Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/0f0eadf0-7acf-3ce7-99f8-883e764fa94a.roa
File:                     0f0eadf0-7acf-3ce7-99f8-883e764fa94a.roa (raw, json)
Hash identifier:          RbFjg9XjSg3xWm/FaoCZjuLk7ZYCcfYJomelg74xy5I=
Subject key identifier:   83:A0:BA:B8:C4:40:3C:71:B3:9B:79:99:82:11:49:3B:15:EF:96:FC
Certificate issuer:       /CN=45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d
Certificate serial:       010D0C9F4328584F9E9885923C8D792B4961F880
Authority key identifier: 64:73:F4:FE:C0:A9:D9:3A:6F:E6:79:B0:3C:F7:87:18:87:79:11:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/0f0eadf0-7acf-3ce7-99f8-883e764fa94a.roa
Signing time:             Sun 25 Oct 2026 13:00:13 +0000
ROA not before:           Sun 25 Oct 2026 13:00:13 +0000
ROA not after:            Sat 23 Jan 2027 14:00:13 +0000
asID:                     40100
IP address blocks:        208.68.156.0/24 maxlen: 24
                          208.68.157.0/24 maxlen: 24
                          208.68.158.0/24 maxlen: 24
                          208.68.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 31 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9e:98:85:92:3c:8d:79:2b:49:61:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d
        Validity
            Not Before: Oct 25 13:00:13 2026 GMT
            Not After : Jan 23 14:00:13 2027 GMT
        Subject: CN=28172806-d9ad-4180-baf2-b1c64c68b362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e4:82:46:4b:c6:b7:8c:96:e2:1a:93:a1:11:
                    78:7e:07:05:21:d9:d9:43:9c:14:9b:69:b4:1b:a8:
                    37:62:00:70:ce:c3:26:8b:7a:24:94:13:22:dc:c1:
                    0d:99:78:c5:20:7f:f6:01:50:d0:f0:12:db:bf:03:
                    09:ff:c9:47:f0:6d:1d:05:5e:b6:a5:72:09:12:ed:
                    bc:04:ad:e3:2b:ff:85:3f:ab:5e:ff:1c:fd:ab:3e:
                    43:f0:77:04:ec:6f:79:22:b3:91:f0:de:6b:a0:9a:
                    58:5b:0d:7a:57:5c:f3:d4:f3:be:7d:e8:05:75:d9:
                    65:cd:e0:d2:b8:fc:fd:6d:a4:b9:ef:6a:12:a9:ad:
                    54:49:82:a5:b1:c5:34:fb:7a:0b:3c:61:a8:0b:61:
                    a4:20:b8:e0:43:f6:d9:7f:e5:4f:fd:95:4a:45:7a:
                    87:f6:e3:12:92:a2:26:f2:54:04:38:b3:de:1d:16:
                    4a:e9:02:08:95:b3:82:3e:72:8e:ff:5f:2f:e3:63:
                    42:39:7f:13:f2:cc:5a:2f:5a:26:8e:3d:9a:34:9a:
                    e6:12:79:7f:0f:4d:a1:08:c3:25:ff:31:f7:34:e8:
                    3e:c4:1a:49:3a:0f:34:87:a8:ca:ee:f1:ef:fc:5a:
                    06:1a:6a:e0:42:de:aa:b1:e6:49:25:0f:ce:28:71:
                    97:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A0:BA:B8:C4:40:3C:71:B3:9B:79:99:82:11:49:3B:15:EF:96:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/0f0eadf0-7acf-3ce7-99f8-883e764fa94a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.crl

            X509v3 Authority Key Identifier:
                keyid:64:73:F4:FE:C0:A9:D9:3A:6F:E6:79:B0:3C:F7:87:18:87:79:11:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.68.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:25:b8:3b:df:26:76:77:d0:0b:a0:fe:e1:64:72:57:94:21:
         60:ff:79:ab:f6:19:60:33:85:22:3d:13:24:23:9a:ea:45:f0:
         a1:43:0e:f6:39:0e:3b:af:d9:bb:2b:49:fa:3d:78:1d:a3:0e:
         d0:b0:15:7e:cf:b3:c5:d6:b8:90:c2:de:1e:83:75:c1:1e:05:
         3d:59:a0:1e:d6:59:6f:ab:83:78:09:76:e1:fd:ef:8e:1f:6a:
         61:b1:ba:f3:3f:de:79:9f:c3:fb:a3:b1:04:52:ad:e9:9d:36:
         ae:b6:8f:f4:b3:b5:2c:d2:fa:b9:03:52:03:0d:13:77:9d:c9:
         1a:da:3e:78:80:51:7d:96:29:37:7b:9a:fb:cf:9f:02:90:3f:
         57:9f:7d:39:38:b0:d3:a2:f9:f2:63:f9:0f:92:80:7b:20:d2:
         88:26:47:96:9e:59:97:80:2c:52:c0:5f:2b:69:80:69:05:78:
         58:cb:cc:98:ab:ae:1f:be:47:a4:50:67:c7:77:16:30:16:23:
         20:f7:7f:2f:de:1d:5c:01:61:3b:82:7e:bb:e6:4a:d3:53:db:
         6c:a4:9c:16:ac:6a:1b:62:b2:3d:9d:3d:74:16:44:8e:6b:f0:
         14:cc:8b:16:6c:68:78:e0:2a:24:b7:1d:cf:7c:f2:f9:5b:9a:
         0d:d8:c0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:27:19 2026 by rpki-client