Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d4b4f5fb-be5c-366f-9640-3e1aa1f6ece8.roa
File:                     d4b4f5fb-be5c-366f-9640-3e1aa1f6ece8.roa (raw, json)
Hash identifier:          lroH8kYq92S4Bpmuhuu+0szhZN8txjyh6HArJiASNcY=
Subject key identifier:   48:22:5A:AE:62:88:9A:A7:E3:5B:4F:E7:DA:77:29:1C:D7:4F:A7:2E
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F5E62DBFE08FE0B7952C9EA40
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d4b4f5fb-be5c-366f-9640-3e1aa1f6ece8.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     27411
IP address blocks:        173.208.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:db:fe:08:fe:0b:79:52:c9:ea:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=9bdd6abf-325d-48de-98ad-f6f0f7b02863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:80:f1:b1:e3:59:1d:97:ce:20:ce:80:c7:0d:
                    cb:19:2b:d8:c9:45:2d:a9:1e:d8:16:a0:0f:ae:06:
                    cd:f2:1a:c0:ba:5d:f7:a1:9e:49:73:11:69:f2:67:
                    dd:7d:dd:1a:b6:88:5f:27:0c:cf:50:8a:97:88:cb:
                    8b:fe:0b:17:35:a1:38:2a:a0:d2:39:f9:12:73:b8:
                    9d:38:ef:a7:02:34:a1:42:7b:27:e4:42:41:80:95:
                    5f:ed:14:95:b6:13:d1:53:14:77:c1:09:2f:cd:54:
                    24:ba:37:bc:c7:ec:03:0d:03:97:c7:45:06:4b:35:
                    9c:62:d5:4c:75:50:d7:c6:0f:f9:b8:cc:56:5c:70:
                    1f:d0:08:75:ef:09:a0:e3:b3:49:9e:f2:09:3e:ec:
                    dd:14:6a:c0:66:62:bc:00:44:b4:ea:d3:7f:3c:98:
                    97:90:3a:fb:7d:bc:b6:f8:bc:2f:f6:3a:0f:fa:ee:
                    1b:f4:08:ba:da:a1:a8:c8:1f:5f:42:04:05:43:b5:
                    74:75:f5:f7:d4:4d:dc:11:5f:42:c7:f5:e0:a7:34:
                    15:94:78:f5:b1:23:5d:2b:c0:ed:0f:ad:c8:19:64:
                    9b:80:83:82:ea:d0:a4:5b:a8:9e:4b:2c:8b:ae:14:
                    25:03:08:0a:c2:f9:6c:74:06:df:85:2f:01:84:50:
                    b5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:22:5A:AE:62:88:9A:A7:E3:5B:4F:E7:DA:77:29:1C:D7:4F:A7:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d4b4f5fb-be5c-366f-9640-3e1aa1f6ece8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.208.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:3c:fe:c0:b1:e6:72:21:a3:63:f0:f0:4a:bd:c6:22:cb:ac:
         27:29:02:e8:4a:e9:e3:7c:65:2d:6d:70:a3:89:fb:95:07:de:
         7b:f5:89:57:9f:e3:6f:e7:7a:53:34:16:c6:57:47:e1:16:b3:
         77:9f:bb:95:ac:e0:cc:d6:9c:d8:fa:d5:3b:ce:50:1a:62:ef:
         36:c9:fd:a6:57:f5:a5:70:59:86:62:29:71:6c:3f:b5:0f:72:
         5c:40:77:ce:2e:43:36:da:3b:90:01:81:84:a7:0a:96:77:5c:
         7f:4d:8c:06:b5:02:f8:76:ef:e4:aa:1a:f0:2a:23:51:e6:86:
         56:12:e1:b0:1c:7f:fd:43:72:b9:17:c4:fa:56:7d:18:5f:38:
         a6:f9:37:bc:34:7d:34:dd:e5:4a:da:1c:21:cc:2b:53:12:93:
         51:1f:2b:81:49:34:42:ee:4a:be:bd:0d:76:67:d1:c4:74:0a:
         52:09:53:8b:f2:15:b6:32:8a:88:af:d6:e9:cf:9e:4a:1f:7a:
         32:b5:20:64:88:71:80:3e:a1:cb:7a:6b:22:3f:ca:8d:2a:e9:
         08:4a:be:c0:b1:61:8c:2b:fc:48:66:ee:ca:45:a4:b2:f6:ef:
         f4:8f:21:18:c8:b8:6c:10:be:8e:90:7b:20:c1:00:84:6d:76:
         b3:c9:f1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:58:03 2026 by rpki-client