Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8a8f67b1-8995-359b-9933-6de9d81fed4e.roa
File:                     8a8f67b1-8995-359b-9933-6de9d81fed4e.roa (raw, json)
Hash identifier:          8kFvEfzPL0SJpJDHqqXKlRFHWf3ErrtG4MxpA3Aua7U=
Subject key identifier:   1E:92:53:A4:A2:20:BD:89:40:01:65:27:DF:3D:A2:70:7D:F5:1F:DD
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584F7FE2F4D35A12675317459F00
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8a8f67b1-8995-359b-9933-6de9d81fed4e.roa
Signing time:             Wed 14 Oct 2026 13:00:12 +0000
ROA not before:           Wed 14 Oct 2026 13:00:12 +0000
ROA not after:            Tue 12 Jan 2027 14:00:12 +0000
asID:                     62044
IP address blocks:        209.55.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7f:e2:f4:d3:5a:12:67:53:17:45:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Oct 14 13:00:12 2026 GMT
            Not After : Jan 12 14:00:12 2027 GMT
        Subject: CN=0b360c5d-22c1-4c1e-91fb-8f74999a8f88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7c:fd:de:78:2c:9d:e9:37:52:1d:ec:97:3d:
                    1c:e1:e5:63:9a:1a:8c:fc:0f:d2:8e:33:40:4b:c6:
                    f3:4d:d5:5c:50:10:b7:34:2f:98:92:58:33:46:9c:
                    d9:c5:95:e7:80:7a:f6:d9:ad:ec:15:bf:06:c8:ca:
                    b4:63:e2:c1:6e:bd:83:0d:e8:90:20:2c:f7:c8:93:
                    fe:9d:ee:12:a3:78:20:25:88:c0:d9:2d:1b:aa:46:
                    78:0e:de:b7:f2:fc:d1:19:4c:3b:06:34:3b:49:ce:
                    c3:2c:2a:7e:a1:51:64:6c:18:e0:26:2b:d4:f3:f2:
                    6f:93:24:9e:90:a2:10:4c:c8:e9:26:20:fe:34:ba:
                    8a:44:55:96:1f:4c:d3:90:52:68:d9:b3:a9:59:28:
                    0a:5c:5c:1f:9b:40:cd:c7:ad:c5:b8:45:6c:69:1c:
                    f7:80:10:f6:8a:ae:6c:7a:05:0d:ad:1b:f0:d9:3f:
                    f0:83:87:39:c1:5d:de:84:7a:cd:e6:8b:d4:a4:7f:
                    85:12:5c:d8:18:71:a6:d5:90:84:25:97:4b:f3:0a:
                    b4:e2:ea:88:03:84:d0:92:b1:de:08:51:55:9e:db:
                    65:46:de:ce:7b:79:92:31:89:78:e7:e7:a4:44:72:
                    10:2b:0f:80:ff:1f:66:eb:61:2c:f2:71:d6:45:d4:
                    56:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:92:53:A4:A2:20:BD:89:40:01:65:27:DF:3D:A2:70:7D:F5:1F:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/8a8f67b1-8995-359b-9933-6de9d81fed4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.55.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:83:f7:25:b0:0e:31:d8:ee:0a:b7:0d:27:42:7e:57:c7:e6:
         65:60:af:fb:83:5b:bb:9b:d2:f7:11:36:3a:0b:39:c5:56:bb:
         66:1f:f5:0e:1d:ce:8c:76:98:38:11:04:aa:78:47:73:9a:61:
         a4:f0:f9:e8:ef:16:81:c4:ad:7a:a3:f0:4c:62:fc:ff:f9:51:
         19:66:35:f3:1d:bb:d3:c6:65:57:fd:2e:b3:c1:ed:12:db:ed:
         ec:35:69:d1:83:ee:8d:06:43:bd:a4:85:19:6e:58:06:96:df:
         e2:2d:f5:11:e7:b3:ec:73:08:27:73:c8:ef:c7:b6:70:64:0e:
         0e:76:50:68:da:1f:07:31:a6:c3:40:a9:4d:01:85:12:89:d4:
         34:68:99:cb:31:4f:51:d8:23:66:0a:4e:d3:6d:27:a6:2d:b9:
         7a:71:c7:cc:59:e6:3f:4e:16:1b:47:7a:bc:41:5b:3d:d9:a5:
         15:29:8b:3f:eb:2d:8b:7c:5c:1a:f7:84:95:a2:44:df:10:1b:
         e8:f9:f6:2c:eb:fe:68:35:1e:64:99:a5:67:1c:50:ba:17:5b:
         64:3f:ce:6a:9b:7d:1c:1c:5f:ac:bd:52:41:64:83:93:4a:5e:
         54:e9:e4:29:d0:46:d1:55:16:17:5c:d6:dd:55:88:0e:37:2b:
         42:8f:fc:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 19:55:41 2026 by rpki-client