Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a4332541-b400-3677-ac43-6a5386bea0f7.roa
File:                     a4332541-b400-3677-ac43-6a5386bea0f7.roa (raw, json)
Hash identifier:          q3rKZyC3df8wLt1TcO9dHWAAhhkt+TJhk4wa8ncm/is=
Subject key identifier:   CD:7C:F3:F4:73:7C:0A:A9:31:79:DF:B5:E0:63:D6:00:58:6F:FA:54
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584EBC28A967B733F13E90045640
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a4332541-b400-3677-ac43-6a5386bea0f7.roa
Signing time:             Wed 05 Aug 2026 10:22:25 +0000
ROA not before:           Wed 05 Aug 2026 10:22:25 +0000
ROA not after:            Tue 03 Nov 2026 11:22:25 +0000
asID:                     27411
IP address blocks:        173.208.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:28:a9:67:b7:33:f1:3e:90:04:56:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  5 10:22:25 2026 GMT
            Not After : Nov  3 11:22:25 2026 GMT
        Subject: CN=8ad393f5-0f6b-483a-a110-0c36b4f72818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3b:33:96:e6:fe:6f:e3:be:f3:25:99:18:67:
                    c1:03:fc:44:16:1b:25:ba:70:2d:5d:2f:e3:35:12:
                    b1:ec:7a:15:0c:ec:c9:f0:07:e9:e7:f5:41:38:f9:
                    07:fc:34:bc:e4:e1:62:b1:5f:4c:ef:67:10:34:ac:
                    43:dd:ba:13:45:65:f8:eb:71:73:0a:df:e1:be:f9:
                    db:73:61:39:fe:0d:d4:d0:f1:94:db:0d:a4:c0:67:
                    24:84:bd:de:13:39:ef:6c:14:69:3b:35:05:36:18:
                    cc:04:e1:e3:19:32:af:4b:fb:d6:cb:e0:41:d3:a9:
                    a3:53:f8:52:9e:5e:6e:64:08:55:ca:b2:a9:ab:a3:
                    8e:e5:be:5c:cb:28:dd:c9:a0:05:9b:c9:dc:75:c0:
                    75:f5:1b:8b:ba:fc:a2:8b:af:e2:d3:b2:27:2b:39:
                    93:45:c4:f6:ff:25:42:fa:c2:5a:09:f9:0e:1e:73:
                    4c:34:79:4a:21:09:da:a8:af:9d:c6:11:c8:3b:07:
                    cb:b3:80:c1:dd:4d:70:e2:8f:4b:a6:c8:bc:f0:dc:
                    34:1d:d4:19:27:47:ec:5b:a6:4d:3c:cf:75:18:fd:
                    0c:4a:1e:4a:9c:1e:45:85:fc:7c:cd:30:50:8a:ee:
                    33:f1:20:9f:05:49:da:c6:d6:e1:6f:72:8f:0b:58:
                    e1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:7C:F3:F4:73:7C:0A:A9:31:79:DF:B5:E0:63:D6:00:58:6F:FA:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/a4332541-b400-3677-ac43-6a5386bea0f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.208.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:1e:77:d6:ac:6d:49:e7:fa:fe:d9:d5:a3:36:91:97:99:05:
         fb:a0:75:fe:fe:4b:13:43:d1:89:30:88:08:ac:93:15:36:59:
         b8:7c:e4:30:c0:8a:d1:c3:57:f9:23:a3:82:3c:80:df:86:ff:
         a3:d6:95:0d:c0:67:3a:9c:85:ac:d0:9a:6b:9b:f5:66:fa:4d:
         24:82:ab:63:24:fb:7c:2d:e5:69:33:8b:a6:a4:cc:19:ca:af:
         ba:97:1b:f7:89:ff:35:c9:43:14:22:3d:f9:7d:d2:30:d8:34:
         b7:cb:d9:52:f8:2d:34:34:ff:90:eb:94:2c:4c:09:ea:91:3a:
         d4:6b:02:d8:8e:3f:f3:97:29:92:18:5f:fb:cc:ed:46:fb:81:
         94:99:44:df:40:38:c7:20:c0:ea:46:5a:b6:a7:23:23:64:b1:
         bf:ba:9c:39:ce:e2:f9:bc:99:4f:ad:80:18:b4:47:c4:85:57:
         cc:60:00:64:d5:a0:7d:66:93:19:3a:f3:ac:74:90:8b:05:ea:
         1c:1b:05:50:d7:4b:45:34:41:88:4f:3e:a1:69:1f:fd:5c:6c:
         4d:ad:92:b9:63:1d:26:20:4d:67:2a:52:f0:61:cf:7d:8c:05:
         c7:08:ad:a9:18:a9:6f:67:3e:54:2a:d6:e4:cc:e7:e2:33:a9:
         e1:87:e0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 16:02:03 2026 by rpki-client