Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/3da17d0f-7c00-37c7-9de3-cbd801f6db0b.roa
File:                     3da17d0f-7c00-37c7-9de3-cbd801f6db0b.roa (raw, json)
Hash identifier:          sJE7LJ4Liotx5wtztEk93uwKlEqxhzxdbBgtAk6ltko=
Subject key identifier:   AA:59:F0:DA:BD:CB:8A:78:DD:50:EA:21:5B:E8:DB:AE:18:99:3F:7C
Certificate issuer:       /CN=a8825ed0-210f-48ae-8970-c92773afbb48
Certificate serial:       010D0C9F4328584E62A9F9F5F23BC65DF1A653E0
Authority key identifier: BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/3da17d0f-7c00-37c7-9de3-cbd801f6db0b.roa
Signing time:             Sat 04 Jul 2026 09:00:11 +0000
ROA not before:           Sat 04 Jul 2026 09:00:11 +0000
ROA not after:            Fri 02 Oct 2026 09:00:11 +0000
asID:                     16766
IP address blocks:        208.122.43.0/24 maxlen: 24
                          208.122.44.0/22 maxlen: 24
                          208.122.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:62:a9:f9:f5:f2:3b:c6:5d:f1:a6:53:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8825ed0-210f-48ae-8970-c92773afbb48
        Validity
            Not Before: Jul  4 09:00:11 2026 GMT
            Not After : Oct  2 09:00:11 2026 GMT
        Subject: CN=9077cd8d-4f4a-43c3-b364-5475727446a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1a:10:78:23:41:2e:ed:d6:98:d7:e9:9e:30:
                    4c:6b:b9:2d:6f:c2:b6:9e:9a:e8:08:db:38:91:23:
                    83:bd:4e:6f:13:ed:10:17:67:44:e6:ea:94:3c:f0:
                    f5:53:ed:bc:08:83:f9:ad:03:45:04:f0:ce:69:db:
                    b8:ef:07:fc:4f:6a:ff:1a:c5:69:a6:43:8f:a6:51:
                    7a:80:c9:ca:29:6f:95:42:04:68:49:87:16:ad:a7:
                    6b:c1:56:44:fd:de:af:a3:9f:2c:b8:33:79:49:57:
                    52:1a:63:70:8d:7b:a5:58:21:6a:40:57:b5:e3:57:
                    ca:90:1a:12:f8:d7:37:18:a6:99:cd:fe:c1:8b:39:
                    05:7b:20:a1:c7:c0:ec:4a:b6:4c:1d:b4:11:3b:9c:
                    32:e6:45:fa:95:34:10:21:93:c9:76:27:a0:fb:07:
                    dd:45:57:7d:31:00:76:92:f4:47:d4:4e:83:f7:cc:
                    18:96:40:49:2c:cc:ce:fe:48:30:77:4e:c2:97:70:
                    7e:ac:95:fb:23:2c:94:f0:84:14:8a:4e:12:45:8c:
                    40:66:d7:67:55:fd:30:89:3f:fd:cd:52:64:e1:f8:
                    3f:62:5d:72:b9:3d:1c:c5:35:a8:1a:57:ca:28:05:
                    d6:cc:21:b1:a7:54:54:4b:ec:37:5e:10:c9:3b:08:
                    59:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:59:F0:DA:BD:CB:8A:78:DD:50:EA:21:5B:E8:DB:AE:18:99:3F:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/3da17d0f-7c00-37c7-9de3-cbd801f6db0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl

            X509v3 Authority Key Identifier:
                keyid:BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.122.43.0-208.122.48.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:ea:d7:db:49:d9:53:b9:19:08:d1:82:4d:68:67:38:b3:84:
         57:ac:81:df:77:5e:08:63:70:87:5b:e5:a3:92:45:e0:c3:1c:
         fd:fe:30:4b:2f:9e:58:96:fb:d1:e0:60:41:27:44:55:cb:04:
         61:7b:d2:63:4a:78:b0:ad:22:9d:9b:c6:46:75:31:36:f8:dc:
         87:55:44:94:c3:fe:fa:91:c7:17:66:f9:3a:df:d5:67:44:46:
         10:20:ed:94:a5:70:d9:b9:4a:a2:9b:7e:1b:6f:10:f6:7b:59:
         1e:4e:2a:f9:f0:8d:f8:34:1a:9f:6d:12:08:97:5e:70:ae:4b:
         4f:c5:cf:62:36:f1:9f:a9:6b:83:4d:30:5b:10:0d:c1:02:25:
         df:47:23:e1:73:23:36:94:d9:da:47:be:e2:56:bf:00:e4:e5:
         59:82:97:d6:75:51:48:3b:8c:44:bb:06:4a:3a:25:29:e6:bf:
         72:68:90:24:34:94:ce:37:8f:19:e7:b9:b6:77:4d:f0:86:fb:
         59:fa:cb:65:4b:72:d0:a8:06:13:0d:bb:c2:4b:f2:73:4e:4b:
         92:50:3d:b4:1f:c1:f3:69:eb:1b:f8:db:fe:30:5b:eb:37:5e:
         3d:2e:e1:8f:f1:8c:cf:96:42:c3:c8:34:93:01:8d:e6:26:e6:
         12:47:d1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:09:24 2026 by rpki-client