Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/0437ef94-a3d1-3d91-8c55-98163b980798.roa
File:                     0437ef94-a3d1-3d91-8c55-98163b980798.roa (raw, json)
Hash identifier:          TdECX/6pJzzTnJsdzz8r6RfyD7DbYxccSPuZ+6FPYlM=
Subject key identifier:   DF:57:6F:5C:66:4C:90:0F:2C:EC:DE:02:18:EF:A7:0F:C7:BC:EE:38
Certificate issuer:       /CN=731b750c-b48f-4a57-bf26-18e0bc6a456e
Certificate serial:       010D0C9F4328584D6EDA5BEA507250A1CB12B280
Authority key identifier: 13:E4:1E:72:24:24:5A:D5:9A:CF:07:0C:CE:42:27:BC:80:6C:CB:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/0437ef94-a3d1-3d91-8c55-98163b980798.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     13649
IP address blocks:        208.89.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/731b750c-b48f-4a57-bf26-18e0bc6a456e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/731b750c-b48f-4a57-bf26-18e0bc6a456e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:5b:ea:50:72:50:a1:cb:12:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=731b750c-b48f-4a57-bf26-18e0bc6a456e
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=309f5216-d8e7-422a-b87f-a902f340a57e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9e:c4:41:02:18:02:be:b9:28:aa:99:d0:62:
                    44:c0:43:af:0f:6e:a5:d9:b7:d4:d5:98:f9:5d:ae:
                    87:b7:b9:35:53:25:e8:42:d6:e2:c9:f0:52:57:09:
                    f3:fb:6d:58:71:ec:40:99:e2:e1:8c:46:97:58:2a:
                    fe:49:51:12:93:83:03:ba:fb:a3:b4:1a:1c:ce:2b:
                    d0:47:7e:bc:9d:55:af:24:14:42:a7:f8:11:d3:53:
                    df:f3:da:96:72:85:f3:1f:45:9b:21:11:3e:df:4e:
                    ec:a2:bf:8d:cd:8c:71:01:a4:58:4a:47:73:d4:62:
                    63:b9:1a:66:7b:32:6f:cf:79:8c:cf:65:42:81:ef:
                    6a:1b:ad:51:8d:cd:a7:2a:61:83:eb:67:67:ca:fc:
                    f0:4d:5a:27:23:a7:d6:7e:3f:f9:be:6e:a0:41:ef:
                    a3:81:27:42:5f:f0:f1:c2:e5:38:72:6e:dd:d4:47:
                    3e:16:b3:bc:99:95:c6:9a:95:eb:3b:02:82:f1:87:
                    2e:d3:9d:7c:99:05:5f:70:d4:c7:28:2c:fd:5c:30:
                    74:d5:b8:13:0f:f7:bd:f2:ee:93:2d:1a:bf:c7:39:
                    0b:04:b7:e0:82:f5:fb:dd:bd:ab:43:20:7e:e3:67:
                    19:34:d1:db:c7:1e:e4:63:2a:c7:7a:00:13:3b:41:
                    1d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:57:6F:5C:66:4C:90:0F:2C:EC:DE:02:18:EF:A7:0F:C7:BC:EE:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/0437ef94-a3d1-3d91-8c55-98163b980798.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/731b750c-b48f-4a57-bf26-18e0bc6a456e.crl

            X509v3 Authority Key Identifier:
                keyid:13:E4:1E:72:24:24:5A:D5:9A:CF:07:0C:CE:42:27:BC:80:6C:CB:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.89.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:96:f0:1d:e6:06:cf:28:93:9b:70:62:b9:dc:fa:e8:1a:69:
         71:c2:b9:44:dd:5a:ac:13:d3:fd:fe:85:c3:82:42:c3:9c:1d:
         21:f9:2f:c5:54:17:a6:50:f6:db:37:eb:b3:93:d5:6f:60:38:
         46:f1:1b:19:06:24:53:ca:f2:27:3e:f4:64:9e:c9:0a:9f:eb:
         af:49:46:9e:2c:1e:e4:aa:86:c9:7a:8e:52:d1:81:87:64:d0:
         b9:c7:0d:74:df:19:d4:7e:75:e3:4f:03:9b:7e:37:9b:5f:24:
         d9:0f:9b:dc:72:52:78:a6:a8:cf:86:49:f8:ec:1a:d2:67:24:
         2e:58:fc:56:cb:e7:58:35:a2:ff:95:69:4d:30:01:bd:8d:49:
         16:07:7c:87:94:56:7e:0e:02:f4:38:44:90:0e:30:cd:15:73:
         4d:6f:e7:be:4d:7f:fb:e4:9d:a7:13:1f:28:b4:02:a8:49:09:
         3a:8d:13:89:fd:b2:c4:e2:16:86:c2:95:17:53:89:4a:68:93:
         6e:f2:87:b1:28:17:38:b7:03:bb:63:86:6a:0b:ad:29:66:d6:
         44:f9:ac:f2:25:d8:92:40:f7:41:71:13:58:ac:8c:6b:c6:80:
         8b:fc:fd:f0:60:1d:dd:26:5b:fa:4f:d1:40:36:7c:4e:97:f0:
         3f:5c:60:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 02:30:39 2026 by rpki-client