Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0a272229-8b75-460f-8428-1997894397c8/79584053-6480-36b6-ba05-a038436f1a8f.roa
File:                     79584053-6480-36b6-ba05-a038436f1a8f.roa (raw, json)
Hash identifier:          MT4ZJmgBxlybIcSGrWTIEq5UclCatumhqQ3VK5HwyP8=
Subject key identifier:   4A:88:F7:73:20:E9:F2:09:B6:FB:A5:8E:C3:B3:BE:DC:36:DF:4C:37
Certificate issuer:       /CN=0a272229-8b75-460f-8428-1997894397c8
Certificate serial:       010D0C9F4328584ECBD1BC594FCE5A6646C40BC0
Authority key identifier: C1:83:F9:43:BE:EE:AB:DD:E9:98:38:4E:B9:30:82:68:BC:A7:8B:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0a272229-8b75-460f-8428-1997894397c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0a272229-8b75-460f-8428-1997894397c8/79584053-6480-36b6-ba05-a038436f1a8f.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     17279
IP address blocks:        208.86.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0a272229-8b75-460f-8428-1997894397c8/0a272229-8b75-460f-8428-1997894397c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0a272229-8b75-460f-8428-1997894397c8/0a272229-8b75-460f-8428-1997894397c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0a272229-8b75-460f-8428-1997894397c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:bc:59:4f:ce:5a:66:46:c4:0b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a272229-8b75-460f-8428-1997894397c8
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=d8d3af35-5379-47d9-8282-13000fa561cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:84:6e:88:cc:60:01:55:53:6b:3c:b6:35:92:
                    0f:41:fb:f2:14:32:40:d0:3f:07:13:ae:51:3b:b0:
                    37:57:09:04:89:04:00:cf:4d:38:54:d0:ec:a2:56:
                    d1:af:6f:51:17:fa:5d:df:ec:8d:27:cb:55:e3:9f:
                    24:63:a7:0d:b6:03:c8:7a:8c:af:c2:4c:0c:73:1e:
                    03:e9:b8:00:bf:cd:a8:ed:73:26:9d:01:c7:d2:f1:
                    7a:4e:79:96:4c:17:06:44:fc:d4:d6:86:c4:dd:82:
                    8a:a1:78:e3:51:dc:37:f8:74:4d:29:d5:9e:35:30:
                    95:9c:fa:b1:ed:d8:c5:c6:b4:01:dc:ec:22:16:6c:
                    93:0f:28:dd:f5:07:b9:41:ab:05:b1:30:c5:2f:99:
                    1f:49:ac:d9:13:e8:79:e5:04:ea:b1:12:cd:a1:27:
                    24:f3:53:05:f2:8c:d5:66:77:f8:61:c1:0f:0f:25:
                    1d:b5:17:e7:a1:50:09:0f:82:83:eb:35:7d:95:7d:
                    e6:96:0f:3b:b9:88:f4:a8:82:b5:02:4c:70:55:af:
                    16:62:0d:2f:75:e2:cf:4f:43:1e:a8:fa:a6:5e:6e:
                    95:6e:a4:e2:3e:a1:8a:31:07:92:9e:02:1a:0d:6f:
                    c0:56:1d:84:93:cf:c4:3a:75:76:ec:98:8e:d8:b6:
                    fd:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:88:F7:73:20:E9:F2:09:B6:FB:A5:8E:C3:B3:BE:DC:36:DF:4C:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0a272229-8b75-460f-8428-1997894397c8/79584053-6480-36b6-ba05-a038436f1a8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0a272229-8b75-460f-8428-1997894397c8/0a272229-8b75-460f-8428-1997894397c8.crl

            X509v3 Authority Key Identifier:
                keyid:C1:83:F9:43:BE:EE:AB:DD:E9:98:38:4E:B9:30:82:68:BC:A7:8B:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0a272229-8b75-460f-8428-1997894397c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.86.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:47:64:0c:99:a1:bd:18:1a:e4:c9:66:96:85:c3:71:cb:a0:
         08:be:3f:41:13:7b:aa:5c:7c:5b:bb:82:f6:1e:31:2d:0f:c7:
         96:50:27:ab:94:19:d4:cc:79:7a:e4:5c:74:2d:8f:83:2a:91:
         66:33:71:1b:47:e3:ef:9a:b6:89:f9:9c:c3:50:65:85:25:4e:
         fb:24:26:8a:e3:cf:e8:3a:e4:d6:85:cc:f0:68:eb:98:65:00:
         09:8d:97:00:bf:7b:38:8d:6a:5d:d5:62:79:f3:b9:cd:8f:36:
         62:80:75:54:7d:63:cd:2c:3b:f2:9b:0d:61:0f:bf:d5:b6:f6:
         78:1a:dc:f0:c3:1e:12:47:31:24:2d:de:a8:06:ec:8d:fe:d5:
         60:2c:5d:ba:e4:ea:7d:a6:c1:60:3e:dc:4c:8e:22:04:9b:db:
         d1:9c:58:53:f8:4a:7d:78:ce:01:69:f7:63:87:fd:c1:73:3c:
         1f:09:5b:e4:e2:dd:63:ca:f5:ce:54:43:df:c2:92:4a:be:95:
         f5:65:c9:af:77:f5:2b:00:37:b4:da:74:b4:c0:f8:0e:b2:c7:
         1f:29:3a:5f:14:06:f9:b0:14:ca:16:73:34:d8:cd:0d:b2:18:
         11:34:b7:2c:bc:3f:03:9e:cf:2c:fa:40:6b:78:be:2a:59:a7:
         94:10:c9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:31:58 2026 by rpki-client