Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87926d27-b936-44a2-8af3-7cf98709a5b2/bda544f6-8a90-315b-b603-377e5cfb1610.roa
File:                     bda544f6-8a90-315b-b603-377e5cfb1610.roa (raw, json)
Hash identifier:          JGMf9krNeVNr3Ik4c684KyaT4GZWGVPE+42e7L4KdB0=
Subject key identifier:   DB:87:03:44:F1:8A:3E:59:AE:7A:99:F7:3D:7D:8E:9C:91:6C:3F:67
Certificate issuer:       /CN=87926d27-b936-44a2-8af3-7cf98709a5b2
Certificate serial:       010D0C9F4328584D143D2CAF290EC43011C5C180
Authority key identifier: 6E:F0:DD:EE:91:CB:0E:85:AE:05:19:97:A5:71:92:1B:4D:FB:93:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87926d27-b936-44a2-8af3-7cf98709a5b2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87926d27-b936-44a2-8af3-7cf98709a5b2/bda544f6-8a90-315b-b603-377e5cfb1610.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     399267
IP address blocks:        208.52.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87926d27-b936-44a2-8af3-7cf98709a5b2/87926d27-b936-44a2-8af3-7cf98709a5b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87926d27-b936-44a2-8af3-7cf98709a5b2/87926d27-b936-44a2-8af3-7cf98709a5b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87926d27-b936-44a2-8af3-7cf98709a5b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:2c:af:29:0e:c4:30:11:c5:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87926d27-b936-44a2-8af3-7cf98709a5b2
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=f674cb5c-471c-4027-a702-07313a7d662a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:57:16:52:e0:0d:49:6c:4a:9b:d0:4a:9b:79:
                    33:ac:3f:1d:6a:fb:45:50:f7:e2:a6:49:4e:63:85:
                    a0:d4:dc:84:b0:ac:08:6d:b5:56:ef:c2:21:f6:bd:
                    7e:df:27:39:40:5a:94:7a:46:8f:0b:9c:4f:ae:e5:
                    b5:45:74:12:0b:6e:2e:05:46:b8:8a:0f:1a:92:85:
                    63:7f:e8:57:d7:8b:d2:34:e6:06:d9:c6:07:d1:81:
                    57:3e:8b:05:4e:bc:05:7e:4c:3f:b0:e4:30:b3:07:
                    28:98:f7:b2:6b:cc:9e:36:84:ef:c5:76:e7:da:da:
                    07:7c:e6:9e:4a:82:85:9d:c5:a0:96:94:05:06:12:
                    7f:72:ae:c5:54:fd:bb:da:a0:18:59:f0:24:de:e6:
                    f0:fc:dd:bb:ae:b0:a7:11:41:12:74:e6:e8:b6:0e:
                    e9:bc:0e:f6:71:69:d5:23:43:91:d7:1b:3b:f8:c0:
                    5f:1c:00:52:7e:e8:4d:c0:04:85:76:56:cc:99:b9:
                    64:cd:92:f9:48:06:4a:c2:16:f0:d3:69:34:46:ee:
                    bd:81:9a:31:f8:f0:a2:0c:15:0c:dd:6c:ae:4e:c3:
                    44:3f:cd:23:78:8a:05:38:01:23:f1:0b:38:0a:fa:
                    54:5e:4f:60:46:65:1a:6f:2c:75:a1:32:ea:af:66:
                    62:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:87:03:44:F1:8A:3E:59:AE:7A:99:F7:3D:7D:8E:9C:91:6C:3F:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87926d27-b936-44a2-8af3-7cf98709a5b2/bda544f6-8a90-315b-b603-377e5cfb1610.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87926d27-b936-44a2-8af3-7cf98709a5b2/87926d27-b936-44a2-8af3-7cf98709a5b2.crl

            X509v3 Authority Key Identifier:
                keyid:6E:F0:DD:EE:91:CB:0E:85:AE:05:19:97:A5:71:92:1B:4D:FB:93:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87926d27-b936-44a2-8af3-7cf98709a5b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.52.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:71:d0:1d:ab:c3:f1:00:c0:1d:63:c4:a9:a0:16:92:49:9d:
         08:e0:8e:50:6c:b3:90:a2:26:49:21:80:a0:30:ad:4b:e9:a8:
         0a:57:0e:15:40:f8:32:9d:90:14:b1:40:b0:20:ce:7a:d4:c3:
         20:27:83:32:ab:54:96:5b:d4:66:2f:05:15:62:61:cb:cf:c2:
         2e:37:08:99:c1:d4:2f:c1:30:bd:83:7d:e3:fd:75:dd:49:45:
         c7:be:59:68:75:fc:17:be:30:c5:6e:b4:dc:e9:8c:7d:fb:5c:
         ea:49:fa:15:a3:09:f5:20:10:8b:02:11:58:80:79:a4:26:cd:
         08:5e:0a:b4:b2:73:9f:45:f8:8e:fe:09:af:44:9d:7d:f7:52:
         3e:03:1a:7d:4f:db:2d:ce:cd:50:4e:25:d6:5f:6d:bd:b0:8c:
         a1:39:95:d8:25:e4:f0:29:fd:da:cb:99:fd:67:27:01:0b:5b:
         80:79:92:98:a0:27:04:4a:7d:0d:67:ed:60:b7:ab:4c:2d:dc:
         bb:4d:bb:9f:7b:b1:88:32:98:ad:fd:c6:63:9c:4b:45:22:1c:
         27:fc:66:de:90:a3:45:ac:91:05:bd:9e:b2:f8:ed:1b:d8:1d:
         95:d7:9a:0f:81:3b:22:dc:43:4d:8b:49:98:48:48:b6:59:27:
         9b:c8:c7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 09:59:18 2026 by rpki-client