Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/abfd22fc-71d6-3554-8616-e76f2c05b55a.roa
File:                     abfd22fc-71d6-3554-8616-e76f2c05b55a.roa (raw, json)
Hash identifier:          zyRgXm+xg4rO+/J+9KL6j8vEYjcj9uTCA686DgyH04w=
Subject key identifier:   B1:6E:DA:F8:73:52:36:7E:9B:96:97:2B:2F:00:DC:3A:A3:A6:BA:1D
Certificate issuer:       /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial:       010D0C9F4328584EBC7716E81915C159D41FBD40
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/abfd22fc-71d6-3554-8616-e76f2c05b55a.roa
Signing time:             Wed 05 Aug 2026 13:00:12 +0000
ROA not before:           Wed 05 Aug 2026 13:00:12 +0000
ROA not after:            Tue 03 Nov 2026 14:00:12 +0000
asID:                     203724
IP address blocks:        208.65.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:77:16:e8:19:15:c1:59:d4:1f:bd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
        Validity
            Not Before: Aug  5 13:00:12 2026 GMT
            Not After : Nov  3 14:00:12 2026 GMT
        Subject: CN=fa74a7e5-25c7-4c7e-b91a-24f51925dfdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4c:4a:fe:69:8b:fe:c1:2e:d2:a8:7f:74:17:
                    61:c0:fb:8d:a3:f1:26:65:c7:13:c1:c5:5f:d5:6f:
                    0c:8f:93:1a:23:45:02:99:af:14:94:56:72:b9:35:
                    cf:0b:c1:aa:91:2f:76:3c:97:8b:8f:2f:75:f0:b2:
                    f9:ae:6f:a7:e1:c3:e5:07:61:7e:6d:89:c1:42:17:
                    d5:f4:da:c7:74:7d:04:0c:28:8f:2d:d5:b6:31:06:
                    14:6a:9c:e3:40:d8:46:24:61:08:fd:06:04:5e:1c:
                    a9:42:cc:71:b9:0c:ee:1d:0d:60:df:40:51:fa:6d:
                    79:38:89:36:c6:be:5b:10:21:17:2f:4b:eb:0c:c9:
                    6e:5c:fa:2b:71:13:d3:f6:99:19:c0:0d:9e:87:73:
                    db:c3:99:6f:84:97:97:6c:0d:3e:56:e7:46:28:89:
                    ee:c6:cb:a0:7a:8e:15:87:b0:a3:5d:06:56:c1:d7:
                    27:a3:45:b6:7e:ca:9e:0a:47:f3:b3:bf:9a:07:7b:
                    86:b4:8b:a0:15:ba:3c:b1:51:9e:fc:59:f7:0a:cd:
                    fa:a0:23:8a:a1:76:80:61:5d:db:2f:cd:f6:51:9f:
                    98:14:6c:1e:0f:7b:68:f4:04:42:80:48:6b:af:d9:
                    52:ae:c5:1c:4e:c1:b4:92:c7:bd:26:06:20:f4:80:
                    ea:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:6E:DA:F8:73:52:36:7E:9B:96:97:2B:2F:00:DC:3A:A3:A6:BA:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/abfd22fc-71d6-3554-8616-e76f2c05b55a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl

            X509v3 Authority Key Identifier:
                keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.65.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:77:21:88:30:53:98:9e:0f:7b:c6:26:b6:f3:b7:ee:3b:4a:
         d0:70:a9:9a:d2:21:3f:06:af:78:1c:dd:81:5c:dd:c2:22:f3:
         30:e6:9e:bf:28:76:9d:c5:d4:f4:94:c5:07:03:a5:ce:83:d5:
         60:04:5c:e9:80:de:01:74:9b:ad:2d:92:15:bd:ce:b2:08:b5:
         45:cb:5f:c2:b4:c5:28:e4:e0:71:ac:4d:45:54:ea:2d:bb:e8:
         bd:8d:1a:66:8b:b9:3f:fe:de:0c:0f:fd:35:34:0e:a0:97:d4:
         80:91:8c:58:a8:be:1c:37:a2:27:74:f9:ee:9b:65:3b:be:cc:
         a6:b8:56:1a:01:87:ae:e5:6a:f7:f1:ed:98:11:90:63:8f:48:
         21:67:4d:74:b0:ff:b6:c0:fc:2f:83:c6:46:e4:56:e5:e2:60:
         33:29:20:59:0f:60:22:a1:2a:d6:58:65:9d:92:c7:d8:46:c5:
         ea:6a:aa:a0:85:d8:50:c3:16:54:86:2b:37:b4:54:b1:a7:da:
         fc:22:97:6c:16:19:40:44:5c:fa:51:29:06:0a:0e:4b:cb:a2:
         6e:37:93:b3:ae:22:18:9f:cb:f1:90:7e:1e:85:97:95:e9:25:
         91:f1:81:2e:b9:3b:2a:70:7a:03:92:8e:a5:3a:fa:35:7c:6c:
         43:db:9c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:15:29 2026 by rpki-client