Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/86fd6e1e-eb2b-3ea5-a81f-f4e832b49763.roa
File:                     86fd6e1e-eb2b-3ea5-a81f-f4e832b49763.roa (raw, json)
Hash identifier:          d8RauP9CS9QC0BPXzYXBNYsH7EC/vb9VEaNSyk5a1Jk=
Subject key identifier:   FF:71:82:91:F5:AC:AD:33:47:EF:37:7A:ED:26:5F:56:40:96:35:44
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584EC04721C9F67D617DF332EA80
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/86fd6e1e-eb2b-3ea5-a81f-f4e832b49763.roa
Signing time:             Thu 06 Aug 2026 21:47:02 +0000
ROA not before:           Thu 06 Aug 2026 21:47:02 +0000
ROA not after:            Wed 04 Nov 2026 22:47:02 +0000
asID:                     395954
IP address blocks:        108.62.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:47:21:c9:f6:7d:61:7d:f3:32:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  6 21:47:02 2026 GMT
            Not After : Nov  4 22:47:02 2026 GMT
        Subject: CN=6e13fccc-7a15-4b53-bb79-8e257d2d0fa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f9:91:71:06:aa:a9:e4:91:76:02:39:a1:b9:
                    23:0b:e8:7d:66:c7:c1:2c:1a:24:b8:ac:ab:c3:d5:
                    a5:2a:18:62:9b:f8:22:4f:52:68:3b:c5:be:01:20:
                    81:23:b3:24:51:4d:63:92:c6:ef:32:3b:7b:85:21:
                    ce:17:18:f3:22:c4:c7:2c:66:60:7d:a2:93:98:8e:
                    89:ef:5b:42:92:a6:e4:c9:16:d9:b6:d9:59:9e:12:
                    15:ec:63:7b:31:ed:47:0e:48:f7:75:da:c4:7a:ae:
                    84:cf:f8:86:ce:23:59:c2:d2:14:6e:0d:fa:4c:e7:
                    47:26:dc:84:f4:cd:88:71:bd:00:30:eb:f7:f7:d7:
                    a8:8e:9e:ca:48:70:46:a9:55:2b:cf:6b:d6:73:e2:
                    ba:62:ce:fe:64:77:f0:07:c4:ce:09:2b:0c:36:0b:
                    5d:a6:ee:6b:fd:27:bc:b3:ee:af:92:73:ab:cd:3f:
                    c5:0f:5f:23:c4:37:b4:1f:a9:7b:5c:5a:db:7b:6f:
                    83:8b:51:9f:0a:97:17:94:82:34:62:26:93:f2:27:
                    f5:e2:c9:53:03:3e:c9:05:28:86:ad:89:a6:6c:23:
                    de:86:53:59:d6:ed:5a:b5:1d:55:c1:a0:e4:35:90:
                    1c:1f:cd:cd:21:01:0e:88:ce:ed:6c:d1:a1:80:db:
                    db:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:71:82:91:F5:AC:AD:33:47:EF:37:7A:ED:26:5F:56:40:96:35:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/86fd6e1e-eb2b-3ea5-a81f-f4e832b49763.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.62.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:94:0e:70:98:82:ed:b5:a5:2d:fb:7f:03:d2:8f:80:8c:7d:
         04:42:ea:8f:03:09:f6:88:ff:1a:7a:18:33:58:3c:c1:ef:05:
         4c:d1:b1:91:d1:91:ea:58:87:d1:5a:d1:1b:52:ef:54:f6:02:
         fa:25:cf:cd:e1:05:8b:3e:14:e8:44:71:61:98:e9:fb:64:a5:
         c5:f3:82:b3:87:6e:e1:08:56:3e:ce:7f:bb:d0:1b:3d:9e:dd:
         69:95:1b:39:b8:7b:f4:7f:a6:f9:86:8d:e5:41:b5:fd:d0:f9:
         c9:44:92:31:c4:0a:78:c4:8a:32:fd:a0:d9:e6:c6:d3:53:32:
         33:7f:f8:e1:2c:07:f8:3b:69:19:8c:8b:d3:f0:90:dc:a0:7e:
         a7:31:bb:1e:0b:fd:b4:dd:fd:12:6f:cc:bd:ff:d4:73:44:a2:
         61:3d:91:e7:97:8d:8c:bd:64:54:00:44:3d:77:19:36:f7:a4:
         42:58:a8:1e:b0:46:76:07:91:83:db:a0:58:96:80:9a:60:47:
         ba:5b:21:e2:95:7d:e1:1f:ca:c4:a5:1a:11:1f:2b:c7:73:35:
         5e:20:86:23:5d:bb:09:a1:f1:10:51:98:8a:55:3e:2b:ab:9e:
         0d:a8:13:3d:ff:06:93:b4:2a:2e:6a:9d:8c:17:82:47:b6:98:
         d7:cc:01:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:38:21 2026 by rpki-client