Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/1fde58cb-1b82-3dee-9119-156933d5f187.roa
File:                     1fde58cb-1b82-3dee-9119-156933d5f187.roa (raw, json)
Hash identifier:          OwQAfWHq9px1h5S2nVkuqgxJm6poYmzXTXnEjqfTNHA=
Subject key identifier:   DF:8B:DB:E2:DD:30:40:F3:29:D3:1E:38:D7:4A:E2:5F:4F:B1:CA:87
Certificate issuer:       /CN=0c924434-62f4-44d5-b440-476f5c675f3d
Certificate serial:       010D0C9F4328584F4973E62885FC78C7CF0B5E00
Authority key identifier: 05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/1fde58cb-1b82-3dee-9119-156933d5f187.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        208.81.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:e6:28:85:fc:78:c7:cf:0b:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c924434-62f4-44d5-b440-476f5c675f3d
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=c1493d9f-026e-4e33-8ec3-3c8e904bf24a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:da:91:40:c5:43:a2:b7:61:f7:89:d4:4a:02:
                    8f:35:51:99:f8:01:45:e0:2f:1b:b3:f8:57:e2:87:
                    2a:0e:e3:8d:89:84:3e:37:8c:b9:55:02:2e:16:62:
                    bd:79:0f:0a:34:63:3b:f7:f1:d4:e8:60:2d:6a:6a:
                    1d:5b:f9:da:6f:c3:16:82:b7:7e:9f:62:42:26:a7:
                    92:f4:17:be:9c:5b:ab:88:d3:ab:3e:17:8f:66:17:
                    21:d2:b3:9f:a2:b8:2a:82:7d:13:7a:34:ea:40:89:
                    d4:c9:75:8f:e7:9f:34:da:98:7e:2a:08:6d:79:ca:
                    f3:e7:13:23:d3:2b:e7:d6:9d:b1:6a:d1:f7:95:01:
                    b8:6c:85:59:06:40:80:2e:5d:29:4b:6a:02:c5:69:
                    a0:8e:21:41:e7:e7:56:0e:2c:7e:2d:8e:96:ab:17:
                    4f:c4:eb:a6:55:c8:6f:5b:63:14:72:91:fd:ad:72:
                    ea:4c:45:ed:56:92:11:dc:e1:2d:29:08:61:1c:80:
                    83:e1:e8:90:91:b8:0d:4f:49:ea:a3:52:f6:b3:da:
                    5c:4e:d5:01:a4:2d:88:48:5c:ee:12:2b:cd:bb:60:
                    db:28:04:a1:57:a6:d1:c7:00:c1:78:d0:f4:cc:7f:
                    c0:5c:e3:4d:74:b7:83:59:8b:54:b5:09:44:dd:88:
                    a2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:8B:DB:E2:DD:30:40:F3:29:D3:1E:38:D7:4A:E2:5F:4F:B1:CA:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/1fde58cb-1b82-3dee-9119-156933d5f187.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl

            X509v3 Authority Key Identifier:
                keyid:05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.81.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:d6:72:a3:f3:46:e5:3c:e4:50:7b:4d:75:fe:ea:2c:da:ec:
         8a:f2:54:44:92:58:88:96:18:e4:33:68:e2:0f:d1:cf:c8:5f:
         da:be:7c:11:dc:ee:cf:c1:8a:3b:b6:66:2d:bd:da:40:dc:a5:
         3a:66:1e:60:5b:74:46:bb:fe:18:45:4b:13:47:a9:41:da:bf:
         7c:43:d1:27:b7:c7:e0:e0:14:6d:61:17:a0:e0:5e:36:33:c8:
         56:cd:58:98:07:bf:f6:2a:0c:59:4f:8e:ed:03:ea:38:b3:64:
         d6:ef:28:00:68:7a:66:54:80:e8:69:11:b4:50:60:6a:d2:84:
         44:da:3d:c3:c2:6f:61:29:f9:d9:5f:fe:b5:2c:10:60:c6:80:
         bc:b1:1d:fb:e5:84:ec:21:02:20:c5:dc:53:e8:38:0d:18:c1:
         a5:9a:f6:e3:cf:16:9d:36:fd:17:c5:ab:10:93:9a:b6:07:f9:
         5c:64:b5:d3:d1:4c:5b:91:49:8c:f4:fb:6f:13:79:34:80:13:
         8b:57:f2:2b:4a:a6:f6:6d:1f:5b:c3:eb:33:25:57:be:6b:6e:
         e2:e9:4d:9a:07:7f:08:ca:37:c1:97:07:e0:42:b1:26:7c:b8:
         0f:2c:50:8f:d9:d8:7b:01:95:3a:c4:4c:87:ca:b8:67:08:5c:
         63:84:3d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:40:05 2026 by rpki-client