Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/eed9074e-5ec3-347b-be5b-c6ebc7aeae2d.roa
File:                     eed9074e-5ec3-347b-be5b-c6ebc7aeae2d.roa (raw, json)
Hash identifier:          ULd2RAKRbItd6ulmNhIaeesMLHB3NO29hAFwYX3sjC8=
Subject key identifier:   52:8D:D4:65:35:60:92:96:63:68:4F:E2:04:45:88:70:09:B6:F8:65
Certificate issuer:       /CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba
Certificate serial:       010D0C9F4328584EB846FB0748FC3E6F67977480
Authority key identifier: FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/eed9074e-5ec3-347b-be5b-c6ebc7aeae2d.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     26229
IP address blocks:        162.138.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:46:fb:07:48:fc:3e:6f:67:97:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=e7335df8-1bc3-4396-99d3-f26b8ac686b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8e:96:8e:4b:b6:78:bd:b9:c8:d5:2c:4b:17:
                    bf:27:cc:40:56:47:0d:62:16:cf:b9:ec:dd:66:f7:
                    ca:9e:2d:39:39:12:de:7d:47:38:59:36:93:43:f8:
                    cb:30:73:63:2c:c0:a7:ee:bd:95:9e:e2:5a:19:2d:
                    fa:25:f9:17:04:89:39:2b:03:5e:09:ec:54:c1:85:
                    0d:ca:1d:da:89:26:e6:5e:5a:91:b6:f5:1c:eb:6d:
                    a0:da:5f:8e:c5:4f:52:88:a8:e8:5b:60:0a:e5:b4:
                    99:2e:e8:81:5d:f1:41:91:5a:9f:ff:61:b8:a0:3e:
                    28:84:cf:d6:7d:04:aa:ce:98:87:67:45:50:81:72:
                    8a:23:cc:64:97:02:27:c1:80:df:73:59:d7:13:81:
                    59:56:ff:e1:d3:59:09:d9:da:5b:1b:b3:18:11:e6:
                    ec:37:d8:5d:29:83:6f:c4:7c:b0:07:81:fc:ec:85:
                    62:7c:dc:12:d3:ba:24:c9:3b:fd:f8:c5:35:e5:8c:
                    fd:82:de:32:41:25:ae:69:04:49:88:e8:9b:8f:68:
                    91:43:e1:a6:d5:5c:b3:6c:4e:cb:30:33:aa:58:35:
                    cd:91:eb:de:7c:dd:e5:0a:86:fa:f6:6a:09:44:9b:
                    34:31:e8:da:1e:7d:50:25:f8:2e:69:2b:0c:f0:93:
                    e3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:8D:D4:65:35:60:92:96:63:68:4F:E2:04:45:88:70:09:B6:F8:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/eed9074e-5ec3-347b-be5b-c6ebc7aeae2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl

            X509v3 Authority Key Identifier:
                keyid:FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.138.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:fe:1e:f1:f7:63:4f:3d:7c:3b:69:ed:ba:c4:df:dc:da:ba:
         ed:73:db:ec:f8:63:85:78:45:ae:04:ba:1d:70:2f:ce:d9:cc:
         e9:41:11:8d:e1:eb:e5:76:0c:e2:a8:14:6c:c9:86:ae:50:1b:
         63:d7:1e:af:7d:a3:6e:50:c2:0c:ea:ad:1c:5a:e7:c9:5e:aa:
         34:fe:df:47:6e:8b:44:7d:2e:9e:2b:84:cc:66:90:b4:25:93:
         0d:d7:4f:62:66:83:6c:21:2e:4e:4c:c1:54:21:0e:d4:2e:91:
         ab:c2:95:d1:0f:5b:da:48:eb:a2:b4:cb:8b:3a:dd:30:3f:d1:
         98:cb:b0:74:a2:82:50:04:8c:0e:a5:24:4e:4e:0c:b6:ab:d8:
         4b:f4:9b:bc:51:8d:1e:65:5b:96:b1:a0:2e:59:c4:6f:59:f7:
         21:c9:da:ea:d8:c3:ca:f0:5f:53:c4:98:30:5f:1f:29:b7:d3:
         8f:ff:0f:8e:a7:77:a4:10:27:50:65:73:9f:0f:43:cb:27:af:
         08:13:40:78:5c:38:54:33:2f:8c:7c:63:ea:ac:14:09:41:0a:
         cc:ee:92:45:9c:52:aa:bf:bd:86:80:52:9e:5e:c3:69:e9:0d:
         ed:06:37:e2:e2:ec:84:b7:c6:8c:81:e7:4a:6d:bc:89:c9:e7:
         d0:74:91:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:36:05 2026 by rpki-client