Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/ae850b8d-bf19-37be-976a-2cc95eb4b7a8.roa
File:                     ae850b8d-bf19-37be-976a-2cc95eb4b7a8.roa (raw, json)
Hash identifier:          27zMl82PCBPbWZ9uhRax9LTqmqx6TpTkzDNYDp9H/8Q=
Subject key identifier:   B3:B1:90:E4:BD:10:E8:0D:B7:66:1F:35:46:52:9C:C1:EB:19:3B:26
Certificate issuer:       /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial:       010D0C9F4328584E3A2F362D9CDB927A1578C8C0
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/ae850b8d-bf19-37be-976a-2cc95eb4b7a8.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     14618
IP address blocks:        208.70.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:36:2d:9c:db:92:7a:15:78:c8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=c96e5267-2895-4d0e-9562-4de1f7149c5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:aa:bc:4a:22:75:ef:30:aa:80:aa:f7:48:8e:
                    e8:28:dc:de:50:6c:fe:ab:3a:07:74:1b:6e:b1:95:
                    39:54:f0:bb:50:eb:52:57:1e:72:11:3c:ea:17:53:
                    e0:de:6a:dc:e3:b5:ba:6e:00:bb:bb:e5:fb:8e:60:
                    27:20:b5:8a:53:f4:3a:eb:58:3e:bd:aa:c6:e2:30:
                    a4:67:02:29:2f:13:3b:6c:8b:49:df:66:69:2c:98:
                    ad:d8:c5:c7:4f:0a:b9:f3:a4:ad:e2:34:10:53:e4:
                    db:1f:96:8f:b6:37:2b:24:75:da:7a:51:d7:3a:42:
                    c2:59:1d:80:72:c2:68:55:0a:f7:af:4a:3b:cc:6b:
                    c0:e5:a4:f8:fa:4b:33:ce:a0:dd:8c:2b:23:bf:22:
                    f4:e2:c8:5d:62:8d:b4:1c:c8:86:e9:88:33:71:b3:
                    b2:ed:92:27:a8:8a:0b:3d:32:b7:07:5a:a0:b1:52:
                    40:02:e1:c7:fa:62:6e:63:85:18:89:9c:74:a2:16:
                    e6:3c:0a:2b:fa:72:2a:41:59:f2:5e:bc:b0:2c:84:
                    0b:35:3e:67:b3:b4:60:dd:eb:c7:88:db:e9:7b:59:
                    14:71:d5:08:1f:a5:0f:32:09:bb:59:bc:26:7a:a3:
                    95:12:3c:1b:2f:1a:2e:25:76:47:76:3e:5b:21:03:
                    7c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B1:90:E4:BD:10:E8:0D:B7:66:1F:35:46:52:9C:C1:EB:19:3B:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/ae850b8d-bf19-37be-976a-2cc95eb4b7a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl

            X509v3 Authority Key Identifier:
                keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:7b:5e:56:92:f6:4e:20:44:50:53:50:00:38:fb:f3:b0:9a:
         49:b7:27:26:99:48:c3:a8:d3:b9:f7:59:db:cf:09:a8:fa:29:
         35:9f:3c:45:ea:0d:08:fe:df:ef:0c:5c:c1:8d:45:e2:d0:15:
         82:dd:a7:29:77:95:bb:78:20:ab:83:03:fc:f6:28:a0:09:09:
         f2:94:60:75:3d:ee:a6:b3:c0:f1:2f:e9:f1:3d:fa:22:4f:9a:
         62:de:f5:0b:01:18:c1:aa:65:48:1a:0b:7f:93:fc:08:12:22:
         a0:f2:fa:e4:b2:d9:8a:2f:b2:cb:0b:c5:b1:57:60:16:30:87:
         fb:9c:51:55:1c:a9:9d:f9:d7:ed:c5:e6:20:8d:d7:38:d1:81:
         4b:55:8b:98:9b:4a:61:f9:3d:52:a7:dd:93:1b:96:34:f3:76:
         6b:9b:47:69:45:96:58:b7:b8:d4:b4:f2:13:c5:9d:ad:a1:5b:
         06:5a:1b:59:2d:e3:ee:7d:65:37:20:60:fa:c0:b4:be:ca:d7:
         df:27:e1:1e:55:28:22:8a:77:57:85:ab:0d:b2:98:49:6d:08:
         7b:e3:6d:82:82:c0:45:27:40:d1:23:aa:a9:19:48:bc:0f:52:
         f0:1e:f1:51:7a:21:5d:7a:94:1b:fd:4c:8a:99:04:00:29:5d:
         0d:83:07:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:20:50 2026 by rpki-client