Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/eb6e5740-3a2a-3325-944d-ea152e75b57a.roa
File:                     eb6e5740-3a2a-3325-944d-ea152e75b57a.roa (raw, json)
Hash identifier:          cOZlYmU24xAQ6e2w+ZaC1WCEoHlUghMSXsl+6RJIqjM=
Subject key identifier:   2C:87:77:D9:1C:80:4D:2B:79:DA:63:49:C5:19:9F:53:02:97:69:7D
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584F576826EA160F802695BBA254
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/eb6e5740-3a2a-3325-944d-ea152e75b57a.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     0
IP address blocks:        208.89.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:26:ea:16:0f:80:26:95:bb:a2:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=890190a0-0218-475b-ba2b-a9a365e30224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:20:44:0a:ec:e0:b1:0e:97:dc:1b:08:69:88:
                    e1:8d:2d:b1:48:25:73:c8:10:47:d3:d8:db:7b:18:
                    79:bf:49:3a:b0:4e:17:c1:7b:69:7c:31:ae:48:2b:
                    9e:23:07:54:59:f9:74:d3:7c:dd:fa:12:a8:12:fb:
                    16:d9:d5:29:8a:8e:86:2f:73:3e:f4:36:d1:28:6b:
                    bd:a1:ea:4a:5a:b0:b9:77:43:33:89:b6:d6:e8:bf:
                    3a:b0:eb:3c:95:fa:39:11:36:c9:f7:2b:88:24:ce:
                    0b:5a:65:0b:9c:ac:d9:e2:a4:81:45:3c:e9:ab:5c:
                    34:10:84:71:99:c4:ab:5d:b3:be:49:57:5d:90:c5:
                    31:d3:a9:a3:9a:3d:20:d6:c0:ca:7e:16:0c:ba:4e:
                    d8:bc:6c:fc:4d:c5:59:e3:cb:85:6d:e1:74:6d:5d:
                    e4:51:b3:38:1c:92:63:51:d5:f7:05:9d:7a:f6:9e:
                    f0:4b:8f:cf:1f:0e:9c:b0:4f:86:86:4b:cb:45:da:
                    23:02:75:02:e5:2d:41:47:a1:15:89:47:fe:63:f4:
                    60:58:74:c1:66:41:da:10:a1:c1:80:37:e5:98:c9:
                    c1:29:01:84:d0:07:9a:b2:a0:12:13:9a:6e:5b:0c:
                    cd:4a:7f:b6:7b:ec:8e:1a:ca:7c:9a:2b:ab:b4:f7:
                    18:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:87:77:D9:1C:80:4D:2B:79:DA:63:49:C5:19:9F:53:02:97:69:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/eb6e5740-3a2a-3325-944d-ea152e75b57a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.89.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:7d:15:e1:d8:65:65:b6:59:62:0d:ed:12:e1:8f:77:1c:7d:
         29:4f:f1:3e:b7:34:c7:ab:48:05:33:9b:22:55:09:88:90:48:
         2b:b2:9b:fb:86:79:5d:67:65:2e:1e:da:22:f6:8d:f0:eb:62:
         23:95:1f:2a:27:b4:35:0d:72:72:b1:0f:71:16:d1:0e:fb:f0:
         f9:6a:0a:da:ff:46:fe:0c:02:3c:5a:97:99:a9:1c:44:e4:2f:
         63:02:e1:6e:3c:5d:a4:f0:71:a9:08:b1:27:b2:28:ec:9a:d1:
         17:8b:c9:94:dc:f4:7e:d9:a8:b4:56:21:2f:42:0b:24:0d:a4:
         b8:ad:cb:96:cb:39:bf:ff:a5:ff:4e:ab:82:26:74:88:15:3b:
         be:40:de:72:a5:39:7f:c5:67:04:12:37:67:e0:cd:41:a6:79:
         f2:98:4e:35:99:a3:0d:a3:69:8a:11:e1:17:a2:2e:c1:cb:b5:
         a7:29:ab:b4:e2:49:50:90:fd:a1:e4:5b:f7:91:9b:9a:5a:71:
         e4:aa:fd:af:b4:4c:75:e1:c0:ff:9c:b8:96:f1:15:2d:ba:c4:
         14:5c:3b:b2:b1:94:16:f5:17:aa:dc:5f:0d:b7:fb:da:02:4e:
         76:73:c4:68:1f:25:c9:c6:04:d2:a7:cd:af:af:6f:41:1b:5f:
         87:8d:7b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 19:54:56 2026 by rpki-client