Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/f320fd1c-e993-3ba9-88cc-8ecb0a72c9a7.roa
File:                     f320fd1c-e993-3ba9-88cc-8ecb0a72c9a7.roa (raw, json)
Hash identifier:          9/ULYbqh5ejhtUk00Vr6n4a9YU8euJ5mpm/7P8oMZSc=
Subject key identifier:   94:A4:FA:E2:33:7B:C4:63:AC:7F:7E:3C:83:BF:63:33:F1:07:16:0D
Certificate issuer:       /CN=9adb478e-0ae2-46fc-845e-7fe13475c90e
Certificate serial:       010D0C9F4328584EA8EC3AA79546434187BFC140
Authority key identifier: 7B:B3:F9:0D:26:23:56:32:7B:A4:EE:89:03:95:03:B4:F7:D6:D2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/f320fd1c-e993-3ba9-88cc-8ecb0a72c9a7.roa
Signing time:             Wed 29 Jul 2026 13:00:12 +0000
ROA not before:           Wed 29 Jul 2026 13:00:12 +0000
ROA not after:            Tue 27 Oct 2026 13:00:12 +0000
asID:                     272106
IP address blocks:        8.243.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a8:ec:3a:a7:95:46:43:41:87:bf:c1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9adb478e-0ae2-46fc-845e-7fe13475c90e
        Validity
            Not Before: Jul 29 13:00:12 2026 GMT
            Not After : Oct 27 13:00:12 2026 GMT
        Subject: CN=43628dd0-3266-4578-9408-a2b72760c3fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:16:4e:dd:93:c2:2e:97:ba:d5:91:d4:d0:1f:
                    d5:51:41:d4:e3:48:7c:44:7e:6e:e4:a5:75:8c:72:
                    42:91:74:c8:82:d0:2f:a4:35:2d:e1:a2:35:ac:9d:
                    41:da:0a:0e:a5:83:fc:9f:33:df:f3:76:eb:1a:35:
                    94:2d:2a:a3:a6:be:70:26:07:ba:41:0f:9c:10:f3:
                    73:69:ac:da:ca:8f:df:bb:86:5b:e6:a8:0e:51:0a:
                    f8:fa:6d:9c:02:ec:6d:1b:56:0c:aa:65:37:65:c9:
                    6c:69:aa:68:16:aa:55:5c:27:af:a1:27:74:04:7d:
                    9b:16:24:74:f2:40:df:46:24:9d:78:c7:33:d5:07:
                    1e:cc:09:30:b5:39:3b:36:a5:3a:0e:03:4f:2f:2f:
                    24:46:f3:52:04:2f:af:5a:c6:1e:a4:7c:03:45:d0:
                    8d:15:d7:79:8b:c9:9b:a1:19:65:52:dd:ec:24:95:
                    25:43:61:35:c8:f7:d3:d9:85:1a:29:e2:9a:33:3d:
                    9c:80:21:ca:d8:0b:7c:ec:4c:35:c9:27:d4:59:b9:
                    be:2a:b7:a7:9d:ed:a0:8e:8b:3c:2d:64:65:55:8f:
                    6d:bf:99:82:db:78:b8:62:56:aa:6d:d1:1e:90:66:
                    e6:b5:1f:81:e1:2b:68:44:f2:d3:99:7d:90:7b:bd:
                    18:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A4:FA:E2:33:7B:C4:63:AC:7F:7E:3C:83:BF:63:33:F1:07:16:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/f320fd1c-e993-3ba9-88cc-8ecb0a72c9a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e/9adb478e-0ae2-46fc-845e-7fe13475c90e.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B3:F9:0D:26:23:56:32:7B:A4:EE:89:03:95:03:B4:F7:D6:D2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9adb478e-0ae2-46fc-845e-7fe13475c90e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.243.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:ff:26:06:ba:00:97:2b:ed:9b:e9:87:d9:ea:12:b9:2b:14:
         1b:8f:fd:54:ab:6c:10:f8:ba:47:44:0d:7e:30:fc:7f:ad:24:
         a3:bf:a4:31:28:06:24:e3:4b:fa:33:fb:51:fb:7b:a9:c8:5b:
         fb:36:0c:41:8a:8d:3c:59:e1:5a:27:6c:8f:56:0f:70:04:ae:
         a7:ab:d2:fe:13:98:c5:6f:92:47:3c:2b:bd:26:95:48:2b:6d:
         dc:b8:33:f8:6d:ca:cd:a3:93:ad:bc:39:bf:47:02:31:4f:8c:
         03:5c:9a:ca:3d:7e:ab:df:72:97:8d:61:aa:1e:d2:13:af:07:
         34:ba:78:93:42:4d:f6:32:ba:96:a4:82:a6:67:e2:23:3d:dc:
         6c:fd:d7:f8:4d:10:9a:e0:f9:de:db:48:15:3d:7b:96:ef:b8:
         8e:a6:42:a1:de:71:f7:78:f7:98:00:42:12:fe:ed:8b:6c:aa:
         dc:6e:68:de:0c:52:d7:5c:d9:fa:7b:7f:af:b6:36:1a:fa:67:
         d5:40:98:35:38:fb:1f:47:64:20:1c:d2:3a:f0:41:01:36:46:
         05:a3:63:a9:8b:cf:f8:72:43:32:39:39:dd:a4:7c:b0:f6:69:
         51:e7:28:27:e1:a4:1f:70:5f:3b:0f:37:e1:10:00:de:9f:8b:
         ec:f8:7f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:26:48 2026 by rpki-client