Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb327032-4e1e-4c38-9cae-206da2d15d25/3dc26fd3-5382-34da-8235-9bfadd47dd34.roa
File:                     3dc26fd3-5382-34da-8235-9bfadd47dd34.roa (raw, json)
Hash identifier:          etwmZs8Y7Z/8DoYR0tusHIiK4fh7GgLNWM8PTqhU39k=
Subject key identifier:   23:2D:81:2F:67:EF:9C:5B:2F:6F:D6:48:61:4D:9E:1F:95:7E:77:58
Certificate issuer:       /CN=eb327032-4e1e-4c38-9cae-206da2d15d25
Certificate serial:       010D0C9F4328584F6F2315355FAB1A71316EEA40
Authority key identifier: CF:71:0A:CB:39:5D:5D:43:6A:A6:C2:CB:D3:CC:CB:CD:28:B5:44:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb327032-4e1e-4c38-9cae-206da2d15d25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb327032-4e1e-4c38-9cae-206da2d15d25/3dc26fd3-5382-34da-8235-9bfadd47dd34.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     8075
IP address blocks:        157.207.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb327032-4e1e-4c38-9cae-206da2d15d25/eb327032-4e1e-4c38-9cae-206da2d15d25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb327032-4e1e-4c38-9cae-206da2d15d25/eb327032-4e1e-4c38-9cae-206da2d15d25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb327032-4e1e-4c38-9cae-206da2d15d25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:23:15:35:5f:ab:1a:71:31:6e:ea:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb327032-4e1e-4c38-9cae-206da2d15d25
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=fa166fb3-da60-40a0-a847-12412c0db162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8c:9b:d2:5c:f7:51:0c:16:cf:a8:2c:83:47:
                    d7:8e:a7:a0:16:8a:00:b5:8c:0e:4a:58:8f:b8:f4:
                    36:a8:0b:3c:41:09:5a:36:13:1b:15:dd:ec:ec:8a:
                    83:bc:26:6f:fe:71:ad:a2:c0:90:ec:0a:07:80:52:
                    5a:53:49:c6:0b:cc:ca:5b:86:23:aa:41:61:14:44:
                    1b:4f:a1:58:ad:22:e7:93:d2:f2:07:42:a6:7b:90:
                    7a:9b:ec:ee:c5:45:98:ec:68:86:f9:af:b4:98:aa:
                    ec:f1:74:9c:ae:f6:98:78:4a:44:93:e3:be:eb:b9:
                    92:4f:46:e1:73:ba:af:bf:a2:04:5d:18:da:49:79:
                    6d:dc:24:a9:dd:8e:94:b0:4e:0f:4f:a3:58:0c:a1:
                    99:c0:13:15:d4:29:74:e7:45:10:fe:35:93:72:89:
                    88:a2:b3:5b:82:ea:5e:cd:80:97:a4:cc:2a:8e:70:
                    57:4e:7f:d2:69:2a:c2:65:f5:e5:90:a7:5b:e9:1c:
                    b9:d9:6b:92:e4:b4:bd:2f:d9:b9:d2:6b:d9:04:64:
                    51:35:ad:b8:9d:25:c3:bf:0a:2d:d1:f2:01:92:9f:
                    32:36:72:96:10:07:5d:69:8b:ee:0a:0b:92:8c:f6:
                    98:eb:0b:48:a1:1e:4c:7b:a8:e4:e5:e3:58:b5:26:
                    84:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:2D:81:2F:67:EF:9C:5B:2F:6F:D6:48:61:4D:9E:1F:95:7E:77:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb327032-4e1e-4c38-9cae-206da2d15d25/3dc26fd3-5382-34da-8235-9bfadd47dd34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb327032-4e1e-4c38-9cae-206da2d15d25/eb327032-4e1e-4c38-9cae-206da2d15d25.crl

            X509v3 Authority Key Identifier:
                keyid:CF:71:0A:CB:39:5D:5D:43:6A:A6:C2:CB:D3:CC:CB:CD:28:B5:44:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb327032-4e1e-4c38-9cae-206da2d15d25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.207.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:ce:ba:da:1e:c0:ff:80:66:cc:99:9f:b3:17:dd:eb:24:8e:
         22:d7:a1:9d:6a:44:ee:24:f3:87:c4:51:17:19:80:ed:7b:1a:
         7c:d2:6e:cd:94:0e:46:3c:c1:29:0a:af:5a:5d:d5:c1:56:01:
         71:d6:be:8b:1c:1e:1d:b8:15:93:ee:5d:64:28:b7:3c:db:34:
         19:c4:3e:5b:75:e4:e9:6a:4e:47:c2:b6:f4:b5:2f:14:80:59:
         d6:28:1a:66:bd:c0:b9:47:97:ce:ee:e8:60:4b:a5:c2:b6:8a:
         3c:0d:a2:16:b6:35:ce:a7:ee:03:a7:94:f9:35:ac:aa:9a:d9:
         ff:a0:28:c5:a7:1c:d4:26:70:5e:32:b6:1f:53:d7:15:30:c5:
         93:f1:03:5e:b7:d8:8e:57:3a:f3:5a:af:ac:bf:ef:93:fb:59:
         c6:65:7c:c2:1e:b6:23:98:18:98:3c:66:6b:73:32:71:6f:2d:
         4e:a8:19:f4:3f:ac:8d:a6:d5:32:e3:1f:0d:4d:44:32:70:aa:
         99:35:f1:52:8f:be:08:18:3f:03:e7:25:25:d5:88:eb:08:20:
         a3:8f:35:12:1b:11:8a:00:93:7e:bc:db:9f:ce:e2:88:1c:69:
         c6:91:ea:30:ad:8b:ab:71:d9:1a:91:99:cd:38:b1:38:69:7e:
         8b:d7:54:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:47:08 2026 by rpki-client