Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/8e846c92-75ff-395d-b0a9-40072e1b7c2c.roa
File:                     8e846c92-75ff-395d-b0a9-40072e1b7c2c.roa (raw, json)
Hash identifier:          L/SEUy8hpTqm229Nf+yKIPLlweNcnIMmIUgJkdJsgQo=
Subject key identifier:   B1:72:5E:54:4F:74:C4:89:88:B6:07:6A:D2:5C:5A:56:8C:88:7F:CF
Certificate issuer:       /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
Certificate serial:       010D0C9F4328584F6F22E6993389C8F9E6DCFB80
Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/8e846c92-75ff-395d-b0a9-40072e1b7c2c.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     6208
IP address blocks:        199.116.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 17 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:e6:99:33:89:c8:f9:e6:dc:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=4adab238-284b-414f-9ca8-5a9163d68bd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b7:e6:7b:a1:7e:55:92:fc:4b:08:5c:1a:a1:
                    93:3b:80:e5:df:ba:3b:00:4b:14:4c:d7:c9:d8:c4:
                    01:b4:49:57:6c:d8:ab:bd:9c:5a:c9:1a:e8:17:ca:
                    08:a2:95:54:10:7e:c9:e9:1b:03:d0:42:43:97:43:
                    43:ea:92:cf:e5:88:99:2b:41:b5:f6:cf:4c:98:e0:
                    91:34:2b:14:56:11:c7:3c:17:5b:a7:f7:9b:d1:3b:
                    d8:c8:5f:29:d7:f7:fc:af:cb:cf:0c:13:91:42:3c:
                    d1:69:a3:3c:db:61:2e:a3:50:78:53:f0:ba:7b:74:
                    53:45:e2:70:81:93:ab:11:77:a1:73:60:36:d6:9e:
                    36:87:4e:70:57:2d:de:52:b0:b3:cf:49:00:07:fb:
                    e7:c6:53:33:ea:ee:c5:8b:82:5f:00:70:8b:ac:d9:
                    39:34:57:e6:8b:0e:fd:33:82:70:d7:e0:0c:9a:75:
                    b5:e8:c9:29:0b:c7:f0:3f:a6:27:2d:d3:97:78:5b:
                    fa:0f:4e:9c:72:68:a4:b5:72:00:75:ea:7d:78:93:
                    9b:56:fd:51:3d:c3:88:b1:7a:d2:cb:6d:9d:db:69:
                    6b:15:96:92:be:83:09:db:04:d6:90:ac:fa:28:61:
                    b1:ea:5c:d5:3f:41:6a:9e:ed:03:ea:50:c1:59:04:
                    19:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:72:5E:54:4F:74:C4:89:88:B6:07:6A:D2:5C:5A:56:8C:88:7F:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/8e846c92-75ff-395d-b0a9-40072e1b7c2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl

            X509v3 Authority Key Identifier:
                keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.116.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:91:a2:d4:61:04:b3:9c:92:d7:ab:52:48:5f:67:86:92:08:
         b5:c4:dc:26:5e:04:c8:a0:bf:32:12:8a:ca:04:b8:b4:de:5c:
         f4:f7:d3:71:e4:71:83:11:8b:bc:08:11:64:a3:7a:12:23:5c:
         7a:d7:f7:44:9e:0b:68:b2:ef:41:d4:17:66:da:2c:28:91:22:
         cd:5c:33:26:00:3e:bc:fb:c9:bf:79:a5:23:44:11:ed:7b:8d:
         13:3c:66:e8:3a:d3:8a:87:ae:8c:85:d0:90:a9:7b:bf:dc:19:
         c8:8e:2c:ae:e6:02:6b:9f:11:be:aa:d0:f0:5a:5d:fd:b9:a1:
         82:8f:a1:5a:15:ed:92:9a:d3:da:d9:22:18:16:e0:bf:37:f8:
         7e:0b:46:77:72:80:28:f4:84:a8:d7:ef:ae:47:b4:ec:4f:da:
         87:94:93:45:37:63:3f:4e:5a:07:53:92:1f:75:61:10:56:84:
         4f:af:24:1d:54:96:b2:96:f9:39:fd:af:76:5b:b5:fa:94:f6:
         eb:05:00:bd:bf:d1:0c:c5:54:48:36:01:96:58:36:03:db:81:
         73:06:be:eb:31:f6:84:34:5f:16:a3:51:8b:fd:ae:f8:8a:db:
         55:2d:32:a2:ef:78:03:e2:ac:0e:8e:70:36:b4:6d:60:d3:ea:
         85:a3:3e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 23:27:13 2026 by rpki-client