Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a248b6fa-c2e8-3595-96bb-d2dd91024eb6.roa
File:                     a248b6fa-c2e8-3595-96bb-d2dd91024eb6.roa (raw, json)
Hash identifier:          0k92Nk5CebNES6SGdl/KPvGzAsgJyLbO7Cgo9HFsZZw=
Subject key identifier:   CC:C1:A1:A2:49:D1:15:C4:59:E2:5F:E4:93:73:AB:CE:F1:C1:F1:6B
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584EC0432BAFEDD0DD1D7D531C80
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a248b6fa-c2e8-3595-96bb-d2dd91024eb6.roa
Signing time:             Thu 06 Aug 2026 21:39:03 +0000
ROA not before:           Thu 06 Aug 2026 21:39:03 +0000
ROA not after:            Wed 04 Nov 2026 22:39:03 +0000
asID:                     395954
IP address blocks:        108.177.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:43:2b:af:ed:d0:dd:1d:7d:53:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  6 21:39:03 2026 GMT
            Not After : Nov  4 22:39:03 2026 GMT
        Subject: CN=deba4bbe-796c-49a3-b6d9-40fb7df49a29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ee:98:ef:66:bc:31:10:6d:4c:e3:a4:32:9f:
                    01:96:cf:93:7a:7c:ff:35:92:b4:53:a3:bc:ce:97:
                    40:3a:64:27:6c:6b:85:32:1d:3a:bd:ff:e5:90:5b:
                    37:f7:96:58:11:f7:c0:9e:ce:08:aa:68:d2:8d:80:
                    3d:ea:7b:c2:02:ad:82:4e:c0:bc:e5:f2:8d:87:a5:
                    f8:0b:2a:98:3e:9b:43:3b:88:a8:4d:18:0c:b1:e5:
                    0c:e8:f1:71:d5:0e:90:8a:e1:3d:b0:e7:58:e0:cc:
                    b2:c1:27:8f:1d:b0:af:eb:11:2d:5a:05:ea:5f:fd:
                    54:09:cd:45:c6:41:5a:af:51:6a:6a:73:09:80:dd:
                    95:80:32:0e:89:09:be:4d:5d:d4:8d:63:64:52:44:
                    1c:9e:5d:ee:3e:6c:cd:07:8a:ef:b1:dd:3e:23:b3:
                    b1:38:13:a8:43:cd:44:05:8c:90:a0:4f:e7:f0:b0:
                    3f:c2:8f:29:03:ef:f2:b7:7c:f5:af:58:10:30:7c:
                    f2:40:2c:25:5c:ea:b5:7d:df:98:2b:00:54:78:59:
                    7c:ee:6a:b9:69:78:91:06:bc:72:ab:85:d4:34:b8:
                    ae:83:e3:a1:2c:1a:17:0f:87:cc:be:19:c0:ca:3e:
                    9a:53:b6:b6:f2:56:5b:1c:6f:90:8b:ec:81:8b:51:
                    76:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C1:A1:A2:49:D1:15:C4:59:E2:5F:E4:93:73:AB:CE:F1:C1:F1:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a248b6fa-c2e8-3595-96bb-d2dd91024eb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.177.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:76:60:b1:6a:4a:92:82:3c:28:96:af:a5:2b:ab:21:5b:a0:
         ca:e0:fd:ff:8f:52:a6:ff:53:21:25:ed:e1:0d:22:b4:aa:ae:
         63:8f:c0:23:b7:6a:de:97:f2:0f:20:0e:3e:0a:a6:a0:4a:ea:
         fd:1f:84:4b:c0:63:23:51:bb:bc:b7:0b:08:17:bb:6a:c9:45:
         00:1d:73:34:56:1b:bd:01:b3:39:80:fb:88:10:df:77:2e:0f:
         b1:18:5a:83:2d:5e:24:0a:c2:c6:da:3d:63:a5:f7:5f:78:17:
         f5:c0:63:d4:ee:c3:36:82:47:b4:09:5b:fb:21:b3:09:11:63:
         52:8c:65:6b:fb:fb:cc:d4:6a:ab:64:cd:9f:0b:7c:38:81:3a:
         ab:c6:0e:13:c7:ed:ac:76:44:75:f6:36:89:8c:e8:5a:2a:16:
         f3:9c:3e:61:4a:2c:94:b6:54:b6:f2:fe:69:66:49:97:a1:dd:
         8a:4b:ba:b4:1b:84:0e:07:e4:75:85:d7:c9:d3:e5:ed:ac:b0:
         a1:05:e6:40:68:50:06:d2:1a:7c:d4:c7:4f:38:03:73:78:48:
         91:83:b1:64:82:6f:68:31:26:2e:02:06:0e:ac:f4:4f:63:40:
         7e:d7:2d:22:ca:32:20:7b:f3:69:30:10:c3:c5:fb:6d:d3:35:
         bb:f0:8d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 18:18:30 2026 by rpki-client