Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/38f063dd-85af-30ca-a06f-438b7cdcc141.roa
File:                     38f063dd-85af-30ca-a06f-438b7cdcc141.roa (raw, json)
Hash identifier:          BunubSKsD1nsU0YvsuHBwHWunSjca5YZiPy/TE4FSkM=
Subject key identifier:   8D:95:21:3E:27:12:A6:83:2B:B3:EF:36:A9:CD:68:B7:46:78:5D:D4
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F4328584CB551CA5441F8C8769DF22300
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/38f063dd-85af-30ca-a06f-438b7cdcc141.roa
Signing time:             Sat 31 Jan 2026 14:00:39 +0000
ROA not before:           Sat 31 Jan 2026 14:00:39 +0000
ROA not after:            Fri 01 May 2026 13:00:39 +0000
asID:                     54994
IP address blocks:        208.80.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b5:51:ca:54:41:f8:c8:76:9d:f2:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Jan 31 14:00:39 2026 GMT
            Not After : May  1 13:00:39 2026 GMT
        Subject: CN=63bae139-6a2d-48ca-a306-965a1622ea36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3f:cc:b4:54:21:a9:05:b1:f4:8d:c6:7a:34:
                    7f:8b:ea:97:47:c9:f5:ce:91:bf:1d:19:e0:09:56:
                    19:4e:30:3e:d5:77:0b:00:45:6c:fe:c2:65:80:3b:
                    d4:90:6a:f7:fd:b3:f9:c1:c0:18:ce:9f:a7:b4:7c:
                    13:cc:50:75:10:7e:e4:49:3d:61:ef:5d:8e:75:be:
                    a9:cf:dc:f7:56:f7:f0:48:b1:19:4e:5b:4f:f7:62:
                    1f:7c:5b:81:96:60:a2:7f:fc:68:20:5e:45:ef:ab:
                    44:9c:ab:56:29:c2:d4:02:46:7e:e8:1a:ab:4b:6f:
                    59:55:fe:fa:d1:55:f5:15:66:3c:2e:d6:fc:8c:09:
                    8c:fa:46:fc:8d:b4:89:53:ed:46:a5:59:c5:06:88:
                    ef:e0:46:e2:68:f3:69:70:2e:90:9b:46:1d:68:93:
                    d5:81:6c:fc:d0:d7:a5:d8:58:b2:09:46:fb:6c:59:
                    d5:f6:b9:e4:fd:28:92:98:6f:52:36:b7:ce:db:a2:
                    8b:72:d7:37:ad:f3:82:a6:a9:8d:9b:e3:ee:a6:14:
                    5c:f2:1d:e2:bf:a8:88:e1:07:13:9c:53:20:9d:dc:
                    ce:fd:5b:7c:51:f4:8d:da:8d:5b:1b:41:dc:34:dc:
                    3f:9d:f4:10:39:cc:ff:3d:2e:59:7b:1b:54:59:79:
                    2a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:95:21:3E:27:12:A6:83:2B:B3:EF:36:A9:CD:68:B7:46:78:5D:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/38f063dd-85af-30ca-a06f-438b7cdcc141.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.80.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:50:75:42:87:5d:61:9a:ef:71:76:1f:1c:93:42:2e:a0:43:
         a6:f4:ee:ec:f5:de:e6:9e:39:bd:ee:ef:7f:6e:6b:c3:ac:da:
         2f:2f:3c:3d:d9:ae:be:fd:d9:9c:27:1e:0f:25:1b:aa:44:b7:
         33:62:97:c3:2c:0f:1f:66:ae:0e:3a:b9:aa:03:c3:41:1a:c6:
         58:b6:f4:14:d8:74:ac:85:89:9a:fc:76:4a:40:bb:db:75:50:
         76:a4:23:53:e3:0b:c6:6b:96:a9:67:c0:73:5e:57:f1:cf:d8:
         bf:8d:fe:05:1c:bd:4a:0d:27:96:a2:2b:9b:56:66:92:3f:9d:
         c4:69:ec:41:e2:90:0b:d6:8f:34:60:4e:a3:a5:e0:2d:15:37:
         33:bd:bc:fd:96:ca:44:1f:21:d4:07:ae:68:bb:97:a2:c4:06:
         af:6d:0b:ba:0e:9c:d8:2c:cc:9b:f6:ba:60:37:fe:cb:e9:fa:
         55:46:6b:24:27:b5:1d:68:f0:e4:a0:c9:65:64:c0:7a:47:b3:
         a8:57:91:a0:45:76:74:4e:26:9b:98:02:72:41:98:1b:5d:04:
         2b:70:7e:1c:f3:3c:53:c1:ea:78:cc:62:f6:dd:d1:5c:fd:d1:
         6e:00:7b:3c:98:be:78:34:5e:86:90:67:4c:9c:2b:7e:74:7c:
         d2:16:0a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 16:40:47 2026 by rpki-client