Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0fe82fc7-2614-4323-834d-49d5cfc7fe59/4d889da9-5014-3fd0-afdd-a16e4304dcc2.roa
File:                     4d889da9-5014-3fd0-afdd-a16e4304dcc2.roa (raw, json)
Hash identifier:          GYpIA1JLyqnxQbvHEXrP6UhUS92MTpLuM6wzMGsZHP8=
Subject key identifier:   4D:A1:CA:4F:BD:49:DE:36:C7:CA:86:4F:F8:4A:7B:18:67:22:D1:A1
Certificate issuer:       /CN=0fe82fc7-2614-4323-834d-49d5cfc7fe59
Certificate serial:       010D0C9F4328584F78E82C92A842C8084E1EEEC0
Authority key identifier: F5:AF:D9:7F:44:87:5F:A6:9E:80:CA:D3:34:43:B1:D2:0F:4D:13:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0fe82fc7-2614-4323-834d-49d5cfc7fe59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0fe82fc7-2614-4323-834d-49d5cfc7fe59/4d889da9-5014-3fd0-afdd-a16e4304dcc2.roa
Signing time:             Mon 12 Oct 2026 01:00:13 +0000
ROA not before:           Mon 12 Oct 2026 01:00:13 +0000
ROA not after:            Sun 10 Jan 2027 02:00:13 +0000
asID:                     27631
IP address blocks:        208.90.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0fe82fc7-2614-4323-834d-49d5cfc7fe59/0fe82fc7-2614-4323-834d-49d5cfc7fe59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0fe82fc7-2614-4323-834d-49d5cfc7fe59/0fe82fc7-2614-4323-834d-49d5cfc7fe59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0fe82fc7-2614-4323-834d-49d5cfc7fe59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:78:e8:2c:92:a8:42:c8:08:4e:1e:ee:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fe82fc7-2614-4323-834d-49d5cfc7fe59
        Validity
            Not Before: Oct 12 01:00:13 2026 GMT
            Not After : Jan 10 02:00:13 2027 GMT
        Subject: CN=7e4f55e8-840f-49cd-b135-6e573d8f4eb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:81:3f:5a:6a:e2:6a:47:85:da:6f:82:d8:19:
                    db:3f:70:6e:68:82:5a:f4:5e:ee:3f:3a:af:bd:07:
                    75:a2:68:ba:bc:36:79:a8:7e:1a:c6:fc:9c:1e:d9:
                    db:0b:a1:66:28:ba:49:99:d5:07:17:76:fc:28:53:
                    37:90:39:32:19:b5:16:61:ed:7f:d1:f3:d7:db:8e:
                    be:bb:19:91:01:5f:c9:ea:4a:25:a2:cc:67:61:1d:
                    1e:75:28:57:87:fc:f7:26:c5:6f:69:83:e8:38:3f:
                    91:ac:03:3e:a1:13:41:25:61:19:0e:06:95:df:71:
                    aa:b7:07:6d:2f:e8:1b:0c:61:e6:ab:28:b2:46:fa:
                    e3:61:7d:34:a7:74:df:54:91:f1:d2:91:d7:6e:1e:
                    95:31:25:1d:8d:6c:83:93:76:15:29:e3:59:65:d3:
                    55:b7:8d:f8:7c:f8:47:eb:16:41:7f:17:39:1d:eb:
                    e7:0d:b4:b3:2c:02:f3:09:d6:bd:0b:9c:72:45:4f:
                    b4:a6:d6:1f:91:90:02:40:f4:67:e7:fd:af:93:b4:
                    93:97:a3:6e:05:fa:58:f6:f2:6e:30:4f:20:d0:38:
                    9f:08:bc:a8:16:05:ca:76:e9:05:b5:9c:b2:7d:f8:
                    28:06:4a:6b:c4:3a:32:17:d2:25:03:70:f7:a8:45:
                    80:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A1:CA:4F:BD:49:DE:36:C7:CA:86:4F:F8:4A:7B:18:67:22:D1:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0fe82fc7-2614-4323-834d-49d5cfc7fe59/4d889da9-5014-3fd0-afdd-a16e4304dcc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0fe82fc7-2614-4323-834d-49d5cfc7fe59/0fe82fc7-2614-4323-834d-49d5cfc7fe59.crl

            X509v3 Authority Key Identifier:
                keyid:F5:AF:D9:7F:44:87:5F:A6:9E:80:CA:D3:34:43:B1:D2:0F:4D:13:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/0fe82fc7-2614-4323-834d-49d5cfc7fe59.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.90.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:92:52:b5:a0:47:44:06:b5:ca:69:41:26:cb:24:17:1a:37:
         6c:ca:d9:7e:73:ab:fa:22:d7:1e:c3:d4:d3:71:95:dd:d3:4c:
         b6:5a:40:ab:04:21:55:b7:29:f1:aa:4c:21:ad:1a:80:49:31:
         17:7c:20:fc:9b:a9:d9:22:32:7e:65:41:a5:45:2b:80:e8:ad:
         9b:3a:ef:6e:24:55:36:9c:82:4e:85:4f:0b:a0:57:6b:4e:74:
         2c:96:88:2d:a4:23:35:12:ec:09:51:6d:06:6a:14:5e:23:0a:
         61:e2:ae:62:c6:f9:cc:ea:f1:f3:3a:3c:ad:39:11:3b:ef:65:
         47:59:a3:c7:97:4b:a4:01:ef:ec:de:ba:24:ed:38:c1:33:c4:
         97:17:2a:72:d5:a9:d1:2a:4a:2e:17:aa:a3:11:61:4c:b2:14:
         9c:47:e4:92:c1:92:1b:ef:ac:6a:50:ca:22:ec:9f:8f:61:01:
         fc:27:43:1f:d0:04:a0:6c:65:aa:00:f4:26:d3:ba:aa:bf:55:
         8d:26:d8:1f:c3:a7:6f:f7:9c:cf:04:b2:ad:ca:96:5a:c4:0f:
         13:fb:47:7e:e1:6f:cc:39:23:c0:ef:e6:f8:b9:2e:a7:61:cf:
         e7:14:ec:a9:a3:13:f9:bf:8e:b8:a2:45:45:67:97:02:d9:ca:
         c6:97:ba:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 12:44:57 2026 by rpki-client