Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b/342975f3-bb51-368c-96e3-51ffebef6d84.roa
File:                     342975f3-bb51-368c-96e3-51ffebef6d84.roa (raw, json)
Hash identifier:          7qrGpAJF/pq2f6zVVJUNuPGNuoZijyjv4alJXtXfhHo=
Subject key identifier:   9D:0B:D1:31:03:6A:82:BD:CF:6F:01:75:16:9D:48:C4:86:D6:31:94
Certificate issuer:       /CN=e85794f9-a8df-4d59-8974-f686e8987f1b
Certificate serial:       010D0C9F4328584F549D717A175C9D409AB7D3C0
Authority key identifier: 42:2D:F4:AF:AF:93:BC:42:C6:1C:43:7B:9C:16:F8:E7:E3:C9:EB:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b/342975f3-bb51-368c-96e3-51ffebef6d84.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     376
IP address blocks:        205.237.8.0/21 maxlen: 21
                          205.237.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b/e85794f9-a8df-4d59-8974-f686e8987f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b/e85794f9-a8df-4d59-8974-f686e8987f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:71:7a:17:5c:9d:40:9a:b7:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e85794f9-a8df-4d59-8974-f686e8987f1b
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=674b6acc-31e5-490f-9930-712245f5c298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ea:ee:2f:9b:ed:0b:1d:9e:e7:25:47:7c:49:
                    b8:10:56:53:ad:5e:2b:0a:4c:fd:16:12:f0:a2:79:
                    dd:c8:8e:44:d9:fd:3d:c0:2c:06:18:95:d2:94:50:
                    df:3f:fb:7e:f4:72:d0:f5:16:5e:2e:24:dd:21:67:
                    8f:b0:35:ba:44:fe:65:9f:59:5d:0f:c5:79:9c:0c:
                    d4:2f:a6:e1:9d:c9:3b:53:55:14:e3:8a:10:d7:ac:
                    2b:cc:d4:51:35:25:73:2b:b1:90:6d:1d:a9:4b:ec:
                    57:7b:8d:3a:68:d3:a9:a0:5e:78:cf:84:52:bd:1a:
                    71:d1:91:fa:cd:9e:ea:7d:d3:49:aa:1f:ea:ec:fb:
                    35:94:59:a1:ad:af:08:c4:3a:07:0b:20:0a:57:91:
                    fd:f5:58:b1:7c:ba:62:29:d5:f0:2e:58:3a:88:a6:
                    97:90:c2:91:b0:3e:28:23:5c:18:b4:46:60:10:5c:
                    33:91:9f:64:54:0f:a7:b6:88:d8:13:c1:ca:0e:f9:
                    18:99:68:15:53:00:c8:03:f6:0a:fc:3f:57:95:e4:
                    21:94:06:a5:1a:e9:8c:6e:a8:0f:89:70:a8:41:f8:
                    91:96:cd:20:cd:3f:36:fe:4a:f3:eb:04:3c:72:28:
                    2b:03:d6:42:ee:41:67:d8:11:33:f0:cf:12:fe:4f:
                    ff:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:0B:D1:31:03:6A:82:BD:CF:6F:01:75:16:9D:48:C4:86:D6:31:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b/342975f3-bb51-368c-96e3-51ffebef6d84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b/e85794f9-a8df-4d59-8974-f686e8987f1b.crl

            X509v3 Authority Key Identifier:
                keyid:42:2D:F4:AF:AF:93:BC:42:C6:1C:43:7B:9C:16:F8:E7:E3:C9:EB:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.237.8.0-205.237.19.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:96:29:75:9f:32:b6:b1:73:02:5e:bb:7a:3a:08:f4:a2:f5:
         43:ba:ec:15:8e:c0:47:36:a1:3e:f4:7b:c6:fd:af:83:69:b6:
         91:4c:e2:ff:d3:01:0f:b1:28:b8:62:68:8f:64:be:bc:a2:b0:
         0a:f4:d4:36:15:10:d7:a1:bb:37:66:fb:de:55:3a:66:28:0f:
         aa:21:cd:66:22:bc:23:a6:f4:ac:49:c0:92:f5:b4:32:ec:78:
         86:b2:91:df:d8:38:40:cc:02:68:e0:8d:1c:d7:9e:9e:c2:a8:
         5e:7d:3c:da:a6:95:32:40:88:49:ba:ae:5b:ea:7e:34:35:9a:
         ad:d4:0d:5d:41:d2:49:d8:ba:e7:46:17:df:ba:7f:1f:91:8d:
         82:5c:a0:c2:8c:79:91:1b:1b:26:48:39:d1:41:50:f2:84:80:
         1a:2b:5b:04:a0:31:e5:86:73:00:cc:79:eb:6a:53:c5:2d:63:
         bf:c4:c2:ff:a7:47:9e:0e:61:20:fb:70:81:81:8f:34:1a:0d:
         86:c7:70:40:b4:d9:0d:8e:61:8c:c9:5f:24:db:75:b5:c6:53:
         a7:a7:b2:55:46:22:a4:1f:78:9a:aa:a5:5e:96:b9:63:07:36:
         e9:cd:15:91:de:36:0c:28:f8:f7:fc:74:9b:4d:52:55:90:21:
         16:e0:ca:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:30:35 2026 by rpki-client