Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/9870b5b3-8630-3e98-8106-5f1d60da358e.roa
File:                     9870b5b3-8630-3e98-8106-5f1d60da358e.roa (raw, json)
Hash identifier:          GAagFXa+X3eCtpqEKw52IS8uGdyCeiDjv3yva22UHEo=
Subject key identifier:   8D:D7:66:84:56:02:08:DE:79:AD:24:85:57:A7:02:A8:CC:64:4B:AB
Certificate issuer:       /CN=15106386-88d8-4103-adeb-a6e7c684ed09
Certificate serial:       010D0C9F4328584ED431E76065882D5D3F0EED00
Authority key identifier: 97:96:AD:FA:13:B8:49:E5:BB:CE:A4:C0:40:17:DC:3E:AD:D2:A3:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/9870b5b3-8630-3e98-8106-5f1d60da358e.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     214025
IP address blocks:        208.66.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/15106386-88d8-4103-adeb-a6e7c684ed09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/15106386-88d8-4103-adeb-a6e7c684ed09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:e7:60:65:88:2d:5d:3f:0e:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15106386-88d8-4103-adeb-a6e7c684ed09
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=78f765fc-8fc2-48a4-ae89-8b1852f76cb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:75:6f:8d:37:b1:aa:84:b6:c6:ba:5d:6f:ee:
                    85:1c:08:ba:8a:77:68:27:e7:a4:a1:59:7f:00:84:
                    fd:43:4f:47:e8:e5:b0:c8:66:7b:15:d1:93:2d:74:
                    c1:b0:7f:a0:c7:14:c5:d3:c6:20:89:9d:87:ee:ab:
                    90:bf:a9:73:0b:30:73:cf:0b:0a:f9:3e:bc:a1:e3:
                    10:50:de:23:e4:b9:bc:5e:3a:53:75:b8:ea:07:4a:
                    97:f8:f2:45:0f:22:8c:9a:5f:e5:40:5b:80:11:9f:
                    91:6c:32:43:ac:a2:e1:bd:20:77:3a:3e:67:cc:e9:
                    88:23:92:d2:97:b7:d6:70:cb:25:3f:32:5b:7d:5c:
                    55:e6:de:20:46:8f:e6:ff:00:69:8d:2d:68:41:75:
                    d9:b6:df:b1:e2:78:e4:85:a5:46:80:35:6c:b9:ec:
                    7e:3b:06:63:d2:07:60:54:0c:f0:ed:0f:04:dc:b2:
                    ec:20:99:c4:43:6d:2e:3e:a3:3f:02:4e:18:69:1a:
                    ed:10:d9:9d:3e:e5:4c:c5:f5:e1:de:65:46:4c:fd:
                    8a:77:57:20:e5:6e:65:c5:d1:dc:35:ef:8f:4f:57:
                    74:8e:61:ef:7e:eb:2b:11:01:a7:cd:da:c4:82:16:
                    64:ca:0b:a7:d2:69:a9:52:cd:34:0b:67:46:f3:86:
                    dc:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D7:66:84:56:02:08:DE:79:AD:24:85:57:A7:02:A8:CC:64:4B:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/9870b5b3-8630-3e98-8106-5f1d60da358e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/15106386-88d8-4103-adeb-a6e7c684ed09.crl

            X509v3 Authority Key Identifier:
                keyid:97:96:AD:FA:13:B8:49:E5:BB:CE:A4:C0:40:17:DC:3E:AD:D2:A3:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.66.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:b4:fd:d3:cb:15:f5:b4:e2:1e:f5:25:e3:b9:a9:0d:fa:d5:
         4a:97:be:89:9a:ad:40:e5:e0:6f:74:30:e1:39:19:94:37:fe:
         18:c3:e5:e9:bb:51:98:92:e9:43:83:89:c4:08:87:03:f6:f0:
         a6:31:59:38:de:47:0c:d6:cc:3c:a1:8c:ce:96:16:31:9f:1c:
         81:a2:00:f6:1a:33:87:0e:ad:b0:c0:40:c8:34:73:64:d2:10:
         5c:a4:b9:9d:92:ff:09:cc:a0:74:2e:12:39:2d:86:ff:8b:22:
         f3:b4:4e:de:f9:d8:df:6c:9e:a2:29:98:75:18:f4:b9:f1:c4:
         08:ea:81:7d:52:8c:0c:fa:e1:a8:7c:b4:7c:10:52:49:cf:ee:
         1a:c4:56:63:28:be:26:54:eb:5b:6a:c1:2a:fe:86:cf:e7:18:
         98:ed:d4:5c:79:b9:77:7b:c8:c4:63:0e:de:c6:a0:d3:ba:d6:
         b9:e2:4f:55:62:63:6a:f8:f4:6e:39:cb:3e:2c:63:d9:e2:df:
         d6:67:d5:cb:48:63:8a:34:bf:3e:a7:c5:62:d3:09:3b:cc:ee:
         b3:d3:96:52:d1:71:ae:6e:f6:4e:98:ec:a6:02:1a:e3:47:a6:
         60:78:19:db:68:eb:a8:9d:45:12:38:f5:89:2d:34:0f:c3:7c:
         e8:91:19:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:03:29 2026 by rpki-client