Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/ab7e3906-f780-385f-8a0c-8c3ece74fce9.roa
File:                     ab7e3906-f780-385f-8a0c-8c3ece74fce9.roa (raw, json)
Hash identifier:          xfgTO0AQb9f9GsHeAITQwpWDxFzrm4Dx9kLgIh4GbLc=
Subject key identifier:   7E:42:CB:A7:F4:44:A3:11:32:63:92:FF:30:BC:95:4F:D2:50:24:B9
Certificate issuer:       /CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1
Certificate serial:       010D0C9F4328584B0746C13203F5A81889A4D680
Authority key identifier: 1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/ab7e3906-f780-385f-8a0c-8c3ece74fce9.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     11248
IP address blocks:        204.8.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:c1:32:03:f5:a8:18:89:a4:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=0c1498cb-96f1-4238-a53d-2b5bbeaab8f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:eb:95:92:e4:47:a4:1e:81:78:44:ef:5c:b5:
                    06:6c:76:33:32:40:21:05:d7:18:8e:1e:d4:fb:e2:
                    57:7d:6a:2e:4f:5b:4b:2b:57:10:b1:52:01:88:2b:
                    47:e1:3d:2e:35:8a:fc:06:3f:1a:26:6d:08:d5:09:
                    6b:32:30:6e:7a:76:bf:b1:44:80:07:33:eb:34:d8:
                    0f:45:83:a3:3f:08:f9:26:4e:29:f7:ee:6e:f7:55:
                    04:56:8c:da:6e:4c:d3:2a:42:e6:19:24:be:ac:20:
                    76:de:b6:83:b0:86:32:15:98:4f:2c:b3:9d:3a:bb:
                    7c:47:e7:ca:32:44:f0:13:84:8e:12:cd:e0:32:99:
                    3a:34:a7:96:c6:fa:4a:ed:8b:96:44:93:21:0d:c9:
                    e4:f1:6e:a1:03:91:27:d1:9c:60:7a:58:11:e7:12:
                    c1:50:02:69:b7:69:8d:7c:4d:17:0b:d4:3f:4c:2c:
                    31:ef:f5:8e:f7:d6:a1:0b:e8:23:13:07:3f:58:6a:
                    ea:2c:61:f6:a1:e0:cc:84:42:8b:73:f4:0a:c2:c5:
                    92:c6:e0:3c:61:bb:87:73:82:01:d2:ef:e2:e7:8d:
                    01:d4:f2:6a:de:95:20:09:5c:2a:cf:37:51:c4:7e:
                    e6:b9:57:88:4e:25:d6:fe:12:a8:93:c9:0e:bd:99:
                    63:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:42:CB:A7:F4:44:A3:11:32:63:92:FF:30:BC:95:4F:D2:50:24:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/ab7e3906-f780-385f-8a0c-8c3ece74fce9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl

            X509v3 Authority Key Identifier:
                keyid:1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:c6:f2:48:77:4b:44:05:88:c9:2f:32:47:7d:3e:1c:04:4d:
         95:5b:bc:7d:67:ae:a1:16:30:74:85:dc:e7:83:08:d8:bd:26:
         72:23:55:91:17:e3:3e:e8:de:a2:56:9c:63:fe:45:59:68:0a:
         4d:d4:c7:b4:97:96:31:6c:45:8e:be:7f:b1:e2:8b:80:23:b5:
         f2:a0:92:18:33:28:58:6b:4c:f7:38:7d:30:dc:c9:38:c9:4a:
         99:1e:f9:a4:3a:d8:22:6a:ce:cc:7a:e5:73:e3:f8:36:b1:39:
         b1:15:4d:63:0a:18:23:9b:14:4b:f9:8c:c9:7d:f9:1b:11:fd:
         66:f5:b1:7d:4d:0e:57:f7:1f:6e:37:c7:21:7c:00:d1:86:8a:
         25:ad:4d:fc:b2:2e:2e:15:1a:4a:c1:7d:19:5f:a2:78:b0:73:
         6a:52:18:27:19:dc:b5:9b:e3:e9:61:8c:18:4a:bd:64:ee:cd:
         f4:de:69:bd:15:7d:3b:e4:33:c8:20:54:a9:be:a6:7d:f0:03:
         8c:c9:c9:02:d5:fe:c7:67:cb:35:b3:fe:a1:3e:aa:e3:22:9c:
         75:f1:5e:38:05:63:fc:c4:7e:61:ab:e7:f5:2b:61:b1:8c:d6:
         b3:21:ce:00:ba:a8:9b:ff:5b:3c:86:48:e7:e6:71:b5:e8:c4:
         ba:39:53:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:39:07 2025 by rpki-client