Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/0c88365a-aa49-3ec3-8c2a-a376e1f2b9cd.roa
File:                     0c88365a-aa49-3ec3-8c2a-a376e1f2b9cd.roa (raw, json)
Hash identifier:          QTdBUypkzwFsGTxrv3aei44cbTMz0PpJPEdGNjnRZns=
Subject key identifier:   35:6E:DF:C7:D8:DD:8E:9D:6F:A4:11:3B:67:61:66:26:A2:E5:C4:C2
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F6292B96CE2514125A681F500
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/0c88365a-aa49-3ec3-8c2a-a376e1f2b9cd.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     395954
IP address blocks:        173.208.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:b9:6c:e2:51:41:25:a6:81:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=2537848b-9bbf-4015-b850-eb5d3d85d15c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c2:ed:5b:d1:cf:78:99:19:75:f7:06:59:f2:
                    b4:4a:24:a4:ad:e9:99:4b:f8:92:0d:39:c4:98:2f:
                    5b:92:c7:29:39:a6:70:90:3e:ca:c1:fd:aa:f6:9e:
                    5e:94:88:5b:bc:ef:70:7c:d4:20:3f:f5:cf:f2:b0:
                    bf:c0:16:e3:be:d3:2a:b2:61:73:d7:43:24:bb:e2:
                    25:f0:fe:e5:6c:c8:67:18:bd:7d:45:f1:64:73:66:
                    7a:8c:34:e6:3f:63:e1:5a:17:c1:8d:1c:bb:14:de:
                    47:17:47:17:60:f9:b3:fb:15:86:10:67:e4:68:65:
                    80:6d:72:4d:f1:d2:2e:74:f9:19:2f:e6:c6:65:05:
                    b8:8d:7d:51:f1:e7:e2:2e:f7:e9:55:ab:1f:13:42:
                    66:7b:73:1c:03:c0:94:94:94:ff:51:04:8e:d8:97:
                    f1:52:0a:e2:31:27:fe:be:9c:85:e5:bd:9f:8d:9a:
                    b1:ac:be:50:5b:77:f2:35:ad:3c:90:01:e9:61:e1:
                    aa:5b:fc:0b:f4:86:3a:5d:eb:a9:37:df:52:85:a5:
                    97:0e:6c:85:1f:ea:6e:4f:3c:25:3a:3d:45:85:73:
                    d3:7f:9a:4d:a7:4c:57:09:a4:1c:4f:57:b5:69:6e:
                    90:93:b2:1f:b2:48:56:aa:63:ff:78:32:37:3d:3f:
                    81:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:6E:DF:C7:D8:DD:8E:9D:6F:A4:11:3B:67:61:66:26:A2:E5:C4:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/0c88365a-aa49-3ec3-8c2a-a376e1f2b9cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.208.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:90:93:00:db:a2:07:4a:b3:2b:af:64:75:9a:97:fc:68:d1:
         90:4e:9c:da:56:24:68:a0:85:46:c2:84:37:69:70:a2:90:c5:
         af:fd:f0:1d:c0:aa:ca:cf:56:76:50:7e:01:56:ed:3f:67:ba:
         f1:d2:5b:57:f4:02:70:5f:4d:1c:68:3b:6f:b5:57:b5:d6:67:
         f5:98:69:c9:6d:25:04:11:ce:4c:ce:a4:0e:9f:f0:33:a6:9e:
         3d:86:b6:42:30:49:34:4c:81:0f:a6:86:0b:bd:61:19:41:d9:
         89:c9:c2:db:4b:08:c5:ce:d5:82:c3:c5:ba:40:23:b8:6c:23:
         9b:99:8b:e8:9b:1d:69:f5:ee:86:c0:94:64:0b:6f:11:71:23:
         7e:61:a1:f5:5e:c3:46:92:b2:8a:d8:07:2b:12:61:39:31:d9:
         10:b2:fc:ea:8f:f1:73:3d:1f:bf:8a:a4:90:49:2f:74:69:24:
         fb:fd:ee:27:41:71:35:a8:47:ee:8a:f6:fc:0a:bd:0e:c2:41:
         42:06:3f:03:e9:18:c5:3c:6a:02:f9:80:45:65:e9:4c:32:36:
         50:b1:36:fd:ba:2e:36:59:24:e0:88:c0:28:1f:60:fd:0c:0a:
         b9:09:ce:05:62:76:75:5b:2c:40:f5:56:7f:fc:89:e7:b8:41:
         eb:e6:7d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 18:48:23 2026 by rpki-client