Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b72e502b-9abd-380a-a5a1-bc23a51f60be.roa
File:                     b72e502b-9abd-380a-a5a1-bc23a51f60be.roa (raw, json)
Hash identifier:          ZIrW5yPQs2aDPXwd+mA/MTO85HWRrNXhfvgxyDHnTl0=
Subject key identifier:   65:33:09:0C:BD:0D:4E:21:39:0E:89:A9:7D:20:81:60:55:F5:73:AE
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584EBF601F9CEB5C41E2D332C000
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b72e502b-9abd-380a-a5a1-bc23a51f60be.roa
Signing time:             Thu 06 Aug 2026 14:01:35 +0000
ROA not before:           Thu 06 Aug 2026 14:01:35 +0000
ROA not after:            Wed 04 Nov 2026 15:01:35 +0000
asID:                     396190
IP address blocks:        108.177.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bf:60:1f:9c:eb:5c:41:e2:d3:32:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  6 14:01:35 2026 GMT
            Not After : Nov  4 15:01:35 2026 GMT
        Subject: CN=572919ca-0c02-4324-b5c3-73b5d6a01b6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:38:75:ee:92:ff:06:73:2a:76:5f:fc:19:96:
                    d2:42:ba:85:89:b2:bd:58:fb:74:11:9c:a3:23:d8:
                    ee:0d:21:31:6d:a7:21:53:82:13:17:d1:d9:c4:5f:
                    c8:ae:21:a2:a1:03:78:32:f7:33:50:13:ea:cf:ab:
                    6b:df:af:c5:bb:fb:91:9c:1b:3c:f9:dd:bc:d6:a2:
                    c6:74:11:96:6d:a8:07:7f:1a:91:15:8d:c4:91:cb:
                    b3:ab:7f:f4:5f:bd:02:a1:50:35:d8:80:f1:18:53:
                    b1:41:9d:91:ce:96:81:cc:a3:4f:54:fa:d2:e4:eb:
                    50:6a:59:02:dd:05:bb:c7:02:77:3a:05:78:49:e4:
                    9e:69:16:b7:c1:9f:b3:bf:6c:6f:07:7e:ec:94:7c:
                    b3:c2:b0:c3:68:8b:d6:df:53:b8:d2:79:ae:e9:96:
                    d9:c9:f4:1e:5b:2d:5a:a2:a8:dc:24:37:32:14:15:
                    5b:95:75:c5:50:d5:81:a3:c7:5e:6b:3b:73:4d:db:
                    d1:7e:44:eb:d4:7e:8e:70:df:70:8e:27:75:90:76:
                    a4:de:21:a8:63:c8:58:a3:dc:45:90:a0:0f:7d:f9:
                    87:0f:82:2b:d7:0e:dd:67:02:59:e2:24:2e:ef:a6:
                    e1:df:67:c5:77:5e:5d:f4:eb:c0:b0:b6:2e:11:78:
                    83:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:33:09:0C:BD:0D:4E:21:39:0E:89:A9:7D:20:81:60:55:F5:73:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/b72e502b-9abd-380a-a5a1-bc23a51f60be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.177.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:6a:a8:74:bf:64:48:17:43:fe:92:cb:56:f1:50:e7:96:1a:
         65:70:19:8b:6c:4d:b7:11:6e:13:e9:12:1e:66:b1:ad:bf:61:
         ce:e5:a5:99:6b:3a:82:d7:93:fd:5a:4a:b8:62:77:c2:57:bf:
         ae:7d:0e:a9:60:12:72:d9:26:c7:52:b3:b6:5b:ce:4f:73:62:
         81:a9:f4:66:79:8f:c1:e4:26:68:4c:7e:94:db:35:02:d6:77:
         a0:66:48:6f:d7:b5:d7:1b:0c:e3:31:43:5f:3a:52:a0:d5:14:
         cd:f6:21:c4:0c:a4:70:66:0e:c8:cd:40:ea:de:14:97:94:81:
         10:a8:13:58:4a:e1:87:c2:49:c9:52:60:3d:2f:93:5b:cb:eb:
         9b:00:98:d7:0f:f1:52:83:84:da:92:79:5c:6c:1c:33:14:d9:
         0a:ec:73:71:5a:e0:6a:c9:41:0e:a5:01:52:42:79:af:38:43:
         34:af:83:4b:aa:89:5e:47:4d:8a:2e:8b:4b:92:3b:9e:4c:e8:
         1e:21:24:1e:2c:21:d8:69:00:d7:17:69:af:79:18:13:0b:fa:
         25:80:29:74:92:c9:85:94:bd:f3:41:df:bc:30:61:74:15:5a:
         49:19:19:02:0c:e7:a4:2a:bb:90:ee:cc:d9:81:82:b9:f1:80:
         ed:16:fd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:38:19 2026 by rpki-client