Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/4cd21688-0ab7-3bc1-a551-9a0ae3b20b13.roa
File:                     4cd21688-0ab7-3bc1-a551-9a0ae3b20b13.roa (raw, json)
Hash identifier:          PeBv9D0HVLMQ5H8cBW1gkVrv8jvc4s8b3Wdk5ZkJzuo=
Subject key identifier:   2F:73:66:2B:03:2C:14:73:5B:68:45:D1:E1:FD:B2:03:57:0E:A1:5C
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584F4984F1AFCF3E245E64A6A200
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/4cd21688-0ab7-3bc1-a551-9a0ae3b20b13.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36040
IP address blocks:        208.117.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:84:f1:af:cf:3e:24:5e:64:a6:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=a2b4bc26-b3d2-41c9-82cb-72af19fb46d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c4:ac:23:c8:49:35:98:11:88:46:3a:42:cd:
                    53:cd:81:22:4b:9f:9b:74:cf:12:97:f8:51:e8:3e:
                    5f:69:5b:d4:c1:09:98:fb:69:9f:20:e2:cf:83:4b:
                    5b:b7:f3:34:84:c6:2e:c2:bd:20:3c:88:e3:e3:90:
                    9a:94:f9:7b:23:13:3b:f6:ab:2b:6a:73:94:bd:77:
                    84:f5:89:c8:28:ad:69:a1:db:20:7a:8b:50:a9:a5:
                    fd:8d:8e:65:77:31:4e:74:2c:9d:8f:27:8b:68:e1:
                    98:a1:3a:e3:1d:36:1c:28:16:79:74:bf:cc:b4:d4:
                    31:0e:eb:22:93:0d:1a:e8:b6:18:62:62:f9:aa:39:
                    dc:2c:48:9c:35:f3:62:63:96:1d:0b:48:78:32:c7:
                    7e:f7:d0:db:69:7a:5a:5d:29:95:a1:fb:5b:de:7a:
                    92:fb:6d:e0:fa:73:61:22:b7:01:83:7d:5f:21:94:
                    17:f5:dd:0e:13:96:80:77:b4:df:c5:e6:2d:e5:be:
                    8e:c1:67:fa:f2:0a:4f:83:5e:64:74:f3:4c:53:b5:
                    57:4b:ca:32:c9:93:34:59:b5:36:f9:42:bd:f4:1d:
                    b2:8f:73:16:6a:f1:6f:2c:93:61:1f:17:d1:06:3a:
                    eb:41:4d:99:1b:a5:65:19:5d:74:94:d3:78:4a:d0:
                    64:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:73:66:2B:03:2C:14:73:5B:68:45:D1:E1:FD:B2:03:57:0E:A1:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/4cd21688-0ab7-3bc1-a551-9a0ae3b20b13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:c2:8c:cd:cc:69:01:5e:d5:b1:cc:93:8b:ad:1f:4a:57:86:
         7a:6c:f2:26:bd:9c:0c:0c:a4:0c:af:cb:69:c4:e2:1f:6c:bd:
         d7:ce:ec:16:a3:59:0a:f9:23:0f:19:3b:4c:f3:bb:e7:ca:30:
         93:6b:62:63:58:bc:b8:81:e2:67:34:c8:b4:c6:7a:1b:03:85:
         7c:8f:b8:06:ec:86:1f:10:22:f7:e6:c8:ab:8e:f6:0f:bb:22:
         1a:e6:91:8c:c7:37:95:b1:f3:4c:a9:05:4f:41:cd:0d:9f:ff:
         fc:2f:0a:46:7d:b9:a9:8b:81:59:63:e9:3b:81:45:f8:9f:4f:
         f3:0a:13:ce:47:2d:71:d7:bb:6b:3e:8e:0f:8a:02:93:15:d3:
         84:61:38:d7:2a:60:3a:a4:ca:0c:b4:6a:81:e4:0b:01:6a:77:
         eb:ee:7e:37:89:3b:91:85:48:78:fc:14:05:7a:fd:ca:75:be:
         e2:d4:1d:8d:c3:3f:b1:a0:ab:44:0a:91:0a:9f:a1:8b:51:37:
         7f:f4:f7:16:9e:1a:41:cc:ba:e0:8a:37:6a:f4:d0:4f:10:8b:
         b9:de:32:04:e5:c4:f7:62:cb:a0:1b:c3:6c:d2:c2:04:b3:0c:
         b3:cb:18:c5:39:e6:b2:67:f2:bd:09:8f:82:fc:57:85:1a:c1:
         19:95:ba:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 18:06:28 2026 by rpki-client