:b9:87:6c:84:7f:c7:58:9d:85:8c:
                    8e:cd:5c:6e:c0:17:55:c8:0f:16:c1:15:4a:7a:50:
                    c5:35:c6:86:c3:5c:48:67:ab:e6:34:61:34:22:cb:
                    9f:e2:c9:1a:49:1e:9c:1c:2f:86:9c:12:9f:d1:99:
                    75:cf:23:23:55:a8:44:cb:dd:3e:6f:d6:4a:ca:6b:
                    50:f6:88:50:e3:20:19:9c:8a:44:d0:9d:38:cd:af:
                    58:a4:46:43:33:e5:c5:7e:cf:17:2f:56:70:b1:fd:
                    dd:e9:1e:c6:99:8a:ed:7e:dc:80:e7:ec:7c:55:97:
                    e2:85:19:3e:f4:43:53:0d:7e:d3:ea:d8:5c:71:67:
                    8e:94:bf:3f:d9:75:67:0d:51:7f:5b:b5:7e:62:e7:
                    8e:b8:f0:4d:6a:03:99:d9:77:ab:69:55:ad:12:b5:
                    de:d0:8a:aa:31:11:07:20:76:3b:db:a9:f3:42:8a:
                    9b:39:65:6e:04:7f:16:06:4e:b8:69:be:1c:0a:fd:
                    16:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FE:23:40:7A:9B:7C:5B:58:C1:45:74:41:A5:0D:90:B0:81:E0:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0570ebae-fcff-332a-9a31-c6bb30ad19a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.181.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:ef:65:70:73:24:4a:a7:fd:d9:41:4d:5d:7e:fe:6d:39:94:
         07:af:8e:b7:aa:64:76:ba:8c:f6:ef:48:83:0a:7e:53:1e:e7:
         8f:09:fc:7c:b2:e2:f6:2f:dd:64:1c:88:72:6d:ef:c1:ab:06:
         03:dc:b8:a2:83:b3:7a:55:32:a9:33:9a:c0:74:b6:ab:dd:19:
         5d:e4:25:ff:0a:13:2a:75:a5:21:1d:ae:e3:d6:57:c5:18:fb:
         49:be:a7:80:1d:3f:2d:13:16:69:6b:34:93:77:5c:24:dc:11:
         f6:c6:5d:a7:88:74:bf:65:49:07:91:a8:43:69:ac:58:20:e9:
         fb:59:1a:cd:eb:da:b1:56:25:30:4c:9f:ec:4c:ff:77:66:3e:
         e4:9a:fb:85:b8:ac:24:43:12:a6:fe:e3:38:a8:03:4a:20:59:
         fb:2b:7d:b1:4a:9d:8c:f4:11:4a:62:42:c0:86:46:f9:62:f3:
         8c:f1:03:f8:79:f1:85:97:72:bc:99:85:c6:58:cc:4e:3b:2a:
         af:f9:39:70:63:1a:f9:22:d7:bf:2f:2d:74:65:b2:50:44:a4:
         9f:7c:3b:a1:f3:33:17:65:e3:05:40:88:47:67:ac:df:e1:5c:
         62:92:0d:9f:6f:1f:ab:94:26:27:e2:ca:e0:a9:85:89:de:62:
         23:84:98:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:49:32 2026 by rpki-client