Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b/342975f3-bb51-368c-96e3-51ffebef6d84.roa
File:                     342975f3-bb51-368c-96e3-51ffebef6d84.roa (raw, json)
Hash identifier:          LxfsHftMbWJiKYTCGOJy6tNmEeWEZPFxycAZ8nOMnfs=
Subject key identifier:   18:F5:56:AF:C2:C7:0A:23:65:42:89:9A:4D:73:88:8C:81:16:F7:83
Certificate issuer:       /CN=e85794f9-a8df-4d59-8974-f686e8987f1b
Certificate serial:       010D0C9F4328584EB2B1C4A784C53E377A614120
Authority key identifier: 42:2D:F4:AF:AF:93:BC:42:C6:1C:43:7B:9C:16:F8:E7:E3:C9:EB:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b/342975f3-bb51-368c-96e3-51ffebef6d84.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     376
IP address blocks:        205.237.8.0/21 maxlen: 21
                          205.237.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b/e85794f9-a8df-4d59-8974-f686e8987f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b/e85794f9-a8df-4d59-8974-f686e8987f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:c4:a7:84:c5:3e:37:7a:61:41:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e85794f9-a8df-4d59-8974-f686e8987f1b
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=c1b77aea-a432-4fdd-ac17-a25333075a53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:99:0f:89:ab:d6:78:bd:13:e1:6e:4e:57:dc:
                    f7:26:f1:0d:dd:84:c4:1e:9f:e6:d5:85:61:06:89:
                    c7:8e:80:7f:15:a1:6a:87:b9:bb:c6:79:6f:27:86:
                    c9:36:00:ae:32:af:66:68:12:e3:00:f7:0d:0c:9b:
                    f8:58:68:b6:d0:0a:1e:e2:88:f1:58:d5:3a:3e:38:
                    e8:1a:d9:9c:bf:4d:a2:a4:2e:70:f1:1c:b7:e0:d4:
                    b9:89:bf:d6:84:b6:c4:48:ca:5d:30:b1:72:1a:cb:
                    6e:36:af:10:af:7a:bc:1e:3b:bc:b2:57:e2:fe:c4:
                    e9:8b:b6:d9:12:9c:86:19:a4:da:51:d3:54:70:fc:
                    e3:c7:5d:24:9e:a0:df:a8:89:b7:16:9d:ed:2e:d7:
                    94:37:9f:fd:02:49:04:f8:a8:38:cd:d4:88:35:9f:
                    d2:78:86:4c:66:1e:fc:e7:ba:e2:db:c5:f9:6c:b4:
                    f1:61:bf:1d:43:90:82:ec:4c:04:1e:d9:ed:99:e3:
                    30:1d:d3:2d:75:4f:f7:a8:fb:ff:bd:cc:db:1b:6d:
                    df:51:e0:d0:a9:af:7a:c0:ae:34:73:c7:43:65:9b:
                    9d:2f:11:fb:ae:a4:bb:b7:94:ff:74:e3:30:77:01:
                    56:01:7c:15:61:3d:d3:eb:59:e1:3b:72:1c:6e:5f:
                    8f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F5:56:AF:C2:C7:0A:23:65:42:89:9A:4D:73:88:8C:81:16:F7:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b/342975f3-bb51-368c-96e3-51ffebef6d84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b/e85794f9-a8df-4d59-8974-f686e8987f1b.crl

            X509v3 Authority Key Identifier:
                keyid:42:2D:F4:AF:AF:93:BC:42:C6:1C:43:7B:9C:16:F8:E7:E3:C9:EB:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e85794f9-a8df-4d59-8974-f686e8987f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.237.8.0-205.237.19.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:d4:4f:6b:e5:83:5e:7d:11:73:6a:ec:a6:28:38:59:4f:50:
         b7:d5:76:37:bd:6f:38:ae:c7:a8:5f:3a:e7:f5:1e:34:df:6f:
         44:11:8d:d8:1c:13:74:20:23:a7:96:25:f7:3b:91:5b:aa:c9:
         fe:54:be:2a:54:c1:30:60:a0:66:62:dd:5b:1f:46:a9:24:c4:
         5c:46:e2:3a:17:40:60:4a:47:c5:4b:3f:ca:26:d9:9b:ac:87:
         0a:65:08:3d:98:6a:a0:7f:ac:7a:84:ee:c2:23:87:78:ff:e0:
         db:e4:aa:52:42:10:75:49:86:e9:6d:9e:a7:62:ef:63:ed:8f:
         2c:8c:be:ed:b7:66:8a:83:85:40:f9:d4:ee:57:aa:da:10:e0:
         b1:11:8e:ef:16:18:1a:dc:f0:58:e6:5a:ee:dd:59:76:52:99:
         4c:21:f7:f3:12:e9:b3:a6:9f:92:eb:84:42:66:09:89:80:0f:
         f5:4e:fd:04:63:ab:38:8e:b8:98:78:d8:b3:d3:49:62:43:7b:
         2d:4c:be:a1:f2:7f:28:60:75:18:1a:59:9d:a6:01:df:bf:49:
         33:20:58:06:ee:68:80:6f:a6:fd:a7:e7:29:4a:00:a5:78:37:
         f9:e9:2f:f8:d7:b3:6f:33:2a:3b:8a:3e:97:53:9b:e4:59:84:
         d3:b0:f7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 23:19:49 2026 by rpki-client