Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/077ce07e-8054-4238-8973-985bbc131111/8d8817ce-50c0-30c6-b725-fe9483f45663.roa
File:                     8d8817ce-50c0-30c6-b725-fe9483f45663.roa (raw, json)
Hash identifier:          omhgjJgilKZMGJEQAgxmdKHDv1j6wEfOclfalbfJmkY=
Subject key identifier:   A8:F7:4F:63:34:01:2E:09:24:0C:CF:95:56:86:D1:4C:B6:42:96:A3
Certificate issuer:       /CN=077ce07e-8054-4238-8973-985bbc131111
Certificate serial:       010D0C9F4328584F83A986D2E8455AA5F9084780
Authority key identifier: EA:4C:87:73:61:37:28:C8:E9:D2:EB:9C:BA:60:10:FB:03:DF:3A:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/077ce07e-8054-4238-8973-985bbc131111.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/077ce07e-8054-4238-8973-985bbc131111/8d8817ce-50c0-30c6-b725-fe9483f45663.roa
Signing time:             Thu 15 Oct 2026 21:27:55 +0000
ROA not before:           Thu 15 Oct 2026 21:27:55 +0000
ROA not after:            Wed 13 Jan 2027 22:20:47 +0000
asID:                     395244
IP address blocks:        208.84.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/077ce07e-8054-4238-8973-985bbc131111/077ce07e-8054-4238-8973-985bbc131111.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/077ce07e-8054-4238-8973-985bbc131111/077ce07e-8054-4238-8973-985bbc131111.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/077ce07e-8054-4238-8973-985bbc131111.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:83:a9:86:d2:e8:45:5a:a5:f9:08:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=077ce07e-8054-4238-8973-985bbc131111
        Validity
            Not Before: Oct 15 21:27:55 2026 GMT
            Not After : Jan 13 22:20:47 2027 GMT
        Subject: CN=b786c558-4b4c-49a5-ba9a-255568eb960a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:63:b5:53:63:cd:58:e5:8e:f5:a0:84:24:82:
                    2b:de:f1:53:eb:b1:83:b4:bf:97:80:a4:51:8e:6d:
                    5c:85:4e:05:cf:fd:41:8d:0c:a4:9e:ed:3d:61:f0:
                    c5:49:4e:75:6f:6b:c5:de:96:89:5a:f8:b7:f4:8b:
                    48:8b:b6:aa:79:0a:3a:d5:75:b1:4c:0b:35:83:73:
                    8d:6c:aa:72:38:02:a7:d4:fe:fa:0f:da:56:4f:49:
                    5b:1f:0b:e1:b1:48:22:b1:be:8f:6a:86:60:5b:07:
                    50:8a:01:a3:b0:cf:6a:5b:e5:32:c8:85:1c:d5:55:
                    1e:d3:8c:28:1e:5c:09:e8:eb:bc:59:c2:5d:45:ac:
                    12:3a:86:d1:e2:36:64:89:72:ea:98:87:28:5b:42:
                    23:77:5f:ac:45:ee:c8:15:7e:b9:c7:67:e8:fe:91:
                    b1:dc:d8:14:6e:88:2e:e2:16:c4:b2:26:72:5c:5e:
                    10:6c:d4:21:3f:06:51:37:9f:d2:63:0f:18:95:c3:
                    53:ab:e7:f5:6f:b4:43:07:49:a9:de:bf:42:a4:59:
                    9a:c9:b8:cf:b6:3a:54:c2:2c:5a:8d:53:70:4e:c6:
                    00:58:29:9f:96:a4:31:88:70:e2:8b:85:ef:18:b8:
                    7f:fa:3b:6d:25:50:7b:f2:36:62:1b:89:70:e3:ba:
                    b7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F7:4F:63:34:01:2E:09:24:0C:CF:95:56:86:D1:4C:B6:42:96:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/077ce07e-8054-4238-8973-985bbc131111/8d8817ce-50c0-30c6-b725-fe9483f45663.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/077ce07e-8054-4238-8973-985bbc131111/077ce07e-8054-4238-8973-985bbc131111.crl

            X509v3 Authority Key Identifier:
                keyid:EA:4C:87:73:61:37:28:C8:E9:D2:EB:9C:BA:60:10:FB:03:DF:3A:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/077ce07e-8054-4238-8973-985bbc131111.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.84.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:bf:bb:51:d6:e2:4a:c5:f3:30:3e:a6:9c:60:19:29:f7:4e:
         b4:ca:10:1f:2a:01:21:0c:ca:a2:63:95:c4:8c:0a:63:c3:b3:
         01:d4:e4:30:6a:cc:88:8e:f2:dc:11:ec:b3:72:d0:91:83:ac:
         3d:7b:36:6a:ce:75:cb:87:40:b5:c4:8b:81:55:96:a0:c4:8d:
         75:67:6f:06:8d:7b:1c:23:6b:95:f0:7f:4a:9f:38:24:f0:42:
         e8:0c:d2:af:42:c5:c8:06:c7:4f:0b:44:39:48:03:02:62:28:
         11:01:6f:d1:8c:da:3b:4d:fc:3f:74:53:25:a5:93:28:0e:3c:
         4f:5b:9c:ca:e3:65:f0:00:bf:7a:e4:80:f5:5e:d1:1c:82:e3:
         0e:06:69:44:94:aa:65:27:84:b0:86:5e:a2:c9:44:ab:2f:5f:
         39:37:e4:b8:0e:9f:21:e5:dc:63:29:af:ce:5c:33:b6:3d:94:
         8d:21:ea:94:cc:be:1d:14:3d:a5:bc:03:51:01:62:69:cd:29:
         fe:02:b7:f0:ac:a2:2f:e1:09:36:07:09:4c:00:20:e4:12:2a:
         9f:ae:a8:b3:21:ca:f6:41:88:d3:8a:ee:98:52:3c:3b:6c:be:
         ab:e5:db:59:0f:3d:9c:93:04:64:76:e7:05:fb:f5:a8:bc:2d:
         d1:6e:40:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 17:54:44 2026 by rpki-client