Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/5344a19e-2cf6-3978-ab9e-8495ca273f64.roa
File:                     5344a19e-2cf6-3978-ab9e-8495ca273f64.roa (raw, json)
Hash identifier:          5pztUsw+2nn+xH1PSp6RScRd+ygiz8lOXUAiPHyGVOE=
Subject key identifier:   7F:14:91:F0:55:E9:A1:6A:ED:3F:27:26:E1:71:7A:4C:7F:0F:66:19
Certificate issuer:       /CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
Certificate serial:       010D0C9F4328584F7D9A99E4DF2D35966742ADE0
Authority key identifier: DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/5344a19e-2cf6-3978-ab9e-8495ca273f64.roa
Signing time:             Tue 13 Oct 2026 17:23:00 +0000
ROA not before:           Tue 13 Oct 2026 17:23:00 +0000
ROA not after:            Mon 11 Jan 2027 18:23:00 +0000
asID:                     55066
IP address blocks:        208.82.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7d:9a:99:e4:df:2d:35:96:67:42:ad:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b267d832-cb05-4c68-a5ce-ba4645db35e0
        Validity
            Not Before: Oct 13 17:23:00 2026 GMT
            Not After : Jan 11 18:23:00 2027 GMT
        Subject: CN=57397ea0-624a-426b-b80a-0f2d66dea3e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c3:2e:83:ed:d6:bf:f5:47:9d:9f:8e:71:b1:
                    db:54:c8:e9:c2:3f:ee:67:1a:94:c9:f0:ee:1d:54:
                    ec:9a:69:e3:47:ab:eb:41:59:ac:b0:4c:5b:45:b2:
                    8f:c6:e1:a7:9f:1c:80:0e:90:40:c4:d3:a2:1f:e1:
                    81:1c:b3:00:1d:0a:27:5a:4f:3d:7b:65:2a:d7:30:
                    18:e2:22:0a:dc:c5:df:e0:aa:db:25:60:62:95:d8:
                    c0:c3:7a:19:f0:aa:a6:7e:2d:76:dd:71:b9:2d:29:
                    7c:ce:21:a8:03:bc:f6:1c:c0:14:8f:3e:3f:49:a6:
                    1c:98:fb:f4:b5:50:fd:d1:63:77:09:ba:1b:7c:4f:
                    02:67:15:50:2f:cd:91:f1:bb:be:e9:f7:d5:29:8d:
                    6d:5a:39:8e:30:64:5d:8e:43:e1:02:91:34:da:87:
                    a2:4e:0e:de:02:e1:e8:32:98:64:a8:e5:39:dd:15:
                    d3:20:87:27:f4:c9:bf:17:1c:e5:3c:54:73:61:07:
                    f9:7d:76:2e:e7:43:24:2d:83:30:0d:f8:9f:74:01:
                    41:60:22:29:00:07:26:bd:0d:de:a2:fb:84:9d:db:
                    5d:89:18:a7:37:4d:0a:de:10:a1:b7:e4:bb:85:c6:
                    d6:0b:04:db:fc:60:58:3a:84:97:c9:b7:ef:56:36:
                    0d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:14:91:F0:55:E9:A1:6A:ED:3F:27:26:E1:71:7A:4C:7F:0F:66:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/5344a19e-2cf6-3978-ab9e-8495ca273f64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0/b267d832-cb05-4c68-a5ce-ba4645db35e0.crl

            X509v3 Authority Key Identifier:
                keyid:DA:B9:62:03:58:48:87:2F:D3:32:C7:50:9B:2C:71:08:2F:5E:A8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b267d832-cb05-4c68-a5ce-ba4645db35e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.82.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:48:2b:e7:87:a1:08:21:23:11:a2:4b:04:e4:98:77:b2:95:
         89:a1:fc:f4:18:56:74:73:53:23:27:5b:cc:c9:bd:60:9e:c5:
         12:4d:62:34:d7:02:c8:a2:65:8d:3b:27:fd:73:a8:ad:f4:11:
         0f:0d:82:26:dc:d8:cc:0b:cb:21:9f:2b:80:23:3c:00:d8:c9:
         7c:58:aa:d4:cd:61:eb:cb:0e:99:a3:69:29:00:de:f3:b2:30:
         5c:ef:b6:fb:2e:6c:94:3b:b6:73:52:5e:8e:82:be:95:68:35:
         ab:61:d8:5d:34:72:82:4b:c6:8e:1c:2a:cf:c9:48:e9:51:be:
         5e:f7:32:00:21:54:6f:f7:ad:a4:22:06:9f:81:a8:a5:fa:ca:
         af:94:0c:aa:9c:93:60:46:62:3d:38:8d:82:d4:18:ad:0e:98:
         40:a4:3a:8f:7b:b4:61:eb:e0:02:cb:5a:9e:f3:4c:8a:fd:1f:
         34:d2:67:e6:9e:c4:5c:04:89:9a:bd:e3:f1:4a:5f:69:27:a4:
         78:c5:3c:ce:a8:3e:d8:ae:06:8a:0c:08:82:88:f4:61:aa:f5:
         ce:e8:7c:b2:87:02:b1:32:e8:20:a2:31:6b:9b:e5:3b:07:fa:
         c2:a8:61:47:5b:85:e4:eb:0a:33:cd:d9:7a:65:c0:16:c9:0f:
         c5:d3:84:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:30:39 2026 by rpki-client