Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/208b91d4-30b6-3828-81b6-51f68d93e7a5.roa
File:                     208b91d4-30b6-3828-81b6-51f68d93e7a5.roa (raw, json)
Hash identifier:          zb1uLAdv3Zm6Wc4CJNbzNUjfQ4s8l/mo4q+2+DVL+3A=
Subject key identifier:   5C:A6:4C:AE:2A:50:65:41:3B:97:5C:21:02:61:CC:77:56:0D:1D:73
Certificate issuer:       /CN=c3a944cd-51a8-4d10-ae57-724de26a1d62
Certificate serial:       010D0C9F4328584E37646F639F9DCC0A04EF0200
Authority key identifier: A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/208b91d4-30b6-3828-81b6-51f68d93e7a5.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     25655
IP address blocks:        173.241.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:6f:63:9f:9d:cc:0a:04:ef:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a944cd-51a8-4d10-ae57-724de26a1d62
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=5d926821-f758-4aab-bfe7-2740696823ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2c:c7:02:d5:43:ee:d0:1b:61:04:b1:88:f4:
                    9a:e6:34:cd:a7:9e:e5:29:ef:c4:54:87:c7:51:d7:
                    98:db:7c:35:9d:7a:de:3c:55:ed:e8:68:e7:70:69:
                    aa:77:ec:74:ae:43:68:73:62:e3:c2:e5:c8:ca:71:
                    dd:d4:ee:7f:13:c8:3f:0d:ef:c7:6d:a9:4c:f3:73:
                    39:8e:4c:7d:06:ba:03:c8:ab:54:34:2c:29:3d:93:
                    2d:d7:cd:43:fa:3a:00:83:13:62:06:e9:3d:fb:f8:
                    7e:74:fd:8b:71:cd:7f:36:d1:6d:b0:3f:d3:25:ea:
                    61:ec:7a:08:df:dd:1f:90:2b:ca:09:2a:16:cc:bb:
                    47:8b:3f:c5:5d:ec:c4:82:83:38:56:8a:9f:07:31:
                    80:57:3b:bf:65:cc:c3:67:4a:7c:ce:f0:22:cc:09:
                    f3:60:8b:e4:c7:be:ec:09:f4:b9:a9:1b:8f:f1:33:
                    59:77:94:28:61:c2:44:b4:85:9e:2b:f2:cb:8d:97:
                    a2:62:14:c4:fa:57:e5:5a:e5:45:d3:20:26:4c:4a:
                    2c:2c:01:0a:15:9d:87:0f:d3:fc:0b:91:81:ff:d2:
                    79:17:03:4e:82:99:f6:25:06:a0:f0:49:7b:7c:a8:
                    8c:4f:e4:3f:1f:2c:af:59:fe:a4:53:b0:1d:3f:b5:
                    28:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:A6:4C:AE:2A:50:65:41:3B:97:5C:21:02:61:CC:77:56:0D:1D:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/208b91d4-30b6-3828-81b6-51f68d93e7a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl

            X509v3 Authority Key Identifier:
                keyid:A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.241.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:d1:b9:78:57:db:0c:b5:ad:35:68:de:4b:92:b7:fb:1f:ed:
         15:f5:73:9c:65:8d:1a:45:00:6d:8e:24:ad:ea:45:f4:d7:06:
         cb:54:45:94:96:4b:a8:78:2d:a9:30:f1:45:5a:7f:71:2d:39:
         c0:fc:0f:c6:e6:c1:7c:97:02:83:09:1a:67:2c:a1:cd:1f:0a:
         1d:b8:ad:85:13:57:d2:47:aa:76:27:78:73:12:5b:5f:02:74:
         03:64:74:f0:17:d8:36:01:0e:57:06:68:56:eb:41:40:45:55:
         fd:5f:4a:68:ac:57:22:30:b0:eb:ac:ea:c7:f9:e5:eb:69:a6:
         fd:25:2a:00:a4:d0:e8:85:0b:04:ca:8b:b8:bb:e9:97:0d:72:
         a6:cb:da:68:a3:11:b9:0a:bf:6d:65:6d:dd:10:68:62:d6:9c:
         be:c6:78:7f:42:1c:8f:d3:bd:62:2a:c8:16:c0:15:5c:9c:a6:
         33:3e:1a:8d:d1:50:89:e4:75:77:c1:36:e9:4e:a0:ba:6f:de:
         97:d2:7d:53:7c:02:35:31:5e:a6:96:8f:17:0f:c6:d2:6f:3e:
         3e:8d:69:ce:0f:01:7f:3b:d2:0d:71:24:86:e0:9c:7f:6e:f8:
         ba:7f:2d:a5:d5:43:38:bb:15:7f:87:15:5f:19:f9:02:29:83:
         14:78:9e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 05:52:45 2026 by rpki-client