Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c39c90a0-ee66-4964-918e-0296541e3ad8/b80f9fdf-1ab4-3ea6-92b3-7fd45801ca5e.roa
File:                     b80f9fdf-1ab4-3ea6-92b3-7fd45801ca5e.roa (raw, json)
Hash identifier:          FGjDroxg/nnAFnZCfzumAMOPj099fYlIQbTYzsgggzs=
Subject key identifier:   01:4E:00:50:B3:46:69:86:8B:B0:97:AA:5A:96:FC:44:9F:3F:9D:A6
Certificate issuer:       /CN=c39c90a0-ee66-4964-918e-0296541e3ad8
Certificate serial:       010D0C9F4328584DF633C1DC7ABBAE66B7D018C0
Authority key identifier: C4:E2:8A:79:21:38:3E:E7:EB:2E:97:C7:D7:1E:04:29:97:E1:02:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c39c90a0-ee66-4964-918e-0296541e3ad8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c39c90a0-ee66-4964-918e-0296541e3ad8/b80f9fdf-1ab4-3ea6-92b3-7fd45801ca5e.roa
Signing time:             Tue 26 May 2026 12:34:43 +0000
ROA not before:           Tue 26 May 2026 12:34:43 +0000
ROA not after:            Mon 24 Aug 2026 12:34:43 +0000
asID:                     6079
IP address blocks:        208.79.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c39c90a0-ee66-4964-918e-0296541e3ad8/c39c90a0-ee66-4964-918e-0296541e3ad8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c39c90a0-ee66-4964-918e-0296541e3ad8/c39c90a0-ee66-4964-918e-0296541e3ad8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c39c90a0-ee66-4964-918e-0296541e3ad8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f6:33:c1:dc:7a:bb:ae:66:b7:d0:18:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c39c90a0-ee66-4964-918e-0296541e3ad8
        Validity
            Not Before: May 26 12:34:43 2026 GMT
            Not After : Aug 24 12:34:43 2026 GMT
        Subject: CN=0a0d446d-e172-4461-ab65-f491a7580bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:32:83:8f:d3:00:63:04:21:66:2e:d1:52:3b:
                    9c:88:9a:44:bc:24:7e:ae:41:01:61:58:fd:33:51:
                    7e:ee:24:a2:ad:b9:0a:46:fb:16:a8:52:79:ff:8e:
                    64:dc:a9:d4:6b:be:02:f7:bf:40:9a:84:a8:90:35:
                    53:70:6b:53:fe:15:e5:57:4f:1a:db:77:04:34:c1:
                    27:4a:ef:29:b6:df:10:a0:8c:53:53:fa:eb:31:1a:
                    e3:6f:5f:35:21:1a:bb:45:ff:ea:17:9b:bf:c8:fa:
                    06:91:ae:c0:23:b5:f2:56:1c:23:7a:20:22:b9:55:
                    b8:43:85:8e:40:73:37:33:c4:bc:6f:96:ab:68:77:
                    83:fa:2a:a8:2e:3b:d7:c2:b7:77:12:17:fa:4a:86:
                    df:b7:9a:a6:33:76:da:fe:cc:6b:0a:68:06:01:db:
                    67:be:74:32:3d:9b:04:86:1a:0c:f3:bc:45:ea:4c:
                    d7:f5:6b:4a:37:22:68:43:81:fc:b2:c3:34:3d:12:
                    18:1a:ab:fe:b0:9c:92:66:34:56:40:c0:90:2b:e2:
                    0e:f9:29:6b:45:89:23:0a:fc:58:e7:23:ad:b3:c5:
                    d7:55:51:f9:c3:e9:6e:b1:ed:8d:b1:71:f7:ca:36:
                    03:d2:17:30:35:33:7e:c2:73:26:b3:73:d8:42:96:
                    b6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4E:00:50:B3:46:69:86:8B:B0:97:AA:5A:96:FC:44:9F:3F:9D:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c39c90a0-ee66-4964-918e-0296541e3ad8/b80f9fdf-1ab4-3ea6-92b3-7fd45801ca5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c39c90a0-ee66-4964-918e-0296541e3ad8/c39c90a0-ee66-4964-918e-0296541e3ad8.crl

            X509v3 Authority Key Identifier:
                keyid:C4:E2:8A:79:21:38:3E:E7:EB:2E:97:C7:D7:1E:04:29:97:E1:02:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c39c90a0-ee66-4964-918e-0296541e3ad8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.79.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:8a:26:23:ca:a4:73:03:33:d3:2f:ce:1e:03:5f:5d:dd:8e:
         a2:10:33:b4:6b:26:6c:28:69:8b:e8:e4:e1:83:a8:b0:07:f4:
         6e:ce:ed:c8:46:8e:70:d1:88:8c:d4:47:74:de:fa:33:58:ef:
         66:6e:24:05:af:b1:37:f5:76:67:c0:73:62:1f:18:9e:21:74:
         6f:2c:01:54:34:4b:e7:89:4a:ca:6a:79:19:5a:1d:ee:97:58:
         ae:47:ec:0a:3a:39:17:9f:1f:bd:a0:74:6b:90:68:47:01:ff:
         4a:59:02:d6:fc:c7:bc:8d:c8:04:4c:34:d2:19:63:b6:d0:96:
         91:20:7c:0e:96:0d:2a:57:20:ab:d6:d7:f3:f6:a1:00:10:76:
         68:fb:91:2a:be:e0:27:d9:25:77:22:18:04:16:2c:c3:2f:30:
         39:4f:b1:68:eb:db:b4:72:73:64:40:74:fe:8c:f6:26:40:59:
         e7:a2:1f:ac:6d:7d:e0:d2:62:b1:c1:e6:e3:39:73:12:5e:2b:
         1e:3b:65:75:30:7e:3b:4e:f9:cc:dd:44:94:31:a7:47:c1:91:
         0e:5d:94:e4:47:8e:72:f2:e4:75:d5:85:fd:43:6b:9f:91:46:
         b5:6f:88:36:c5:44:4c:9d:07:47:22:79:58:9c:59:b2:53:2c:
         e0:21:de:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:07:55 2026 by rpki-client