Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/57dee1b6-1894-3c65-853f-69248e5f5b49.roa
File:                     57dee1b6-1894-3c65-853f-69248e5f5b49.roa (raw, json)
Hash identifier:          1V41u8ADc6xfeOZ0Uljft7kcJYShguNrHWOTaLENk7g=
Subject key identifier:   79:CB:1A:9E:22:C9:7B:FB:6E:ED:90:1F:7D:CE:07:0B:D5:87:E5:57
Certificate issuer:       /CN=b5de9249-f707-4392-b43f-d406dfb20aee
Certificate serial:       010D0C9F4328584F35E7C8973F624139C0529480
Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/57dee1b6-1894-3c65-853f-69248e5f5b49.roa
Signing time:             Fri 18 Sep 2026 01:00:12 +0000
ROA not before:           Fri 18 Sep 2026 01:00:12 +0000
ROA not after:            Thu 17 Dec 2026 02:00:12 +0000
asID:                     16504
IP address blocks:        172.85.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:35:e7:c8:97:3f:62:41:39:c0:52:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee
        Validity
            Not Before: Sep 18 01:00:12 2026 GMT
            Not After : Dec 17 02:00:12 2026 GMT
        Subject: CN=e17bc9a0-140c-445c-8e08-4f679e97fcf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:14:cf:1f:5b:d3:5b:7c:c5:80:6e:77:82:47:
                    94:ea:8e:13:93:4c:d1:b4:97:62:a1:a8:37:be:88:
                    a4:61:91:8c:c8:63:4d:08:93:64:29:9c:d8:86:96:
                    df:38:20:7e:ed:47:ee:15:89:f8:ee:0f:c5:a7:9d:
                    e9:72:95:7a:7a:bc:82:d8:dd:1c:65:b2:da:87:fe:
                    fb:9b:7f:a1:54:92:22:2c:1c:58:de:32:70:1c:65:
                    b7:59:46:e8:02:9f:cc:1a:2f:ee:74:b4:7a:8c:6d:
                    1a:c5:4a:bd:bf:de:55:79:7d:c4:07:3e:b0:45:0f:
                    e1:3e:8a:7e:a6:63:e6:e6:48:ae:34:a3:5b:d2:d3:
                    d3:c1:10:8b:30:78:9f:8e:9a:8a:6a:a0:1f:b1:e9:
                    8f:47:5a:ee:f6:8a:25:c8:9a:49:ce:46:98:22:6c:
                    5d:c5:cd:b0:c9:fd:bb:57:e1:70:de:39:01:da:59:
                    3c:9b:27:09:2c:7b:b5:04:f4:71:72:2e:52:2f:5d:
                    f9:a8:20:58:98:ce:50:fb:9e:db:ad:01:81:0c:8c:
                    2d:b6:18:cc:6b:c2:49:cb:ee:50:2b:eb:c3:99:41:
                    55:ab:69:53:d1:46:7e:35:f6:fa:5d:6e:2e:aa:c7:
                    eb:cd:1e:5a:72:b8:b5:af:ba:e8:72:dc:ae:d3:f4:
                    f9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:CB:1A:9E:22:C9:7B:FB:6E:ED:90:1F:7D:CE:07:0B:D5:87:E5:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/57dee1b6-1894-3c65-853f-69248e5f5b49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl

            X509v3 Authority Key Identifier:
                keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.85.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:94:c4:81:17:be:37:a7:4f:76:50:7b:bf:4f:4b:c7:df:a6:
         b3:d0:cb:37:bc:7f:6e:93:65:29:24:a8:c3:fe:c2:aa:a6:fa:
         f8:0d:35:49:fb:34:6a:25:27:68:87:6a:f1:ac:89:02:dc:16:
         9d:74:90:d9:db:35:74:54:1b:57:ab:70:cd:c0:6a:9a:dd:57:
         da:44:95:e2:35:9d:ce:d4:90:0e:20:a3:0f:08:c0:a5:59:2b:
         6e:35:7c:81:53:b5:00:8d:06:55:a9:01:f3:a7:69:f2:df:06:
         e1:1e:34:0b:a4:88:b2:6e:1e:ea:c8:e6:97:a6:cf:71:d9:0e:
         6e:19:be:22:fd:d2:a8:00:eb:7d:28:55:98:10:75:e0:9b:a0:
         96:5a:0b:61:c6:a1:5e:bc:2e:a3:88:a5:5f:62:77:df:83:51:
         22:a1:7d:bf:6a:50:3c:b1:f8:ea:00:e4:8c:45:31:5e:c7:e0:
         bb:02:e8:82:3e:d8:e8:8c:04:10:61:30:2a:bd:ee:9a:16:cc:
         8a:8e:25:e4:fb:2c:06:46:c9:6a:b4:be:53:3b:58:76:32:70:
         1a:7f:da:70:28:ad:70:90:8f:65:99:c1:27:e2:a0:00:4a:98:
         c8:b5:91:78:ee:0f:4b:58:24:25:8c:5c:ee:2a:ce:a3:27:7c:
         fd:ab:a8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:19:07 2026 by rpki-client