Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/b689c60f-db70-33f5-924b-db12bc459442.roa
File:                     b689c60f-db70-33f5-924b-db12bc459442.roa (raw, json)
Hash identifier:          ooPwsZg2OwrbLA1sYKhJoceVn3vUdBvOJRKuzUu96G0=
Subject key identifier:   AF:3E:59:C8:47:34:4D:18:76:1A:99:AD:86:B9:3C:51:11:96:DC:C1
Certificate issuer:       /CN=8df83f2e-e4b4-4953-8acc-7816b333d332
Certificate serial:       010D0C9F4328584F82ADBCB9F180F4D73C27F200
Authority key identifier: 0D:A6:2A:C6:EA:68:4E:B2:C5:7D:5B:E2:F5:3F:23:30:63:8F:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/b689c60f-db70-33f5-924b-db12bc459442.roa
Signing time:             Thu 15 Oct 2026 13:00:13 +0000
ROA not before:           Thu 15 Oct 2026 13:00:13 +0000
ROA not after:            Wed 13 Jan 2027 14:00:13 +0000
asID:                     399277
IP address blocks:        204.188.242.0/24 maxlen: 24
                          204.188.254.0/24 maxlen: 24
                          208.98.6.0/24 maxlen: 24
                          208.98.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/8df83f2e-e4b4-4953-8acc-7816b333d332.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/8df83f2e-e4b4-4953-8acc-7816b333d332.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:82:ad:bc:b9:f1:80:f4:d7:3c:27:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8df83f2e-e4b4-4953-8acc-7816b333d332
        Validity
            Not Before: Oct 15 13:00:13 2026 GMT
            Not After : Jan 13 14:00:13 2027 GMT
        Subject: CN=3235a0dd-fa48-4a0c-b51f-87c3c4fdb100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a8:4c:43:10:6a:1c:97:b5:65:cd:21:51:a4:
                    6e:30:70:6a:b1:aa:ad:17:04:9a:de:4b:fd:be:f8:
                    5d:cf:05:ef:1c:30:2f:14:c9:60:2d:e3:71:0a:dc:
                    d0:24:af:e8:5a:aa:c0:e2:c4:da:37:22:b3:c1:b0:
                    80:39:36:74:ab:cc:6a:72:e3:dc:65:1d:9c:ef:42:
                    34:0a:6e:29:1b:79:71:68:ea:d9:18:f6:b6:e4:9f:
                    cd:76:dd:31:f9:be:d1:57:7c:15:ef:9a:24:5f:c5:
                    b8:43:11:9d:42:57:42:45:86:b5:ee:55:9d:58:20:
                    30:a0:e8:fa:37:dd:20:98:61:7a:bf:9d:ee:6b:e0:
                    e5:26:50:41:5e:0f:b6:ff:e5:8c:52:7c:dc:31:f2:
                    62:da:45:60:c5:14:ad:b7:d9:49:2c:11:8b:d2:dc:
                    2a:55:4b:c5:0e:4e:02:5a:19:7e:c2:64:c1:15:f8:
                    f5:8d:fe:55:ee:ba:de:f3:40:8b:f0:80:b6:be:37:
                    51:4c:80:89:58:3c:aa:ae:81:c6:33:f7:ce:ff:67:
                    8e:ca:0a:a7:75:e2:a7:12:02:5a:fa:e1:57:61:3f:
                    38:10:e6:18:32:28:c1:f6:53:21:8c:e8:11:ea:7c:
                    21:ec:3a:6b:fb:ee:ef:4d:cd:58:48:55:d8:6d:3b:
                    8a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:3E:59:C8:47:34:4D:18:76:1A:99:AD:86:B9:3C:51:11:96:DC:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/b689c60f-db70-33f5-924b-db12bc459442.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332/8df83f2e-e4b4-4953-8acc-7816b333d332.crl

            X509v3 Authority Key Identifier:
                keyid:0D:A6:2A:C6:EA:68:4E:B2:C5:7D:5B:E2:F5:3F:23:30:63:8F:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8df83f2e-e4b4-4953-8acc-7816b333d332.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.188.242.0/24
                  204.188.254.0/24
                  208.98.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:7d:93:f6:41:c0:93:24:fb:a6:0c:d6:4c:84:27:8f:1c:37:
         b7:72:4a:59:72:c1:ba:77:0b:02:88:7c:6d:ab:9c:2e:a1:dc:
         dc:84:ff:db:bb:c9:59:d3:55:a8:fb:4b:94:85:63:b3:bf:99:
         71:0b:8c:6e:f1:61:cc:bd:4a:75:d5:29:b8:04:d3:f9:08:17:
         33:b5:c7:41:74:e9:ba:76:26:c1:a1:1b:64:ae:80:fb:1c:7b:
         44:a4:bd:3d:5e:89:54:ec:51:f9:f9:41:ad:c9:7e:6e:f7:fe:
         17:e2:26:10:6c:9f:e8:c3:14:f6:23:bf:42:cb:78:8f:cc:55:
         69:eb:98:f9:12:e4:6f:11:ca:57:fd:c2:de:5d:d5:40:dd:0d:
         3a:50:c8:e3:12:f4:74:95:8e:49:13:1f:d9:f6:3f:51:3e:18:
         b5:d5:aa:f3:e5:c7:13:66:8a:65:ba:ad:67:68:6d:8b:2c:01:
         ee:6f:41:2b:fa:c5:2a:ab:99:c0:7c:66:78:75:0e:36:3b:e6:
         be:0c:26:42:f8:15:12:41:3b:4e:1f:9a:28:1a:bd:9b:14:4f:
         04:7f:c6:46:0e:06:1b:80:78:0a:f7:d6:43:79:7d:a8:46:2f:
         52:ea:af:8e:e3:75:a1:5c:02:c5:9b:07:56:2a:af:fe:c1:93:
         07:3b:dd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 14:34:57 2026 by rpki-client