Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/e9986e4b-d548-3e8b-995f-ae623e5d04b2.roa
File:                     e9986e4b-d548-3e8b-995f-ae623e5d04b2.roa (raw, json)
Hash identifier:          V7liZjLhyuqj0acYMQApfF694MyB2D9XKN0jUAksjPg=
Subject key identifier:   2A:EC:0B:9A:AA:04:BA:56:D2:32:E3:0A:59:C5:ED:9A:84:76:3A:4E
Certificate issuer:       /CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
Certificate serial:       010D0C9F4328584EDDF742F691A9A60C46F86BC0
Authority key identifier: 85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/e9986e4b-d548-3e8b-995f-ae623e5d04b2.roa
Signing time:             Mon 17 Aug 2026 13:00:11 +0000
ROA not before:           Mon 17 Aug 2026 13:00:11 +0000
ROA not after:            Sun 15 Nov 2026 14:00:11 +0000
asID:                     26383
IP address blocks:        207.90.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dd:f7:42:f6:91:a9:a6:0c:46:f8:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
        Validity
            Not Before: Aug 17 13:00:11 2026 GMT
            Not After : Nov 15 14:00:11 2026 GMT
        Subject: CN=5418155c-32c5-4e44-89d2-5a6a511a5a15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:73:b2:24:5f:b0:d8:d4:8f:aa:4e:89:c2:ba:
                    f9:49:6f:02:8a:87:80:6b:39:e1:ab:1e:a6:05:fa:
                    ac:cb:6d:5b:af:26:72:f2:59:f9:db:68:79:1f:8e:
                    b6:f7:ad:66:f0:d8:68:16:3b:73:7a:c2:07:09:80:
                    e7:3a:84:eb:78:a4:bc:ee:94:69:2e:78:41:8b:45:
                    15:98:ae:a7:59:b2:36:e8:da:51:28:6b:a0:b3:00:
                    57:9d:82:30:d5:df:e2:75:60:bd:e8:29:a4:22:ed:
                    39:41:e1:33:ca:de:b1:2e:2c:02:c2:eb:9a:81:96:
                    95:86:f8:5c:5b:c5:3f:4f:c1:f8:16:cb:6b:4c:2e:
                    c0:40:9e:75:47:f6:11:03:ed:f2:04:38:78:ef:ef:
                    9e:4d:94:88:1b:70:0b:ab:ad:18:81:73:ff:8c:b6:
                    2d:0f:f1:f0:ed:b6:84:30:cc:76:eb:22:1c:ca:7a:
                    5c:a1:ab:de:1c:99:c0:17:af:1a:f1:11:bd:3b:90:
                    58:8c:4b:ec:d4:24:6a:c5:4b:1f:b4:06:a3:da:dc:
                    88:cf:fd:53:b4:ef:d7:eb:59:9b:a7:26:41:b9:0f:
                    21:99:b5:9d:c1:7d:7e:d2:96:90:c1:1a:e1:4d:5d:
                    1a:b4:19:a1:24:b8:38:cb:19:f4:fa:1e:65:1d:b2:
                    7a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:EC:0B:9A:AA:04:BA:56:D2:32:E3:0A:59:C5:ED:9A:84:76:3A:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/e9986e4b-d548-3e8b-995f-ae623e5d04b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl

            X509v3 Authority Key Identifier:
                keyid:85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.90.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:d6:4f:a0:c1:ca:ae:1f:6e:d4:d5:19:04:28:f4:72:45:3b:
         bd:10:d7:be:cc:c6:20:eb:bd:b3:1c:6d:31:9f:17:8e:eb:2a:
         31:b3:99:67:b5:7e:a4:8e:74:63:97:f4:95:72:cc:dd:9f:cf:
         85:71:51:10:c3:90:12:2d:f9:1a:04:ea:5d:dc:48:c0:2c:9b:
         55:38:23:1e:81:ce:91:b3:39:e3:55:8d:1f:c1:e4:c9:16:f9:
         4e:1d:43:a9:17:0f:52:f0:07:e5:4e:8f:58:2b:22:8f:6d:b0:
         7b:db:72:73:75:8e:ee:c2:e2:7c:85:c3:d6:10:9b:4f:e5:3c:
         c5:e7:ca:48:bb:6e:e3:ae:64:e3:c2:f3:1f:2b:5a:55:f9:9b:
         d8:0e:82:19:23:3c:56:b8:c3:ba:24:15:ba:01:95:e3:49:82:
         fd:e2:c5:9b:b6:ec:21:6b:39:4f:8b:55:18:e6:e4:3c:07:21:
         ed:11:1d:c5:4f:57:8f:a9:a3:37:f5:0c:53:b1:93:81:a8:d9:
         9d:46:7c:c9:cf:7e:71:df:4e:9a:db:4c:60:a4:77:55:6a:68:
         b1:f9:57:3a:cb:5c:49:ba:90:37:a3:82:60:ae:ad:dc:0a:e0:
         c1:d5:69:ff:91:5f:77:e0:e0:6a:d9:23:2a:eb:8d:26:af:84:
         52:30:58:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 00:04:40 2026 by rpki-client