Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/08d9c339-29b3-385e-b6a9-da1dc3eb4faa.roa
File:                     08d9c339-29b3-385e-b6a9-da1dc3eb4faa.roa (raw, json)
Hash identifier:          EdSGuiF28fw/7Z+Sp6BpDzUDLoN+4pdn+y7jMrileig=
Subject key identifier:   E2:14:CF:B2:FC:E6:8C:E8:79:33:10:AB:75:F2:CF:6D:E7:5D:FA:FE
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F5B97FB6E2A0A59235C63E780
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/08d9c339-29b3-385e-b6a9-da1dc3eb4faa.roa
Signing time:             Thu 01 Oct 2026 13:00:12 +0000
ROA not before:           Thu 01 Oct 2026 13:00:12 +0000
ROA not after:            Wed 30 Dec 2026 14:00:12 +0000
asID:                     7203
IP address blocks:        147.255.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5b:97:fb:6e:2a:0a:59:23:5c:63:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Oct  1 13:00:12 2026 GMT
            Not After : Dec 30 14:00:12 2026 GMT
        Subject: CN=f2550dc5-2e93-4573-b6aa-53d7490fced7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:86:0f:17:83:f0:1c:15:08:fa:9b:ae:6e:4c:
                    04:7b:45:46:20:8c:a9:4b:07:35:17:61:02:64:4e:
                    8d:18:54:cc:53:73:7d:ce:85:f6:f9:90:45:4a:49:
                    42:03:8d:a2:c1:50:74:47:8a:1b:42:38:e9:b4:24:
                    aa:28:80:cc:40:97:74:a6:3f:9e:4a:5f:3f:4b:2e:
                    1b:41:08:a7:58:ca:63:72:77:4a:91:8c:a6:5e:c6:
                    b3:e9:c0:95:af:48:34:8d:e7:77:9b:b2:7d:b5:ac:
                    9f:c2:bc:4f:77:f6:d5:25:b6:54:b4:ed:ac:be:08:
                    ab:0f:e8:9d:8a:4d:80:b3:7f:52:4d:c9:a5:54:1f:
                    6a:cb:98:e7:ea:4d:97:b4:c2:97:7b:b7:17:24:61:
                    da:87:29:90:bc:e8:4b:bb:31:fb:68:2a:55:f3:ed:
                    d4:71:56:5b:d2:b2:f3:1d:85:7e:3b:c2:49:10:13:
                    c8:4d:0d:05:5d:a4:ed:e4:76:6f:23:57:5a:6f:64:
                    15:86:74:59:8e:72:9c:fd:80:a9:97:b6:8d:f3:88:
                    86:5a:49:15:0f:7f:d0:e5:94:51:33:f1:38:52:4e:
                    3f:3f:ee:b3:ed:31:5d:c8:a4:78:3b:56:df:3f:4f:
                    d0:f0:1d:41:5b:fe:e0:35:4f:0c:17:8c:5f:54:38:
                    df:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:14:CF:B2:FC:E6:8C:E8:79:33:10:AB:75:F2:CF:6D:E7:5D:FA:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/08d9c339-29b3-385e-b6a9-da1dc3eb4faa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.255.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:e7:3b:12:20:ef:3c:f0:64:84:09:10:6a:da:22:f3:46:f7:
         4b:90:8b:a6:28:d9:ad:4e:0e:98:34:53:bc:78:8a:41:5b:95:
         01:e8:d9:ed:7c:b5:39:74:62:69:07:d0:88:75:e7:a5:7d:97:
         c7:f3:1b:8a:c2:7c:e5:70:5b:42:ef:08:f7:ae:a2:07:bf:78:
         e2:17:cd:a9:b4:1f:51:1c:27:2a:69:db:0d:3f:af:06:e5:84:
         25:7c:ac:53:b7:3a:d2:74:e3:74:e8:51:37:83:ec:f6:18:b5:
         6b:2c:18:e3:e0:7e:ed:f7:9a:dc:90:8b:8b:27:67:9f:9b:c1:
         40:e1:d7:89:cb:a1:5f:ab:14:90:7a:b3:23:f3:73:c2:03:83:
         61:1a:bf:b8:a4:a3:03:7d:e5:55:cd:58:c0:0c:91:19:c8:17:
         12:5b:d8:4a:19:f6:f4:7b:63:0f:37:84:2c:eb:d0:6c:44:b5:
         ce:ba:2e:b0:af:30:39:98:0a:a6:14:7b:40:cd:06:70:78:8f:
         cc:e1:bb:8e:de:33:f5:40:5a:0c:a9:b3:a4:b3:a5:d9:05:ca:
         c8:cb:66:a5:65:ca:3f:33:a6:52:ec:e9:4f:3b:90:74:bb:78:
         9d:fa:6b:73:28:0b:c8:d3:bf:e9:91:d7:89:d4:48:2e:7a:0d:
         bc:c0:5a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:59:50 2026 by rpki-client