Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e/8267bd09-4781-3fb5-8a71-7b1f8e7ec73b.roa
File:                     8267bd09-4781-3fb5-8a71-7b1f8e7ec73b.roa (raw, json)
Hash identifier:          RggjRYbn4d55MagpZEriS3O9nfZj74iXLqFi/k+4jBE=
Subject key identifier:   BD:99:B0:D4:AD:D5:72:C3:1D:A5:41:3A:D6:D0:64:7C:85:D3:81:49
Certificate issuer:       /CN=19e347cf-c0cb-49a3-b025-5d36006aab3e
Certificate serial:       010D0C9F4328584F4975157A9363D3629A786100
Authority key identifier: A3:61:7B:4D:1C:DA:67:81:9B:17:F0:A1:4E:D1:D5:B3:A7:36:D9:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e/8267bd09-4781-3fb5-8a71-7b1f8e7ec73b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     398537
IP address blocks:        204.108.164.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e/19e347cf-c0cb-49a3-b025-5d36006aab3e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e/19e347cf-c0cb-49a3-b025-5d36006aab3e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:15:7a:93:63:d3:62:9a:78:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19e347cf-c0cb-49a3-b025-5d36006aab3e
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=05b24753-4b75-4046-95aa-0d21f01d82e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e6:f1:8c:9f:be:77:ca:30:d8:85:d0:62:c3:
                    d7:90:9e:ae:75:ca:1a:95:86:5e:b7:6d:ca:b9:a8:
                    8b:ec:11:34:c3:b5:83:49:97:67:30:68:97:88:a7:
                    80:ff:a5:3c:ed:d5:61:76:b5:dd:45:72:f6:a7:c5:
                    ed:8e:ae:6e:04:7f:49:8b:87:0b:88:9c:4d:b9:0e:
                    c0:dd:fb:c6:a5:95:3f:f9:7e:d1:56:2d:61:40:4d:
                    df:2a:c3:15:b6:c9:ed:5b:35:f8:c3:26:51:51:af:
                    a6:2f:cc:77:e9:ce:3e:c3:91:af:c1:aa:cb:4e:b3:
                    7b:0b:17:b7:c7:bb:58:98:0b:19:2f:64:27:ce:a7:
                    c0:0f:b5:15:ae:2b:b2:75:a1:d1:19:e7:52:fd:de:
                    8a:a5:e3:be:f7:a1:46:c6:af:31:3e:e0:30:77:86:
                    95:5a:86:87:9d:97:0b:ae:46:4e:95:64:c7:9d:0e:
                    19:68:aa:81:0d:68:88:e6:05:d7:cd:0b:39:84:4a:
                    00:4d:d6:9e:2a:2e:6a:7d:6f:29:ce:45:8a:aa:ac:
                    ae:23:f6:a8:05:0c:b2:ec:0b:ef:37:71:4e:12:17:
                    ae:9c:5e:db:47:70:e2:d9:51:84:e7:53:49:b7:4e:
                    5c:15:a9:a0:2d:09:8f:b1:7a:cf:70:ee:55:18:a3:
                    5a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:99:B0:D4:AD:D5:72:C3:1D:A5:41:3A:D6:D0:64:7C:85:D3:81:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e/8267bd09-4781-3fb5-8a71-7b1f8e7ec73b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e/19e347cf-c0cb-49a3-b025-5d36006aab3e.crl

            X509v3 Authority Key Identifier:
                keyid:A3:61:7B:4D:1C:DA:67:81:9B:17:F0:A1:4E:D1:D5:B3:A7:36:D9:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/19e347cf-c0cb-49a3-b025-5d36006aab3e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.108.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:5b:96:71:4c:34:e7:ae:23:87:45:e0:e2:20:11:9b:b9:a8:
         eb:20:45:c5:83:b5:c9:68:cf:8f:70:9f:ac:43:a7:5b:ca:bb:
         50:74:b6:b2:51:a2:0a:1b:a1:40:fb:c3:7f:0d:01:f2:2c:32:
         f3:c3:db:00:57:0b:ff:62:01:40:c6:59:5b:9d:8f:9d:65:41:
         48:38:4f:84:de:a4:2f:42:39:16:a0:52:12:c3:58:9d:ae:57:
         b1:0d:6d:8d:65:eb:33:9f:83:75:b2:2d:94:dd:91:3d:9b:6b:
         7d:e3:bf:f5:a6:46:80:6e:e3:0f:95:af:4d:89:c2:9d:ec:ed:
         9f:5f:3f:44:14:b2:36:20:dd:19:98:39:1f:4d:8a:7c:7c:e9:
         fa:8f:96:9b:2a:4d:ad:64:1f:09:97:3b:30:e5:50:d7:52:29:
         b2:58:67:de:e1:eb:bf:6c:b2:f1:45:07:7f:a0:9f:6f:52:99:
         90:07:89:b4:8a:ea:0f:b7:d9:64:9a:65:55:f8:60:04:dd:11:
         7c:6b:b6:45:7e:bc:7a:d9:e6:71:16:48:9c:e5:ec:1a:87:a2:
         6c:6f:2a:09:ba:af:c2:89:e5:f7:b6:21:b5:22:f6:f4:b6:00:
         09:8d:71:43:f1:ed:14:91:0d:de:3c:d4:82:74:b0:78:9d:dd:
         ed:40:24:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:21:43 2026 by rpki-client