Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/8cebcc62-899c-3d22-821c-dd22d2bf3fb5.roa
File:                     8cebcc62-899c-3d22-821c-dd22d2bf3fb5.roa (raw, json)
Hash identifier:          v+FpOgRwJCWeRs/If7lx2iF947H0F1IOnXuK3Ezm3Pk=
Subject key identifier:   E8:75:34:E4:E7:D9:6F:EE:F4:1C:05:64:66:53:1E:46:5E:3D:DB:7A
Certificate issuer:       /CN=a2fa2878-715e-4793-af2a-432583ea0699
Certificate serial:       010D0C9F4328584D4D5A64A9A93E9094FF755370
Authority key identifier: E8:1A:65:B2:A5:60:D7:A3:F9:11:AD:15:54:EA:79:CA:95:ED:B0:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/8cebcc62-899c-3d22-821c-dd22d2bf3fb5.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     16509
IP address blocks:        134.195.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/a2fa2878-715e-4793-af2a-432583ea0699.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/a2fa2878-715e-4793-af2a-432583ea0699.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:64:a9:a9:3e:90:94:ff:75:53:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2fa2878-715e-4793-af2a-432583ea0699
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=95e4d971-1d21-46c1-a35f-a2d2bd91146a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8c:a7:46:a3:dd:08:47:92:82:df:79:d3:2f:
                    36:c1:69:4d:07:a1:ec:0a:96:b4:cc:40:06:74:cc:
                    dd:52:c5:f6:a1:79:8f:5c:59:38:2a:f9:3b:b4:86:
                    70:e5:10:5d:e4:5f:67:b0:25:54:d5:84:31:23:7b:
                    51:9e:1b:fa:2b:d0:bc:8d:ef:94:ff:0f:81:07:79:
                    3e:84:e3:0a:62:4c:92:5c:92:96:a9:3c:2d:29:48:
                    22:bb:58:ee:ea:c4:2b:ae:77:56:2a:58:c9:25:9d:
                    7a:c4:62:fd:97:b5:a6:76:d3:94:61:b3:51:60:5d:
                    59:39:f7:6e:f2:64:48:08:84:1a:3b:ab:43:d9:fa:
                    ae:02:22:09:ce:d2:06:10:d1:f3:ef:0b:47:c9:e3:
                    ea:b7:30:9d:66:1d:3f:f2:44:a7:fc:92:c1:e2:a3:
                    56:5a:d8:58:7d:0a:4b:22:c7:e5:e3:65:99:34:1f:
                    7c:ec:f9:b3:e9:51:28:4c:6e:30:ea:01:db:24:27:
                    c4:eb:b1:27:c1:58:84:22:b3:d3:f4:e4:a3:14:19:
                    69:ed:b5:4e:d7:87:07:35:0b:0c:10:64:a9:f6:ab:
                    b8:b2:d5:f3:dd:ac:e0:7b:35:18:37:aa:1e:bd:b7:
                    a6:37:ef:99:4c:fd:d3:96:6f:a0:c3:4a:b7:1d:c4:
                    28:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:75:34:E4:E7:D9:6F:EE:F4:1C:05:64:66:53:1E:46:5E:3D:DB:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/8cebcc62-899c-3d22-821c-dd22d2bf3fb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699/a2fa2878-715e-4793-af2a-432583ea0699.crl

            X509v3 Authority Key Identifier:
                keyid:E8:1A:65:B2:A5:60:D7:A3:F9:11:AD:15:54:EA:79:CA:95:ED:B0:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2fa2878-715e-4793-af2a-432583ea0699.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:1f:6b:05:64:40:bc:2b:f9:3e:3a:35:3d:85:6f:00:e0:c5:
         34:1e:5d:af:ab:89:be:10:fb:c1:47:ee:ae:2f:da:25:6d:d2:
         4d:29:f0:9b:09:51:05:e5:d8:e8:0f:49:40:71:8d:4b:1b:16:
         17:5c:bf:6c:76:ee:88:64:05:5c:f5:b9:5b:34:af:56:da:d7:
         81:85:64:f3:2e:af:ad:8d:48:2c:9e:ee:65:e2:06:13:d8:a6:
         3e:4c:dd:f3:03:d4:8d:32:bc:07:95:7e:5d:b5:00:40:6a:cd:
         35:1f:35:6e:81:d6:df:6b:15:13:12:54:ed:6f:5c:4c:d6:2b:
         03:76:7f:aa:01:3a:43:cf:d1:e7:4a:aa:79:a6:b4:16:e9:bd:
         8b:09:8b:3b:e5:87:5a:b9:ce:35:0f:b2:be:dd:e8:c1:95:98:
         f5:33:a4:a0:a7:4c:c1:42:4d:2a:78:16:07:13:be:78:63:fa:
         2e:dd:55:5d:f9:54:d2:d9:79:43:e1:06:b1:0b:79:e4:9a:44:
         cb:51:b2:7b:ed:ae:c2:e5:09:0d:50:a1:d3:23:29:c0:eb:ee:
         bf:d9:a9:07:7b:99:6e:d7:14:3a:ec:ad:80:20:8b:6a:a3:5d:
         a2:b1:86:3d:15:fa:40:f3:a7:42:29:ec:3c:9b:c1:a8:a8:76:
         dd:bc:95:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 11:30:56 2026 by rpki-client