Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/173c7a41-4996-43f9-aa22-68750f2b01a2/8e0a5120-dd44-397a-83ec-634e9131f10c.roa
File:                     8e0a5120-dd44-397a-83ec-634e9131f10c.roa (raw, json)
Hash identifier:          vHYShBJmSZLoO+v/IoRGThBzDmri1Dxn276DP+45bQo=
Subject key identifier:   8F:E7:59:C3:00:09:45:CD:1D:11:C9:4E:2D:67:A1:46:BF:66:03:61
Certificate issuer:       /CN=173c7a41-4996-43f9-aa22-68750f2b01a2
Certificate serial:       010D0C9F4328584EEA878C5608579987DFC4A260
Authority key identifier: 26:27:0B:DE:92:8F:FC:E2:A7:45:52:55:84:96:A4:C1:FA:D8:33:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/173c7a41-4996-43f9-aa22-68750f2b01a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/173c7a41-4996-43f9-aa22-68750f2b01a2/8e0a5120-dd44-397a-83ec-634e9131f10c.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     33487
IP address blocks:        204.15.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/173c7a41-4996-43f9-aa22-68750f2b01a2/173c7a41-4996-43f9-aa22-68750f2b01a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/173c7a41-4996-43f9-aa22-68750f2b01a2/173c7a41-4996-43f9-aa22-68750f2b01a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/173c7a41-4996-43f9-aa22-68750f2b01a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:8c:56:08:57:99:87:df:c4:a2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=173c7a41-4996-43f9-aa22-68750f2b01a2
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=482d756c-02c0-4383-8048-1ea863ccbc73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e0:8f:f0:4b:a4:59:15:bd:74:39:68:6d:95:
                    5f:e4:e3:8d:d9:c6:90:97:c6:b1:79:2e:1a:b3:d6:
                    24:af:72:2b:a6:84:5c:8b:c0:33:20:0e:ed:b3:fb:
                    1c:b6:1b:75:44:d9:23:46:2c:24:8b:cf:08:a0:d3:
                    97:b7:06:9d:74:1f:cc:81:3a:41:61:87:3c:a6:18:
                    8a:51:11:a1:f1:89:73:9e:1f:fa:27:4c:e7:47:4b:
                    c9:0d:39:b7:19:b1:26:ba:d4:5c:da:81:08:ce:3c:
                    58:5e:8b:34:43:f3:be:9f:bc:79:e6:8f:46:67:32:
                    21:4a:d2:c7:e5:c1:e7:5e:f4:8d:62:1d:5d:cf:ea:
                    98:a1:a4:28:20:6f:73:59:df:30:5b:34:40:75:d3:
                    52:c3:a6:2e:27:af:5c:78:d7:ce:b9:85:72:14:1b:
                    a4:fe:fa:08:95:39:82:76:07:15:94:4d:8b:57:8a:
                    7f:fa:04:f4:69:a1:65:a6:ec:9f:a7:80:f6:a4:9d:
                    5d:94:d6:1a:a3:76:20:6b:3c:15:e6:ea:92:01:cf:
                    b7:a9:16:b6:ee:0b:f8:13:9f:91:63:f5:c9:1f:1d:
                    1b:a5:ba:e2:b5:fb:7f:f7:76:82:6f:f6:a6:c5:3c:
                    ed:ad:81:59:b8:11:cb:ce:a8:e6:8b:c7:74:26:2a:
                    c7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E7:59:C3:00:09:45:CD:1D:11:C9:4E:2D:67:A1:46:BF:66:03:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/173c7a41-4996-43f9-aa22-68750f2b01a2/8e0a5120-dd44-397a-83ec-634e9131f10c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/173c7a41-4996-43f9-aa22-68750f2b01a2/173c7a41-4996-43f9-aa22-68750f2b01a2.crl

            X509v3 Authority Key Identifier:
                keyid:26:27:0B:DE:92:8F:FC:E2:A7:45:52:55:84:96:A4:C1:FA:D8:33:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/173c7a41-4996-43f9-aa22-68750f2b01a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.15.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:d1:e7:13:a4:26:a7:f3:81:68:44:98:a8:50:d2:57:25:cd:
         20:b3:fa:ff:2d:8c:87:f3:d3:04:97:5f:6f:e9:ac:4e:06:22:
         05:cc:72:0d:27:94:b5:6a:10:61:f5:ae:ec:f5:c6:7e:43:5e:
         6a:f8:5a:0e:79:78:44:9b:7a:3b:a7:df:f1:f3:ef:ba:60:d5:
         e3:71:6e:2b:bc:d2:a9:4f:8e:4c:9f:d5:9d:b1:0c:9e:50:ba:
         06:44:78:1e:5b:2d:41:e1:6b:2e:fa:57:9a:b0:22:97:c2:b6:
         1b:e1:97:38:3a:71:16:86:a6:d0:d7:8e:c7:eb:b7:4c:3a:a3:
         fb:db:e7:d4:10:8f:d9:b7:f8:f3:72:45:39:e5:1e:25:48:be:
         f3:61:32:a8:55:c7:cd:c7:0f:58:f6:c1:34:43:2b:2a:0d:a3:
         33:72:0f:21:9c:a6:eb:cf:a9:ae:e3:b3:16:c1:f2:a7:5f:06:
         68:a1:12:38:b0:ab:d9:ca:db:ff:a7:09:5f:d3:11:9b:e2:8c:
         32:23:6e:d7:e7:5f:55:e6:9a:dd:08:33:d5:1b:d1:e4:5f:a2:
         56:2a:72:76:58:b3:e8:48:d6:a8:8c:31:26:6b:39:1c:5a:2a:
         8a:49:75:3f:14:77:c1:9d:63:83:9a:c4:00:43:f5:89:60:d4:
         b6:65:bf:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 08:04:57 2026 by rpki-client