Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/7e8a6158-b814-305c-b02d-c4597bfdf6b0.roa
File:                     7e8a6158-b814-305c-b02d-c4597bfdf6b0.roa (raw, json)
Hash identifier:          A1zqCwh5xB01loYBzLVRReMROi0EjhL08VOPiTxm1/U=
Subject key identifier:   41:FE:9E:28:D2:69:CF:ED:8E:5F:F9:F3:97:0D:D3:D4:76:34:FB:CF
Certificate issuer:       /CN=a8825ed0-210f-48ae-8970-c92773afbb48
Certificate serial:       010D0C9F4328584EA787A8E426676EE70A92F6E2
Authority key identifier: BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/7e8a6158-b814-305c-b02d-c4597bfdf6b0.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14618
IP address blocks:        208.122.32.0/21 maxlen: 24
                          208.122.40.0/23 maxlen: 24
                          208.122.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:a8:e4:26:67:6e:e7:0a:92:f6:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8825ed0-210f-48ae-8970-c92773afbb48
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1c78fc53-6bc5-41cf-8a07-8665c130c0b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d5:9e:31:e9:0f:34:d7:e1:86:8b:80:51:b0:
                    3b:87:ac:20:95:76:ee:17:4d:fd:9d:68:d7:88:9b:
                    86:55:ec:14:06:0c:cf:5c:4c:ee:72:90:45:5d:6d:
                    9e:5f:4f:8c:84:0e:b4:11:49:3b:b5:9e:6c:5c:f8:
                    f0:29:d4:35:67:c5:ea:3c:0a:8d:8a:45:e2:d8:f7:
                    1b:36:7c:78:05:c4:8a:b1:bd:f7:77:96:6b:57:e7:
                    4a:41:3a:17:bd:c4:c1:b3:84:b4:49:60:43:87:17:
                    03:b7:44:14:ca:2a:99:3e:68:cf:91:30:9c:7c:ce:
                    85:d5:98:ab:90:c7:0f:1a:2f:9e:97:5d:ef:50:9e:
                    d9:15:dc:1b:0b:c8:fe:cb:60:d8:02:6c:08:85:37:
                    e9:a6:96:8c:c3:6c:79:8c:5b:45:73:fe:51:d9:21:
                    64:b3:12:9f:12:de:d9:8d:2f:1c:9f:01:82:42:e4:
                    05:cf:2b:e0:fb:7f:22:54:b6:69:53:4f:28:4c:1e:
                    43:10:d1:76:90:17:a4:9a:87:b6:dd:3a:8f:fc:f5:
                    fb:cd:fc:dd:34:ff:bb:78:4c:3f:50:69:49:07:f5:
                    79:37:10:a5:7f:ae:73:1b:aa:9e:a1:60:3a:e6:66:
                    f4:53:66:22:7b:9c:8c:35:52:b8:af:b1:88:e7:94:
                    71:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:FE:9E:28:D2:69:CF:ED:8E:5F:F9:F3:97:0D:D3:D4:76:34:FB:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/7e8a6158-b814-305c-b02d-c4597bfdf6b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl

            X509v3 Authority Key Identifier:
                keyid:BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.122.32.0-208.122.42.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:5b:8c:f0:fd:9d:a0:de:9d:42:f4:fd:73:0b:98:ba:6c:54:
         dc:7e:bf:a1:e2:df:e3:43:1e:56:c7:6f:f1:bd:74:24:41:ba:
         67:20:9d:38:8e:bc:c1:11:12:e9:4f:01:1b:65:ca:fa:d8:c9:
         42:06:b6:3e:4c:c8:c2:a4:f7:71:4f:74:50:32:02:e7:61:b7:
         01:f8:1f:e3:da:8d:2e:27:d3:5c:13:61:60:c3:f8:ae:9f:04:
         1d:2c:d4:0a:d4:64:31:5d:0f:5b:46:3e:b8:f5:02:b2:9b:0d:
         88:fa:b5:b6:71:76:f6:7e:a6:56:5a:c5:98:a0:fe:b0:03:7d:
         99:55:74:8e:09:bb:fc:d7:f5:90:28:b3:13:ba:84:3c:6c:20:
         9c:d0:94:89:41:b8:f3:c5:9b:72:48:62:46:f5:a9:9b:7c:cd:
         32:27:a3:7e:64:db:95:06:58:59:0b:7b:d6:80:1b:fb:6b:50:
         0c:82:95:2e:a7:80:d5:aa:24:d2:3c:b9:ac:c7:3b:2c:b3:f5:
         39:f3:88:8b:79:6f:50:42:85:79:9d:68:40:6c:dc:e9:7b:96:
         84:2e:71:28:ae:67:e7:53:c0:17:9f:94:ba:15:fb:57:da:85:
         f0:6b:67:f8:b3:bd:87:ea:70:92:e1:51:c3:55:1a:1c:99:4c:
         7a:32:ca:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:56:41 2026 by rpki-client