Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fd73a5f0-beae-449b-9f3f-c7c8dbf3038c/fe65a7ea-aba0-3909-aa82-b8d2421af190.roa
File:                     fe65a7ea-aba0-3909-aa82-b8d2421af190.roa (raw, json)
Hash identifier:          3T6JdRtvrRL3u7+Jp6XgBnfN1CI9vn/HExd7SdbdLBI=
Subject key identifier:   F6:A4:F3:57:56:78:24:51:97:BB:48:0B:0F:BE:11:0C:58:99:70:3D
Certificate issuer:       /CN=fd73a5f0-beae-449b-9f3f-c7c8dbf3038c
Certificate serial:       010D0C9F4328584F791404ED19AEF9770348CAE0
Authority key identifier: F8:2F:31:83:29:E8:A9:A3:49:AF:63:39:A1:26:88:1F:BD:C5:6C:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fd73a5f0-beae-449b-9f3f-c7c8dbf3038c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fd73a5f0-beae-449b-9f3f-c7c8dbf3038c/fe65a7ea-aba0-3909-aa82-b8d2421af190.roa
Signing time:             Mon 12 Oct 2026 02:28:36 +0000
ROA not before:           Mon 12 Oct 2026 02:28:36 +0000
ROA not after:            Sun 10 Jan 2027 03:28:36 +0000
asID:                     11374
IP address blocks:        208.77.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fd73a5f0-beae-449b-9f3f-c7c8dbf3038c/fd73a5f0-beae-449b-9f3f-c7c8dbf3038c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fd73a5f0-beae-449b-9f3f-c7c8dbf3038c/fd73a5f0-beae-449b-9f3f-c7c8dbf3038c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fd73a5f0-beae-449b-9f3f-c7c8dbf3038c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:79:14:04:ed:19:ae:f9:77:03:48:ca:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd73a5f0-beae-449b-9f3f-c7c8dbf3038c
        Validity
            Not Before: Oct 12 02:28:36 2026 GMT
            Not After : Jan 10 03:28:36 2027 GMT
        Subject: CN=2db9d251-5890-40c3-ab4f-98040130dabc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:74:be:1f:b3:7c:e0:5a:6c:d8:bf:3a:40:36:
                    6d:83:73:0c:b3:ea:6f:a7:a5:5f:05:bd:ab:ff:1b:
                    47:75:de:43:8e:d9:57:9a:e9:09:aa:8c:14:14:b7:
                    c4:a3:1f:79:c4:bc:7d:14:9e:fc:61:5b:29:e5:17:
                    59:63:2b:24:45:17:f5:d1:4b:67:0c:bd:f2:23:b9:
                    ec:08:2b:04:32:b7:b0:35:07:92:a8:7f:8a:18:43:
                    2d:d3:2f:3c:65:57:57:37:6c:9e:83:77:9b:64:97:
                    ac:f2:6f:78:30:9f:5a:51:ce:d1:af:76:62:73:06:
                    fc:e8:46:a8:05:16:2c:3f:d9:0f:90:44:25:0f:79:
                    b9:14:cf:b3:33:9f:73:53:da:ed:cf:0d:43:74:08:
                    f3:a6:83:d2:be:6c:a8:1c:0e:df:73:ec:3c:88:0d:
                    0b:73:4c:e3:14:df:d0:80:23:c9:0d:65:be:20:e6:
                    cf:56:2f:50:d0:0d:23:82:49:3f:06:5b:ae:49:c8:
                    6d:5b:5f:fd:5e:30:65:b1:68:69:64:26:e2:4c:8d:
                    e2:a5:f7:9c:4a:d8:31:a5:0c:ee:c0:4d:4e:32:52:
                    09:bc:3d:b8:11:62:6b:e8:9c:26:86:20:6d:3d:70:
                    55:e9:bf:7f:4a:ad:8f:01:9f:23:99:e1:ae:88:78:
                    b9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A4:F3:57:56:78:24:51:97:BB:48:0B:0F:BE:11:0C:58:99:70:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fd73a5f0-beae-449b-9f3f-c7c8dbf3038c/fe65a7ea-aba0-3909-aa82-b8d2421af190.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fd73a5f0-beae-449b-9f3f-c7c8dbf3038c/fd73a5f0-beae-449b-9f3f-c7c8dbf3038c.crl

            X509v3 Authority Key Identifier:
                keyid:F8:2F:31:83:29:E8:A9:A3:49:AF:63:39:A1:26:88:1F:BD:C5:6C:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fd73a5f0-beae-449b-9f3f-c7c8dbf3038c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.77.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:34:a1:5a:94:e2:48:3b:63:92:48:85:20:fc:5e:18:1b:c8:
         fe:91:c6:93:8a:a8:65:5a:bc:e6:13:97:02:98:c2:16:14:c7:
         b8:17:72:96:38:d7:e1:6e:30:17:0d:0e:c7:0a:3e:0a:0f:37:
         46:95:b7:3a:9e:19:e9:b9:44:61:13:76:52:54:b6:70:fe:8a:
         35:de:32:d7:ad:e8:ec:70:8a:35:7c:8a:c8:bb:de:0c:af:00:
         f9:c1:be:95:1f:cd:dd:f9:3e:60:66:c8:54:96:49:61:3c:9b:
         56:e0:bc:a6:0a:86:34:0f:c4:fc:99:f2:b3:ea:f7:69:4c:ee:
         43:e6:e2:49:ff:40:09:38:e1:a7:6a:12:7e:14:98:c3:11:20:
         5e:7d:77:7a:f8:35:2b:cb:b3:4a:09:e0:5d:cd:a1:c3:2b:66:
         85:92:b2:36:dc:90:41:e0:cb:86:31:39:52:1e:67:72:16:3d:
         e6:84:2b:d2:1a:88:6f:94:bc:81:02:30:15:9d:96:15:3d:4c:
         65:3d:1d:4c:31:b3:29:e1:5b:91:07:ac:8c:08:97:5e:b8:8c:
         00:36:a6:00:9a:54:c0:a4:70:ee:c9:c9:a9:45:93:65:a5:91:
         0e:45:47:be:5f:2d:70:f1:5e:2d:52:22:f3:73:12:b0:84:fc:
         28:e7:06:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:42:34 2026 by rpki-client