Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/cd2747f3-9d09-38c0-9704-b01b677ba9a5.roa
File:                     cd2747f3-9d09-38c0-9704-b01b677ba9a5.roa (raw, json)
Hash identifier:          CNvr4njvYf43hNDy8QOQDcQY4+X8l5CHfQMeEvV+Asc=
Subject key identifier:   EA:01:8D:CD:B3:A9:60:CA:88:20:C5:A3:A0:29:FD:86:61:D9:FC:7E
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584EC23CEDE2F56844C7A31C9084
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/cd2747f3-9d09-38c0-9704-b01b677ba9a5.roa
Signing time:             Fri 07 Aug 2026 14:38:06 +0000
ROA not before:           Fri 07 Aug 2026 14:38:06 +0000
ROA not after:            Thu 05 Nov 2026 15:38:06 +0000
asID:                     395954
IP address blocks:        173.208.106.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:3c:ed:e2:f5:68:44:c7:a3:1c:90:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  7 14:38:06 2026 GMT
            Not After : Nov  5 15:38:06 2026 GMT
        Subject: CN=f5272f58-57c5-486c-b472-72d947b04430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:eb:93:a1:a9:96:ae:bf:dd:1e:e2:a8:64:12:
                    41:b2:c1:11:d8:2c:cf:7d:6a:4a:56:11:41:02:cf:
                    d5:c5:a9:d3:b7:c2:20:ea:da:4f:03:3e:94:5d:35:
                    99:e4:61:b3:96:46:95:48:f7:c7:04:6e:54:23:20:
                    42:46:0c:14:55:51:10:1a:fe:87:19:52:fb:b7:07:
                    82:d7:09:88:96:b9:77:67:77:ab:1d:d3:66:ed:91:
                    36:e8:a9:d2:92:c3:ad:66:8b:40:05:47:3d:d1:38:
                    32:cf:6f:96:87:93:09:6b:60:6b:eb:d0:a7:93:8b:
                    a0:41:88:54:37:c9:e8:4f:9c:43:40:ff:59:8a:b3:
                    09:37:9d:ea:5d:d7:1e:26:37:59:9c:33:49:45:ad:
                    2d:7b:2d:51:2c:46:02:32:8d:ae:a0:16:99:fe:4f:
                    b2:f5:c1:71:f6:1f:b5:78:d6:7f:a4:a2:1c:04:3c:
                    3e:0f:cf:9c:14:91:23:4d:da:4c:1f:11:e8:22:5e:
                    f8:71:09:6a:96:76:d2:8e:1c:cd:5e:1e:fe:8b:16:
                    f5:55:66:4a:ef:87:46:13:33:cb:3f:8a:1a:d3:f4:
                    fa:8b:ff:17:48:27:01:93:1a:a6:cf:1c:ca:f0:44:
                    20:3f:35:4a:0c:7c:98:8d:22:bd:78:7b:64:30:9f:
                    52:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:01:8D:CD:B3:A9:60:CA:88:20:C5:A3:A0:29:FD:86:61:D9:FC:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/cd2747f3-9d09-38c0-9704-b01b677ba9a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.208.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:73:e6:10:d1:7a:ca:d2:64:9e:74:79:c3:9e:3c:3b:95:7f:
         38:96:f8:9e:64:99:32:9f:c3:7b:13:13:4b:13:e2:22:cb:c5:
         5c:b8:54:a8:ee:5d:fe:e4:20:df:3d:e8:4c:6d:56:78:6a:e0:
         0d:f0:9d:a0:b2:9d:79:bb:ab:25:04:4f:30:13:3f:9c:47:7b:
         2d:4f:17:d5:75:6a:6c:a9:4c:45:bf:77:96:92:5b:0a:e5:e7:
         b5:ac:45:ac:cf:70:39:a4:20:47:aa:3a:d2:47:d2:b2:87:53:
         04:61:29:e5:51:8d:41:ba:a1:e2:62:55:a2:f3:bb:e8:ef:a7:
         39:e0:95:b6:81:f1:86:01:e0:fd:f4:85:0d:b7:ac:c0:42:6c:
         3d:af:0c:82:60:a8:c5:4a:0c:e4:a8:92:69:8f:5b:cb:bf:85:
         ec:a0:b8:39:cc:5b:c8:0b:5c:5f:44:ee:7a:04:3f:2e:6d:19:
         bd:26:73:c6:2f:5e:e9:ce:b6:bc:c5:0a:56:5a:87:41:d3:32:
         20:d0:82:30:d6:34:8b:ac:4f:64:45:1e:92:2e:2e:24:de:a9:
         89:4a:d6:09:75:8d:01:28:17:9d:a1:80:43:e0:98:e8:e2:30:
         fd:87:bf:18:53:39:e5:cb:9f:d0:f4:42:44:61:d2:da:1b:63:
         bc:de:d0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:38:44 2026 by rpki-client