Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/e1ceee22-63ce-3622-aac6-84da03183c53.roa
File:                     e1ceee22-63ce-3622-aac6-84da03183c53.roa (raw, json)
Hash identifier:          AjMN5WJwlt11VlhmxIiW7K94agNbrPl2Ultag5HXrvM=
Subject key identifier:   AE:AE:34:8E:6A:00:AB:71:8A:90:F6:92:41:56:53:7B:71:C5:01:DA
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F655D61AED51C4F8F5C111CF0
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/e1ceee22-63ce-3622-aac6-84da03183c53.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     395954
IP address blocks:        173.208.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:61:ae:d5:1c:4f:8f:5c:11:1c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=4b9f9843-6e4e-4a4d-89db-4281684af38d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:24:24:45:75:fb:05:0b:ea:ea:52:0f:12:89:
                    1d:35:68:52:07:aa:c3:51:7a:49:d4:52:9c:86:4f:
                    ee:68:6d:9e:c7:bf:71:fc:11:fc:44:36:6c:2f:cf:
                    54:ff:0d:0e:ba:47:fd:45:23:90:4c:87:6b:8a:23:
                    1c:8e:23:47:f8:86:ee:54:89:2e:29:31:49:97:25:
                    4f:08:2d:77:24:e8:12:4b:a3:6f:6d:3b:f6:9c:9c:
                    f6:dd:a8:0d:9a:72:42:b9:7a:e5:f2:05:eb:fc:82:
                    9e:3b:cf:8e:7a:ff:cf:70:6a:a7:f0:f9:ad:e8:56:
                    49:3e:5d:fd:df:87:bf:9c:86:85:ba:a4:92:ec:ce:
                    67:b8:93:83:37:e4:8d:28:bb:b6:cc:e5:6d:09:94:
                    79:1e:85:29:29:c3:ce:f0:de:c9:bb:a2:8b:a1:45:
                    d2:d4:9b:a4:c2:a1:d6:cd:3d:ae:56:63:09:02:96:
                    b8:7f:3d:39:06:5c:a8:89:90:90:3b:e9:fc:33:f9:
                    04:89:d3:99:5f:5d:26:c0:69:fe:c4:f8:2e:37:9c:
                    35:d5:41:e6:e6:a1:6b:ed:7d:96:7c:b0:ec:77:0a:
                    ea:ed:95:6a:ac:6d:89:01:43:d4:0f:6a:67:d0:7e:
                    04:77:20:6c:5a:a8:79:fd:95:90:ae:c5:3d:65:5a:
                    0a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:AE:34:8E:6A:00:AB:71:8A:90:F6:92:41:56:53:7B:71:C5:01:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/e1ceee22-63ce-3622-aac6-84da03183c53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.208.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:5e:c7:01:9d:1a:00:d9:3b:ad:92:74:6d:1f:97:87:e0:31:
         ad:3f:1b:d9:96:4d:ae:c9:87:ab:88:5d:97:17:21:4c:aa:6a:
         90:c4:11:96:e3:a0:ef:ba:2a:ca:51:aa:b0:d7:7f:49:65:ae:
         7b:95:57:5a:79:df:6f:c3:8d:84:8d:f9:98:ad:dd:34:fe:75:
         32:d7:08:8f:d4:f9:a6:88:a6:3c:dd:fb:6c:e5:f6:5c:ea:e1:
         3a:93:8f:d4:75:1b:15:d8:9e:09:f5:a7:9d:0d:06:5f:89:e1:
         ac:35:a8:e0:47:06:b7:25:dc:d9:ec:b1:84:a8:83:20:1b:1d:
         45:51:bd:87:c6:61:56:c2:45:f4:20:57:3c:bb:21:0e:92:a3:
         4c:7e:1d:bc:42:76:b0:6b:7e:4c:e4:df:e0:7e:9c:a1:ee:65:
         2d:be:be:ef:a7:ba:99:63:db:e3:3d:5c:e7:81:ea:71:de:f4:
         33:ea:a3:14:ae:5d:f2:bb:06:f6:05:07:89:c2:41:9b:d7:20:
         d4:19:8f:48:2e:6e:86:7b:03:9d:e3:07:52:1f:37:bd:3d:90:
         29:c2:26:66:c3:03:30:45:c8:ed:6f:da:d5:a8:cc:86:65:ec:
         53:0d:88:e7:04:e6:0e:ee:02:28:bc:6c:70:3d:f6:09:f6:57:
         20:6f:7b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 23:01:34 2026 by rpki-client