Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6288b107-8745-49f8-b949-e602f91d5026/08fc9025-57ac-3ac6-b75c-483c6d02f044.roa
File:                     08fc9025-57ac-3ac6-b75c-483c6d02f044.roa (raw, json)
Hash identifier:          GAcju0cvJuDbwSnKx147b7tM7t6rEdIr/XYh7up87lM=
Subject key identifier:   F5:BB:A3:AA:98:59:AF:B9:39:34:F8:8F:AF:BC:C3:30:D8:E1:21:ED
Certificate issuer:       /CN=6288b107-8745-49f8-b949-e602f91d5026
Certificate serial:       010D0C9F4328584E2D9F1473E7536FFDCD045500
Authority key identifier: F0:DC:CE:63:8F:B0:25:4F:5B:05:A0:04:1C:CA:11:B2:47:7C:24:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6288b107-8745-49f8-b949-e602f91d5026.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6288b107-8745-49f8-b949-e602f91d5026/08fc9025-57ac-3ac6-b75c-483c6d02f044.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     23462
IP address blocks:        208.71.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6288b107-8745-49f8-b949-e602f91d5026/6288b107-8745-49f8-b949-e602f91d5026.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6288b107-8745-49f8-b949-e602f91d5026/6288b107-8745-49f8-b949-e602f91d5026.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6288b107-8745-49f8-b949-e602f91d5026.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 24 Jun 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:14:73:e7:53:6f:fd:cd:04:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6288b107-8745-49f8-b949-e602f91d5026
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=c3ffd91e-ed6f-4aa4-becb-f4d71755ad54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6c:08:02:9c:e5:96:09:2b:32:fc:ed:15:65:
                    23:8d:6f:ba:87:c9:b3:74:3e:c9:28:eb:9d:58:0e:
                    df:9d:eb:bc:24:9d:1c:11:70:be:cc:cd:80:1b:41:
                    23:23:68:3a:78:ac:0e:91:6f:67:94:73:d3:81:e6:
                    ef:f5:f4:1e:4c:27:dc:13:d3:94:dd:43:60:e0:a9:
                    b2:0a:34:e5:67:c3:dc:a1:4e:e1:cf:3a:b6:bc:fc:
                    78:26:4c:41:44:1a:57:ba:91:b0:80:14:ef:d7:1a:
                    5b:93:50:9e:57:06:b7:99:e1:bb:9f:4a:56:d7:7a:
                    21:95:47:50:49:41:de:5d:1a:d8:cb:6a:90:12:24:
                    3d:65:e9:0f:5e:5b:bd:81:54:0e:99:8c:d5:8a:b2:
                    4b:90:a2:56:1d:55:08:97:fd:aa:b1:21:0b:76:f9:
                    7b:43:a2:23:db:b4:de:db:e2:19:67:da:63:e0:8c:
                    78:0d:8a:d5:dd:c4:4e:43:82:9d:44:2d:7f:76:e0:
                    39:a0:7b:5e:c0:c9:49:7d:60:02:ff:c4:c9:e3:07:
                    df:22:6b:64:dd:33:31:b4:16:98:96:49:68:fb:16:
                    e3:1a:8c:65:17:0d:63:5a:cf:22:4e:eb:f4:1a:26:
                    8b:87:62:bc:a4:21:79:72:b6:ac:ca:e3:44:2f:67:
                    a4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:BB:A3:AA:98:59:AF:B9:39:34:F8:8F:AF:BC:C3:30:D8:E1:21:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6288b107-8745-49f8-b949-e602f91d5026/08fc9025-57ac-3ac6-b75c-483c6d02f044.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6288b107-8745-49f8-b949-e602f91d5026/6288b107-8745-49f8-b949-e602f91d5026.crl

            X509v3 Authority Key Identifier:
                keyid:F0:DC:CE:63:8F:B0:25:4F:5B:05:A0:04:1C:CA:11:B2:47:7C:24:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6288b107-8745-49f8-b949-e602f91d5026.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.71.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:04:f0:23:c0:a9:7f:2a:44:3b:85:03:fe:44:39:2e:2d:37:
         ed:29:28:80:3f:90:a5:2b:8d:b0:e7:38:a3:53:8c:b1:c7:a2:
         b1:c7:07:80:fc:cb:c9:96:97:32:38:30:27:31:43:e0:ba:52:
         2a:ab:df:d5:26:cc:e4:d3:a0:9d:cb:65:12:11:ee:da:1d:56:
         a1:61:13:91:36:a6:e1:ca:d7:ce:4e:20:c0:87:19:72:fc:5c:
         70:61:20:36:b3:f4:83:35:a5:71:f9:0f:d3:0d:95:c0:5b:c8:
         57:b8:a4:1d:b7:92:a9:f5:c8:34:81:50:01:70:bb:fb:65:88:
         49:94:05:3b:df:06:d4:77:f9:20:0d:7e:76:0c:75:3a:a6:51:
         10:25:67:73:4a:0f:92:f4:38:cf:d5:48:13:f2:d6:e1:d7:60:
         5f:a8:0c:b4:0a:2a:cb:81:06:8c:83:a9:3b:aa:cd:31:cf:48:
         42:1d:56:13:6d:4e:43:f0:ca:75:1b:2e:8e:45:c9:eb:6c:41:
         d2:9d:ef:6c:d0:95:a4:df:fc:61:5b:02:69:1d:47:dc:87:35:
         52:3c:15:e7:da:54:ef:9a:f6:41:ff:aa:03:5a:41:5e:ba:8d:
         7d:3b:7b:9c:67:62:c5:00:ba:00:d6:6a:37:dc:34:7c:0f:de:
         5c:e1:72:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 23:10:53 2026 by rpki-client