Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/6dbf228a-8847-3ed1-82e8-2ab14a15a7a8.roa
File:                     6dbf228a-8847-3ed1-82e8-2ab14a15a7a8.roa (raw, json)
Hash identifier:          VowFbJrVo8pXilVhYBodC8ppgFb+r6NkIFJeU0LHV0g=
Subject key identifier:   0C:78:2E:AB:C7:03:09:F9:C1:A8:16:7D:DF:2B:1E:28:FF:DA:EF:63
Certificate issuer:       /CN=c8c301ab-7d22-46c3-8211-f6373ec82d5a
Certificate serial:       010D0C9F4328584D6AAA797DC46C9F5091916B00
Authority key identifier: 1B:13:FC:C8:68:95:3B:53:A8:FC:E8:B9:4B:8B:04:23:97:4A:52:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/6dbf228a-8847-3ed1-82e8-2ab14a15a7a8.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     31898
IP address blocks:        162.253.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:79:7d:c4:6c:9f:50:91:91:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8c301ab-7d22-46c3-8211-f6373ec82d5a
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=26ff5933-221b-4566-9292-1696e2eca820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:73:65:3b:2a:02:c9:8a:f4:a0:7a:44:32:4c:
                    c3:04:d0:16:aa:0e:a3:b8:6b:94:16:8b:97:fa:9f:
                    06:ce:4a:0e:2c:d4:2d:5b:d0:c8:70:2e:6e:a2:50:
                    56:23:5f:26:27:42:cc:31:0d:5b:7f:08:9f:78:cf:
                    f1:94:9f:03:a4:76:80:95:fb:99:49:03:12:f0:2b:
                    45:c8:ba:00:b6:86:c0:e7:d7:f5:1c:e0:fa:7f:d9:
                    f1:33:87:88:62:53:f0:95:34:5a:a5:76:44:a6:53:
                    46:c8:60:ff:c6:44:f1:0e:85:ed:7b:ec:9b:16:b5:
                    c4:50:c0:6d:d2:37:31:15:01:cb:6c:2f:f3:28:01:
                    bb:d4:30:f8:d0:db:e3:8d:c3:8b:18:cb:f9:84:06:
                    27:c8:3e:bb:f9:8b:4f:cc:f9:2b:12:01:c4:e6:5f:
                    52:05:df:6f:4a:e6:88:0f:75:b3:e9:1e:13:ea:c2:
                    f0:8e:01:97:17:75:2f:bf:9b:96:b9:67:2a:9d:ef:
                    be:20:ba:58:96:36:dd:61:7d:19:46:ba:9b:d5:ec:
                    a3:eb:2d:5f:98:97:b5:76:e0:4a:c0:99:9e:60:a9:
                    33:e3:b5:93:b9:be:62:e6:4a:a7:0c:fd:a2:92:4c:
                    5c:52:56:ad:3f:0b:ac:2f:05:b6:66:66:fa:95:d3:
                    c9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:78:2E:AB:C7:03:09:F9:C1:A8:16:7D:DF:2B:1E:28:FF:DA:EF:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/6dbf228a-8847-3ed1-82e8-2ab14a15a7a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a/c8c301ab-7d22-46c3-8211-f6373ec82d5a.crl

            X509v3 Authority Key Identifier:
                keyid:1B:13:FC:C8:68:95:3B:53:A8:FC:E8:B9:4B:8B:04:23:97:4A:52:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c8c301ab-7d22-46c3-8211-f6373ec82d5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.253.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:66:7e:58:01:15:58:76:92:08:6b:c5:c1:82:a5:59:54:7e:
         89:42:4b:5a:41:e4:04:26:14:c1:08:a0:10:16:14:ed:2a:df:
         0a:dd:96:ee:b3:a8:18:4f:28:cd:d9:49:db:89:1e:64:9c:2c:
         05:f0:71:42:3d:56:d1:86:02:83:b5:69:7f:9a:ec:2c:1c:d4:
         f2:03:c9:07:4b:ea:3e:e7:b4:58:f0:88:8a:c1:e3:56:74:b8:
         5a:d5:fe:a0:a4:95:f4:ef:9b:03:69:34:7e:2e:d3:25:0e:38:
         db:e6:70:00:51:d3:aa:5a:6b:0a:e8:fd:99:9f:c1:9a:6d:33:
         05:8f:a1:2e:1d:77:8d:54:50:d3:1e:1d:4b:13:f6:06:88:1c:
         94:f0:d2:f5:a1:bf:54:b3:82:30:af:ce:5e:85:c2:93:89:cb:
         73:ef:e1:aa:b5:33:49:e1:c9:71:c1:86:eb:2b:16:22:13:c2:
         d3:d1:3d:21:58:d1:2c:b7:f8:e4:b6:76:9b:28:0e:8b:f4:a2:
         17:4f:d8:00:1e:8b:09:bd:64:cf:eb:4b:47:b4:c5:cf:3c:86:
         8c:60:c0:c1:8d:92:29:40:a7:1d:30:1b:d3:63:8b:5b:6c:a4:
         8d:26:5a:2e:79:bc:03:7c:73:34:a7:90:60:46:2f:4d:1b:75:
         0c:f6:32:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 16:01:49 2026 by rpki-client