Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/300a5a4d-5d0d-3e22-a9a1-e2591a8e363d.roa
File:                     300a5a4d-5d0d-3e22-a9a1-e2591a8e363d.roa (raw, json)
Hash identifier:          TKO2IpL7T3heT6w38bzkK1pf43PxQQaW0M4vnso/nFU=
Subject key identifier:   FB:BF:E2:43:7D:DC:B5:47:1A:5C:F3:8D:F2:9F:07:36:C7:FE:12:E8
Certificate issuer:       /CN=cd8deff7-6be9-4d16-8349-9f6439775b0a
Certificate serial:       010D0C9F4328584EBB11BAC86ACDF52639B1C080
Authority key identifier: CE:14:25:01:6D:C5:67:B9:24:32:56:F1:DC:CA:9A:A3:B7:DD:74:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/300a5a4d-5d0d-3e22-a9a1-e2591a8e363d.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     2728
IP address blocks:        162.255.88.0/21 maxlen: 24
                          199.185.174.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:ba:c8:6a:cd:f5:26:39:b1:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd8deff7-6be9-4d16-8349-9f6439775b0a
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=39c108cd-e361-444d-980f-da9f678a690e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:49:8e:99:85:82:f3:15:8d:33:ca:1d:33:b1:
                    08:ab:72:a4:32:33:39:76:50:64:21:d1:d1:a9:ce:
                    76:c1:70:ec:0c:56:ad:86:a9:ef:b7:ba:bb:36:ac:
                    52:17:c0:52:97:5a:d2:3c:a3:bb:be:e8:9b:5a:ca:
                    3d:df:5c:6c:5c:4c:9d:9f:37:d7:45:92:ce:a9:65:
                    d2:c6:3b:09:9f:8a:cc:86:b1:e6:eb:31:e2:d6:78:
                    95:ec:a7:30:3b:5e:89:f2:ed:f1:4d:f7:a4:23:cd:
                    fc:ff:b4:82:cf:62:8c:02:55:71:bf:f3:de:01:99:
                    f8:95:08:e4:08:de:56:38:17:a5:d8:58:cd:d1:6d:
                    cc:73:2f:81:40:67:e4:d8:41:20:61:d4:82:6a:ce:
                    3b:4d:df:37:62:12:71:35:0c:f2:47:0f:7f:3e:db:
                    40:b4:59:9e:24:87:bf:5a:52:e4:e9:22:f8:73:c8:
                    1a:34:1b:bc:c1:a8:51:5e:34:05:e9:a6:39:40:98:
                    3d:fa:8a:63:1f:52:f8:7e:1b:cc:28:f1:c8:26:c7:
                    0e:21:27:d6:19:c3:9e:6b:89:e8:46:c9:f7:13:4d:
                    af:3d:a3:54:eb:06:7c:e3:31:1a:7e:4d:1f:b9:a4:
                    a8:b6:18:26:38:14:36:ec:c7:30:3a:a8:a2:a5:6b:
                    75:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:BF:E2:43:7D:DC:B5:47:1A:5C:F3:8D:F2:9F:07:36:C7:FE:12:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/300a5a4d-5d0d-3e22-a9a1-e2591a8e363d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.crl

            X509v3 Authority Key Identifier:
                keyid:CE:14:25:01:6D:C5:67:B9:24:32:56:F1:DC:CA:9A:A3:B7:DD:74:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.255.88.0/21
                  199.185.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:4d:e8:f4:1f:23:9c:fb:95:8f:d4:4d:e1:86:41:41:57:56:
         1f:f7:69:0d:e0:e5:d5:f3:a1:aa:83:dd:44:ac:e2:06:90:e0:
         d2:a3:e1:e1:e8:3e:ec:53:32:2f:d4:01:30:51:5d:cd:e1:49:
         bb:49:f1:54:18:0b:e1:bf:c8:d9:0b:e2:4f:ed:1a:5d:d9:16:
         a6:ae:14:7e:ae:29:28:8e:b1:e8:29:df:ff:e3:c5:5c:0a:75:
         14:25:98:54:cc:0a:7a:da:66:2a:44:14:fa:a6:eb:46:69:6c:
         c4:c2:07:60:d5:43:53:11:3b:e5:1b:93:d0:b1:f8:0f:1e:47:
         97:62:8d:c2:4d:9c:83:fb:95:50:95:6f:c5:b4:19:88:81:f7:
         4c:25:df:dd:6a:37:c6:67:8b:78:3b:da:1b:70:67:f2:6a:58:
         d8:25:50:b1:21:47:f2:10:cf:55:03:af:3d:0a:52:dd:51:c4:
         25:6b:32:43:fe:b6:f3:a1:09:01:71:a7:76:16:af:02:f9:d3:
         86:80:06:f8:30:9e:5e:67:99:c7:22:b7:43:74:c7:4a:2c:09:
         b8:3e:4a:df:7d:43:20:38:65:86:5b:1f:da:9a:ba:a2:77:cb:
         4a:31:90:ef:f8:53:2f:38:d5:8d:17:18:40:b6:93:7b:a3:5e:
         6b:32:50:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 06:16:06 2026 by rpki-client