Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/ea9c7cde-a505-3921-8117-cb785a48a564.roa
File:                     ea9c7cde-a505-3921-8117-cb785a48a564.roa (raw, json)
Hash identifier:          FpjyquT14Vka+NK8gDg+U+ZOGis5+orBmbTl5jfgggg=
Subject key identifier:   62:67:1D:43:D7:F2:79:F3:AD:DE:4A:5D:C6:0C:C1:5E:13:E0:1D:79
Certificate issuer:       /CN=8cf12337-8eb8-43a2-a75e-2b01ceb95c39
Certificate serial:       010D0C9F4328584F89A87197A3B2417B0560D5A0
Authority key identifier: 7C:DF:79:84:75:CE:4F:C7:0C:76:C4:5B:15:5E:91:D9:1C:9A:3E:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/ea9c7cde-a505-3921-8117-cb785a48a564.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     14499
IP address blocks:        208.90.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:71:97:a3:b2:41:7b:05:60:d5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cf12337-8eb8-43a2-a75e-2b01ceb95c39
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=04d5129d-9404-485f-93d1-506d411de323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e1:1e:33:52:aa:64:c9:7b:48:cb:d2:d7:60:
                    e9:ed:e0:25:96:e9:f3:f9:82:47:f4:22:d7:9d:e4:
                    05:ac:f8:2a:bd:92:38:f3:5b:4b:0e:c2:7e:55:e1:
                    97:81:14:0b:fc:f9:f3:35:37:f4:6b:db:a3:b8:ca:
                    f3:55:26:66:ba:cb:8d:7b:6d:64:56:80:61:ca:e9:
                    ff:be:29:3b:26:be:3d:37:49:40:91:41:b1:99:94:
                    14:8f:78:d9:d1:9d:0d:56:68:2f:e4:2b:3a:f3:92:
                    5c:ba:83:82:91:f8:c4:7c:cf:62:2c:f6:96:aa:01:
                    8e:09:12:23:a8:eb:a0:a2:1b:52:e8:30:09:e2:11:
                    73:79:59:8d:ae:64:79:59:8b:e7:86:66:57:da:e1:
                    02:3e:e0:95:20:5b:96:72:d7:03:42:81:4e:4a:cd:
                    1e:a7:9f:5c:7d:03:3a:46:98:b4:87:40:6d:89:15:
                    38:f2:91:fb:60:40:88:a1:a1:4e:ef:32:be:cd:cf:
                    1d:7a:7e:10:e8:15:0d:a8:76:a9:ef:f6:9c:7f:cd:
                    ac:1a:78:c1:28:1c:2d:7c:4d:9e:5d:2a:1a:16:f5:
                    79:3e:93:9a:ea:a5:1b:d1:fa:a8:d9:40:d1:de:04:
                    87:0a:6c:bb:e7:f2:b8:8a:38:11:3e:18:df:93:d9:
                    93:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:67:1D:43:D7:F2:79:F3:AD:DE:4A:5D:C6:0C:C1:5E:13:E0:1D:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/ea9c7cde-a505-3921-8117-cb785a48a564.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.crl

            X509v3 Authority Key Identifier:
                keyid:7C:DF:79:84:75:CE:4F:C7:0C:76:C4:5B:15:5E:91:D9:1C:9A:3E:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.90.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:68:6f:e1:d8:d0:8c:82:26:54:fb:90:d3:e3:23:97:b8:c8:
         39:fb:ae:c9:3a:8e:8c:c6:00:a3:67:63:f2:18:49:17:d9:87:
         8d:9e:28:2f:5e:4f:15:b0:9f:8d:1f:9d:b0:01:99:f8:24:d2:
         a3:8b:15:5e:3b:98:ca:72:c9:8a:c3:cd:d2:41:c0:e3:49:e3:
         ec:17:8f:e2:2b:8d:d2:0f:94:97:e6:be:a3:b0:3b:e4:5a:9e:
         36:33:dd:bf:54:59:3d:fb:9e:a6:33:a0:bf:c3:d5:ff:3f:83:
         80:28:71:df:db:1a:3a:11:e4:a9:cd:80:af:c1:08:04:53:45:
         4c:de:16:93:12:36:95:24:79:a1:40:fc:6f:dc:84:24:a4:9f:
         30:b9:93:72:44:c4:90:bb:8b:9f:97:46:08:a3:a8:10:a8:1e:
         91:64:06:eb:96:0e:81:74:8a:61:7e:03:b2:21:b9:5c:50:99:
         de:d0:97:65:bc:f7:4d:3d:60:e3:f5:34:c1:69:70:b0:75:8e:
         17:34:40:56:fe:ab:42:22:92:92:6a:b3:62:8c:b6:c4:91:46:
         02:67:b3:0f:29:70:81:58:a4:b3:22:ff:bb:e3:c7:90:0b:b0:
         0f:8c:7e:d0:06:3d:d5:f5:6d:04:d7:d0:49:d3:74:43:40:85:
         fd:fb:ad:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:33:11 2026 by rpki-client