Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/f7d7fec0-4cf3-3995-aaa9-9c8de13d6e0a.roa
File:                     f7d7fec0-4cf3-3995-aaa9-9c8de13d6e0a.roa (raw, json)
Hash identifier:          F9llrli/4EOGt2rdBFp+rNBxAgaipxa6T+eG8D9/4BA=
Subject key identifier:   C5:D7:78:BC:FE:15:DE:9E:5C:82:97:C2:F2:5B:2F:62:57:44:E6:15
Certificate issuer:       /CN=2831c461-e175-4265-a0ea-565d8e6179b8
Certificate serial:       010D0C9F4328584D91BFFCDBD0AF9CAA7619D980
Authority key identifier: 3D:B4:F3:7A:AD:92:73:74:28:A7:E5:4D:84:23:F3:D4:9F:9F:85:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/f7d7fec0-4cf3-3995-aaa9-9c8de13d6e0a.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     36610
IP address blocks:        208.77.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/2831c461-e175-4265-a0ea-565d8e6179b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/2831c461-e175-4265-a0ea-565d8e6179b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:bf:fc:db:d0:af:9c:aa:76:19:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2831c461-e175-4265-a0ea-565d8e6179b8
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=00fec69d-8dbf-4d6d-be63-69d70ab194fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b5:e6:f1:7b:4e:f7:b4:12:11:43:cc:40:56:
                    b1:8e:61:4a:7d:ea:8e:7d:02:4d:9b:9c:24:77:64:
                    89:8b:99:84:d9:12:6c:1b:8b:3b:e3:dc:bc:3b:63:
                    60:99:d3:90:7f:7b:57:5e:e8:8d:fb:18:a0:07:6a:
                    2f:ff:ab:75:75:9e:d4:87:f6:ea:e0:df:40:2c:d5:
                    05:d3:2c:23:09:74:84:62:cd:2b:90:57:19:84:d4:
                    34:a3:dd:a8:80:63:51:d1:e0:a2:9c:a3:2f:31:03:
                    c2:41:45:bf:a6:4a:75:bd:bf:a6:5a:01:62:d3:b5:
                    54:34:2b:3f:6e:c2:09:6a:c6:de:10:60:55:f1:fa:
                    40:15:32:01:e1:1f:16:ba:ae:a3:ed:d5:8c:17:a1:
                    99:05:6b:bb:25:ae:9d:5e:53:01:e9:af:2f:87:c8:
                    f9:71:d2:e9:af:7c:c1:ad:8a:4a:8d:52:5f:18:e7:
                    0a:75:3b:07:d9:35:12:1f:ce:0c:b7:c4:22:a7:f2:
                    df:3a:67:83:2a:79:aa:01:0e:80:f3:a4:f4:bf:b5:
                    87:40:8f:c2:0b:04:67:e6:f0:8a:1e:1f:08:ae:47:
                    b1:b7:44:0d:6c:b3:80:9b:2d:4e:2f:52:ac:30:9a:
                    35:49:1b:5d:0f:2d:46:37:ed:7d:c3:47:89:42:42:
                    9d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D7:78:BC:FE:15:DE:9E:5C:82:97:C2:F2:5B:2F:62:57:44:E6:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/f7d7fec0-4cf3-3995-aaa9-9c8de13d6e0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8/2831c461-e175-4265-a0ea-565d8e6179b8.crl

            X509v3 Authority Key Identifier:
                keyid:3D:B4:F3:7A:AD:92:73:74:28:A7:E5:4D:84:23:F3:D4:9F:9F:85:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2831c461-e175-4265-a0ea-565d8e6179b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.77.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:2e:78:23:31:bd:2e:18:d2:0f:ba:1e:cd:61:4f:88:64:2c:
         df:66:fd:d3:c5:23:37:b7:60:9e:df:e6:bf:5b:eb:fd:47:70:
         cb:4e:27:f8:c7:c6:5a:a6:58:98:2a:1f:c6:4e:e4:e7:44:9e:
         37:ae:90:9d:fd:d8:e2:80:dd:1a:3b:fe:63:a4:b0:ee:f8:eb:
         bd:d5:c3:04:e4:d9:cc:d8:0c:cd:04:3e:96:78:03:7c:ab:1f:
         df:86:a6:29:f3:d0:13:30:a9:34:9a:82:96:7e:59:b7:b4:2d:
         11:d3:d5:b0:26:cf:98:99:e8:aa:71:9a:dd:85:3c:88:d2:49:
         f5:4c:f0:8d:e3:50:99:75:41:cd:f8:44:2c:d6:30:6e:a0:cd:
         0e:aa:f2:66:1e:c9:da:6c:2a:7a:46:5b:56:36:9b:91:f2:63:
         18:c2:39:6a:d6:ca:32:07:94:23:9b:16:6a:7d:05:6c:f8:6e:
         83:31:79:32:e8:1a:78:a3:60:b2:80:26:6a:d0:d0:be:df:76:
         50:10:c8:4c:bf:3f:68:20:21:56:43:50:b7:5f:e4:7a:9a:70:
         aa:91:26:49:fd:fc:c3:e6:bc:92:b4:25:0c:ca:96:ba:ca:6a:
         2e:62:c0:8a:91:dc:ed:a2:4f:eb:0c:38:de:f3:12:5a:99:02:
         9d:8d:70:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 03:12:39 2026 by rpki-client