Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2d276ece-328f-3780-87af-e36284a6c503.roa
File:                     2d276ece-328f-3780-87af-e36284a6c503.roa (raw, json)
Hash identifier:          4MZG9yXmRoaEKo/GF5SrknIqczDd9pTclfrpMXnuhBM=
Subject key identifier:   B4:A3:55:DA:9A:90:68:25:ED:21:FB:D5:CB:7D:74:DF:F4:60:C5:C7
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584EC2919A10BF36465AC4801200
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2d276ece-328f-3780-87af-e36284a6c503.roa
Signing time:             Fri 07 Aug 2026 17:28:42 +0000
ROA not before:           Fri 07 Aug 2026 17:28:42 +0000
ROA not after:            Thu 05 Nov 2026 18:28:42 +0000
asID:                     395954
IP address blocks:        147.255.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:91:9a:10:bf:36:46:5a:c4:80:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  7 17:28:42 2026 GMT
            Not After : Nov  5 18:28:42 2026 GMT
        Subject: CN=1093e626-d44a-4f3d-83d6-1a807e48620f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:82:6d:2d:f2:a0:69:bd:d5:c9:d4:54:8b:9b:
                    c2:07:34:a6:a7:27:eb:25:6e:48:e7:fd:0a:da:c6:
                    1d:d6:50:cc:03:00:9e:c1:c5:3a:47:de:ce:ae:ec:
                    3c:0e:a3:0a:81:d3:d5:76:b9:b6:ca:b7:9d:19:76:
                    2f:4a:e5:09:34:4f:e4:97:c6:a4:ee:94:a7:22:cc:
                    01:c8:6d:9c:2e:62:f6:c5:2b:da:56:f6:43:9d:46:
                    c6:24:e5:af:47:90:e9:64:3a:60:e2:92:25:da:e7:
                    2c:59:3e:50:8b:c3:b8:c0:4f:9f:9f:ee:05:6c:b2:
                    d2:e9:16:54:b1:70:5a:cf:36:94:37:b4:a4:e1:88:
                    95:05:4c:2a:0d:a3:58:27:5d:9a:9f:13:69:51:ed:
                    fe:df:f0:4b:5e:c5:45:40:fb:f1:45:fa:79:5f:00:
                    72:b9:9a:02:bf:ee:7c:22:c4:ce:3a:7f:28:99:67:
                    9c:95:94:06:24:dc:5a:4c:63:6d:d8:51:43:43:a5:
                    a2:b5:44:a2:f0:82:e7:c5:7c:2c:ce:ba:ac:a7:d4:
                    fb:0f:5b:c5:c3:54:fc:fa:32:ce:eb:4b:57:17:53:
                    93:54:f6:4a:52:b6:61:8c:95:40:6c:6f:d2:18:23:
                    ba:95:c2:a9:cd:fe:a8:19:60:88:28:6d:52:f1:6f:
                    c0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A3:55:DA:9A:90:68:25:ED:21:FB:D5:CB:7D:74:DF:F4:60:C5:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/2d276ece-328f-3780-87af-e36284a6c503.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.255.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:52:6a:c3:b1:94:c3:52:c9:8f:21:dd:e5:9a:b4:fc:3d:db:
         45:ed:0a:b6:28:22:f9:07:9b:71:7e:83:30:64:05:72:f4:ff:
         9b:cb:5b:dc:e9:e5:5c:e1:b1:1c:46:50:54:e9:61:94:96:3f:
         d4:44:c9:c7:81:1a:16:8f:f4:87:57:f1:e2:e3:da:e5:1f:0f:
         1d:23:b6:43:df:29:90:5b:e1:89:e6:c1:6b:fb:d1:35:37:63:
         5d:32:0d:2c:16:90:7f:4b:19:13:a9:cf:9a:aa:9e:33:f8:a3:
         c2:6b:d7:1b:d9:c8:37:83:5d:87:a6:7d:6c:d8:f9:ae:fb:43:
         c8:29:f4:52:af:62:7e:cc:77:80:95:f1:9d:95:b9:4b:05:f3:
         98:70:c2:24:9a:f1:38:78:b9:f9:cf:71:36:40:1f:e5:86:3d:
         f3:f9:b7:90:2c:1a:05:f5:75:69:01:44:da:61:56:b4:6f:cb:
         a7:52:89:8f:cf:cf:1d:ce:21:4a:01:8a:56:73:81:95:16:e7:
         f0:d1:1e:89:3a:34:e6:88:e8:18:67:c2:60:75:db:8f:3c:29:
         7e:bb:68:8d:44:15:f3:f6:f4:cb:aa:5f:9d:a8:04:1b:ad:84:
         bd:d8:9d:c5:d7:15:98:48:7d:9f:cc:0a:e1:f2:d0:b0:3b:8d:
         91:05:d3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:38:07 2026 by rpki-client