Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/969a8096-148f-3be3-b610-047cedb14a3d.roa
File:                     969a8096-148f-3be3-b610-047cedb14a3d.roa (raw, json)
Hash identifier:          /SEQTCZkqseRS6VF307p80gYts4I81sj7IAOxt+qiCU=
Subject key identifier:   9B:6E:EE:5D:74:E2:A7:D2:FD:1E:EA:F9:A2:A5:91:6B:E0:BF:83:7C
Certificate issuer:       /CN=a8825ed0-210f-48ae-8970-c92773afbb48
Certificate serial:       010D0C9F4328584EF717BADD4AAB6354E8B6F13C
Authority key identifier: BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/969a8096-148f-3be3-b610-047cedb14a3d.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     16766
IP address blocks:        208.122.49.0/24 maxlen: 24
                          208.122.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:ba:dd:4a:ab:63:54:e8:b6:f1:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8825ed0-210f-48ae-8970-c92773afbb48
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=18f70f85-bfe7-4226-adab-2095fce327ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ce:64:b0:b2:c1:e6:63:af:15:8e:c5:24:56:
                    cf:0a:df:e0:20:b8:c7:fd:34:51:bf:9b:92:ef:73:
                    c6:43:a3:c9:e4:35:3b:ed:d5:42:b2:84:76:ab:94:
                    13:22:b1:fa:0e:7b:0f:a8:b6:d4:f7:09:a7:22:f6:
                    71:02:a0:21:5e:ae:f2:c0:90:60:04:36:ff:b8:8c:
                    c8:2e:df:90:7d:6e:0e:20:a1:90:38:75:14:14:7f:
                    ec:a0:ae:ba:ca:cd:7e:ea:b8:b7:c5:31:ee:ef:c7:
                    e5:e2:8e:b3:ff:26:c2:32:74:32:a4:40:64:26:ae:
                    11:d1:02:03:e8:61:21:a5:15:08:6e:a8:41:76:ff:
                    fe:ca:4d:a9:58:10:5a:72:ab:8f:be:4c:58:d7:1e:
                    40:0f:00:77:16:a1:b8:47:3e:70:82:dd:84:57:8b:
                    d5:87:b3:9b:6b:ad:aa:61:e0:c0:53:74:e7:c3:d4:
                    55:83:07:f3:40:c3:2e:b2:18:73:ca:92:8a:e0:af:
                    6d:18:0e:71:10:23:92:65:b2:79:2d:21:b2:f7:21:
                    0d:cf:b0:a6:45:45:40:11:8a:2d:8a:ab:f5:2b:b7:
                    42:5f:84:5f:bc:ce:ce:04:f4:76:fc:65:2c:22:31:
                    ee:b3:5e:51:f3:aa:aa:52:45:cf:06:41:f4:a3:f4:
                    86:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:6E:EE:5D:74:E2:A7:D2:FD:1E:EA:F9:A2:A5:91:6B:E0:BF:83:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/969a8096-148f-3be3-b610-047cedb14a3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl

            X509v3 Authority Key Identifier:
                keyid:BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.122.49.0-208.122.50.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:79:9b:41:ff:69:25:6a:f1:f2:56:02:1f:33:2f:8f:de:cf:
         9a:fa:ca:1c:16:99:57:09:13:74:3d:79:92:9b:5b:7a:9a:27:
         5b:59:94:a4:fe:fc:c7:02:c8:c6:37:cb:c2:1b:0d:d6:5f:79:
         b2:32:49:c1:7f:ec:6c:ad:7b:34:4f:9e:f7:a8:07:81:f0:84:
         13:c2:1d:05:4e:a5:e2:b1:60:24:65:b6:08:4e:e8:fd:39:b7:
         8b:43:4b:ea:69:63:9b:fb:b7:c2:ea:4d:a1:c2:f9:7a:6f:1a:
         c7:86:da:71:c2:b4:07:08:f9:d2:7b:3b:88:53:ab:ff:55:3e:
         ca:b2:49:1c:57:7d:4c:03:49:50:3a:79:f6:1e:ac:91:af:85:
         c9:aa:87:af:c9:8d:b8:bd:18:2b:16:d4:59:f2:83:14:8d:e2:
         a6:88:37:e1:44:f0:ee:d8:73:36:98:c6:cb:f9:99:33:5a:3c:
         3c:21:c7:12:7a:2d:c1:92:c1:1a:a0:53:89:56:95:13:aa:e2:
         73:e2:5b:d4:cd:7a:fe:b1:6c:b2:49:ed:9d:87:bd:b4:b5:68:
         0c:36:4b:0d:52:ee:c5:63:f3:0e:46:80:8a:4a:88:73:d8:0e:
         54:21:71:8f:8e:46:13:cd:f9:81:c9:dd:14:87:bf:62:aa:ab:
         36:db:52:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 04:28:46 2026 by rpki-client