Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/1c3443e5-ebe4-3caa-96b1-b4f6fb4c5e83.roa
File:                     1c3443e5-ebe4-3caa-96b1-b4f6fb4c5e83.roa (raw, json)
Hash identifier:          99UnEt+jGvJSJW8YJlNK8jKdXWDesqOf1kACPMGnPWU=
Subject key identifier:   CE:BD:AA:A6:72:D3:73:42:E8:F6:AE:62:46:A4:33:7B:E7:80:2C:E4
Certificate issuer:       /CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb
Certificate serial:       010D0C9F4328584EAA51A0DA9A28051E28CA0EC0
Authority key identifier: 8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/1c3443e5-ebe4-3caa-96b1-b4f6fb4c5e83.roa
Signing time:             Thu 30 Jul 2026 01:00:12 +0000
ROA not before:           Thu 30 Jul 2026 01:00:12 +0000
ROA not after:            Wed 28 Oct 2026 01:00:12 +0000
asID:                     33322
IP address blocks:        208.67.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:51:a0:da:9a:28:05:1e:28:ca:0e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb
        Validity
            Not Before: Jul 30 01:00:12 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=ec7ef6f9-82ac-4246-af7c-e8585cbf4236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:aa:e8:31:42:9c:f4:7a:d4:23:f1:da:e7:31:
                    61:73:17:d7:a8:93:4d:c7:58:04:d1:47:ea:97:ea:
                    cd:58:a6:35:22:97:be:23:d0:7c:27:c2:6a:81:b0:
                    95:6c:1b:b4:04:b1:7d:da:94:86:ee:14:6a:98:1a:
                    dd:67:d3:fb:ac:20:2f:8b:10:03:48:fd:f6:69:1a:
                    03:3d:3f:a8:2b:20:85:b4:6a:c1:9d:57:f4:9b:b1:
                    c0:e3:1b:96:e7:0f:b2:bf:35:28:d5:d3:dd:86:bb:
                    27:84:68:6f:21:4e:5b:24:24:83:98:19:f1:69:14:
                    fb:95:ce:08:8a:0f:c7:5a:ee:76:6f:b4:a3:a6:6b:
                    f2:e4:2f:d7:6c:25:6b:2d:84:59:d9:a5:b3:40:b7:
                    df:d2:70:75:e9:1b:61:83:7b:ed:92:56:0a:94:9d:
                    5b:cf:ef:4d:5a:64:be:8c:7e:7a:52:dd:05:77:b0:
                    62:4a:18:36:fe:f0:13:63:0c:f0:5c:c1:7e:65:ac:
                    f4:f6:36:ec:5e:1a:c2:7e:43:f9:c5:37:40:ce:7e:
                    be:4a:ce:4c:d4:60:06:ad:d1:ee:1b:17:75:d8:02:
                    e0:a0:17:a5:20:2f:26:39:e0:bc:ac:da:08:33:cb:
                    75:d1:f4:a8:e8:cc:e6:be:89:94:26:3f:0c:6d:c2:
                    a8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:BD:AA:A6:72:D3:73:42:E8:F6:AE:62:46:A4:33:7B:E7:80:2C:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/1c3443e5-ebe4-3caa-96b1-b4f6fb4c5e83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl

            X509v3 Authority Key Identifier:
                keyid:8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.67.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:f0:2f:f1:75:95:ec:f5:44:6b:36:b1:4d:21:19:1c:b8:3d:
         d3:e8:d6:58:e0:dc:4c:59:39:7b:0b:56:7b:cc:b4:08:fb:e2:
         90:42:a1:97:3a:c5:84:7a:f3:69:bc:04:7d:58:dc:ec:8e:1a:
         06:f4:36:fd:77:ef:72:60:af:93:70:d1:5e:73:16:fb:d4:2e:
         ef:1f:a4:1e:35:7c:33:40:11:48:9c:b1:b8:50:e3:76:95:02:
         16:a1:45:08:04:1f:c3:6a:8a:87:b0:80:9d:15:47:5d:4d:66:
         40:64:e7:f2:36:25:cb:2d:c5:8f:3a:ae:54:46:0c:b7:c3:d3:
         7f:bd:0e:e3:e7:e6:92:f4:a0:b0:0b:d6:9d:8f:75:31:8e:9e:
         86:3c:ae:39:42:ea:c5:b6:19:f8:e1:1e:97:71:63:5f:3c:bb:
         18:e3:6d:8d:db:a3:e6:2b:5a:49:b0:c2:62:d3:0b:3b:67:e3:
         b5:6e:52:5e:6f:ed:f9:f4:31:15:e4:fa:2e:c6:42:ba:92:63:
         7f:c1:e3:73:c6:d0:a8:41:8d:6c:6c:81:a5:0d:76:a4:8b:d1:
         2f:11:42:52:da:aa:61:f9:a5:18:61:83:69:95:08:9b:d4:1b:
         d1:bc:10:7d:c6:18:43:cf:1a:f5:d7:cc:4e:fc:c6:29:28:09:
         bd:f9:ec:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 00:40:05 2026 by rpki-client