Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/6b5552b6-61df-3788-b537-8378e270c304.roa
File:                     6b5552b6-61df-3788-b537-8378e270c304.roa (raw, json)
Hash identifier:          BNgL4k8kT75+nZ2yzs3DnIL6NFY1koefwOwdY/OoG04=
Subject key identifier:   3C:7C:AC:B0:45:A3:AA:7B:72:36:72:C4:6E:2C:9E:59:11:E2:08:2F
Certificate issuer:       /CN=a8825ed0-210f-48ae-8970-c92773afbb48
Certificate serial:       010D0C9F4328584EA787A9A044927918C5B22C60
Authority key identifier: BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/6b5552b6-61df-3788-b537-8378e270c304.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16509
IP address blocks:        208.122.32.0/21 maxlen: 24
                          208.122.40.0/23 maxlen: 24
                          208.122.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:a9:a0:44:92:79:18:c5:b2:2c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8825ed0-210f-48ae-8970-c92773afbb48
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=067297f3-d353-4de1-9b73-86e971670361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:cf:98:8a:23:89:4e:66:e5:58:a3:a1:01:16:
                    a0:a2:23:ca:b2:30:0f:12:69:3f:7e:ca:4e:13:81:
                    6d:10:1f:42:c3:17:af:f3:10:d9:7c:8a:65:2b:1e:
                    90:28:14:a5:67:a7:3c:82:21:f3:f4:fa:01:01:53:
                    2e:79:89:d8:b5:f3:7d:9c:cd:92:c6:47:42:99:0d:
                    b8:78:50:fa:a5:7a:bf:46:bb:f7:c5:66:ef:57:5c:
                    0a:14:4b:c6:6c:44:b8:bf:e9:00:bf:b0:ad:b4:dd:
                    60:be:39:3f:54:7c:4c:04:84:78:c8:7c:d2:d8:51:
                    77:1a:20:0b:1e:cb:a3:44:63:01:fd:fd:c3:29:9a:
                    d3:9d:63:23:ef:6f:cb:4d:71:1d:a6:4a:14:53:b3:
                    01:f2:05:ed:3f:fe:19:5a:83:aa:ea:c2:de:ff:07:
                    73:19:72:d8:f8:e2:55:5c:51:3c:6f:1c:56:8a:d8:
                    37:3e:9c:cb:25:6f:91:01:c4:2b:9d:b5:c3:2b:54:
                    40:34:32:51:62:f5:bb:dc:c6:42:05:bd:b1:1b:87:
                    59:2e:54:2f:69:27:83:08:08:29:89:f8:bf:a5:11:
                    42:cf:00:95:59:a1:cc:c2:d9:62:9f:8f:af:12:ad:
                    2c:89:11:00:be:2b:e4:c5:91:6f:57:4e:82:f7:2f:
                    cf:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:7C:AC:B0:45:A3:AA:7B:72:36:72:C4:6E:2C:9E:59:11:E2:08:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/6b5552b6-61df-3788-b537-8378e270c304.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl

            X509v3 Authority Key Identifier:
                keyid:BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.122.32.0-208.122.42.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:a5:40:e2:db:62:bb:4d:cc:26:d7:64:be:4c:92:fc:ed:3f:
         96:8a:80:28:c0:64:89:0c:f9:a4:34:f9:a8:6c:ff:7e:77:98:
         8f:59:87:ef:fb:b1:f1:4a:c4:e9:c5:8f:2d:dd:c0:e3:d2:61:
         b4:e6:fd:ed:e5:d4:b7:2f:b6:9c:00:03:4b:ca:25:2e:63:58:
         bc:69:a4:6e:2a:b1:e9:0f:1e:84:b9:9e:b6:83:49:28:25:e9:
         c5:d5:8a:0b:c7:c3:9a:38:d7:95:df:43:e9:9e:b5:da:b8:bf:
         51:2c:97:58:b2:ed:73:b6:a7:1a:3f:8a:45:e8:1c:5e:9b:9d:
         55:f2:59:89:21:26:78:ce:7f:56:b0:e8:1e:b0:ec:49:e3:62:
         c3:4e:16:b9:0f:4c:ce:5d:a5:9b:6a:76:4d:36:5e:b4:e3:76:
         3a:89:3c:3a:ef:b5:47:ff:b6:17:7b:2c:95:50:68:ab:ab:0e:
         33:08:fd:3e:6f:7e:a1:dd:31:a7:41:53:08:60:35:04:a0:8a:
         da:57:58:bb:90:3f:26:50:25:65:a6:1b:2a:05:72:19:d9:4f:
         51:47:7d:ff:8d:2a:62:9a:96:2a:44:30:32:33:4f:5b:96:c2:
         4d:9e:74:71:aa:88:9b:5f:43:49:10:d2:f2:df:b8:35:5e:ee:
         43:b0:4d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:19:18 2026 by rpki-client