Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/a8ca5d2d-27f4-3285-892f-a366214e0fa4.roa
File:                     a8ca5d2d-27f4-3285-892f-a366214e0fa4.roa (raw, json)
Hash identifier:          gMoapbm5Z1/ZTrWyotdSNB2A8DBHUKrEL8zqXHUSE3o=
Subject key identifier:   E5:E1:E0:A2:90:F5:B6:6E:8C:30:9B:0E:AC:7C:44:7D:9F:7C:44:A9
Certificate issuer:       /CN=7a2be303-4525-4433-b220-b1c6b5052945
Certificate serial:       010D0C9F4328584EF87CBEB9B1B8E818EFBE7F80
Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/a8ca5d2d-27f4-3285-892f-a366214e0fa4.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        208.56.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:be:b9:b1:b8:e8:18:ef:be:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=0bef5d9b-e5b2-4f74-8e89-12875fd748d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9e:ed:09:73:1a:92:7a:44:ef:da:eb:ef:32:
                    ef:2a:4b:4c:5f:ff:85:7d:4e:ba:3f:80:c8:66:2f:
                    34:fc:01:1f:48:1e:77:16:86:70:d1:63:de:98:7c:
                    7f:0b:7e:92:36:63:4f:f7:34:83:fc:9e:58:fd:30:
                    56:7a:e1:8b:e0:b8:c7:b9:21:97:d1:ed:ec:1c:99:
                    da:ea:d4:38:4f:b9:83:48:11:1c:ca:30:ff:46:fd:
                    a0:51:8b:39:ae:b1:e2:6e:e6:fd:15:53:4b:c5:e6:
                    7e:e9:0d:40:bc:8a:81:f7:23:55:45:87:46:c8:e9:
                    21:2c:d2:85:65:3f:4a:94:bb:f0:ce:93:18:f1:55:
                    ac:73:f9:46:37:4e:f0:b2:86:09:3c:30:87:b4:cc:
                    d4:97:63:32:f5:40:27:76:c9:aa:57:cf:94:36:9f:
                    54:1a:98:f5:ec:49:d9:40:88:31:d2:be:c7:8a:f7:
                    24:a7:e8:b8:6b:14:2c:53:8a:8e:83:35:f2:57:cb:
                    8f:30:37:3c:6a:bd:7d:90:b1:da:d4:80:1a:09:58:
                    51:9b:16:8e:af:f9:90:23:8f:1c:d9:f4:a9:7b:5c:
                    ba:d3:be:d3:bc:30:cf:6a:35:06:79:d5:a3:ef:ec:
                    ec:a1:ff:54:d3:ff:f5:9b:dd:2c:d2:f0:91:94:f4:
                    09:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E1:E0:A2:90:F5:B6:6E:8C:30:9B:0E:AC:7C:44:7D:9F:7C:44:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/a8ca5d2d-27f4-3285-892f-a366214e0fa4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl

            X509v3 Authority Key Identifier:
                keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.56.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:cb:e2:97:d4:ce:38:bb:95:72:7c:9c:ec:b3:94:5e:23:7e:
         57:53:6a:bb:52:e8:a8:2d:bd:5a:7c:b2:ea:e2:6c:f9:dc:0f:
         97:be:11:41:e5:43:e7:d9:89:bc:42:ff:2f:77:39:bf:9a:0c:
         9c:f3:61:bb:ca:f1:6b:66:5e:fd:74:47:a6:2f:06:88:c5:5d:
         56:55:5a:f6:d1:c5:5c:12:2b:7a:3b:75:87:5a:07:d7:f1:92:
         43:5e:6a:84:a9:9d:a1:7d:52:9f:07:30:ed:3d:fd:42:e4:77:
         2a:32:30:78:c3:9a:15:1f:3a:7a:2e:99:8d:5b:0f:ba:07:eb:
         7a:13:10:2b:2c:1c:3e:fd:81:1a:1c:dd:93:db:6e:76:e8:26:
         3e:69:61:0c:74:04:24:72:bb:99:1c:09:87:d2:df:5b:9f:01:
         6f:77:ab:3d:28:a9:a9:35:a3:b8:df:bd:44:53:e5:67:dc:d7:
         87:bf:66:8a:af:03:0c:47:6b:1e:31:bc:c3:14:2e:3e:48:71:
         96:57:c9:be:0c:c4:2a:9c:43:39:12:bd:95:77:3f:1b:a1:7a:
         e0:27:19:67:96:ec:87:96:c0:94:86:f1:1a:ab:d9:75:28:6d:
         03:fe:a2:d1:2d:e3:75:ec:d8:b3:fd:7f:23:88:7d:29:e1:c9:
         56:f4:53:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:23:43 2026 by rpki-client