Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e/154a27e8-b12a-3eb3-bf1a-775a3b535727.roa
File:                     154a27e8-b12a-3eb3-bf1a-775a3b535727.roa (raw, json)
Hash identifier:          N/CyFrh4a5bm/NbYHEq0WMuch53/hGfHD7eJe+/Z8k0=
Subject key identifier:   EA:29:33:33:60:F2:C2:E1:07:D0:B4:01:9A:90:C3:D8:08:E1:F7:63
Certificate issuer:       /CN=7895ee85-2a16-4e54-9c5b-a9a05908877e
Certificate serial:       010D0C9F4328584F0D6CE34E591896211B210580
Authority key identifier: B3:A1:A3:AD:2A:8A:F8:D4:55:EF:1D:E7:A8:25:7E:11:79:B2:F5:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e/154a27e8-b12a-3eb3-bf1a-775a3b535727.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     53903
IP address blocks:        208.123.140.0/22 maxlen: 22
                          208.123.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e/7895ee85-2a16-4e54-9c5b-a9a05908877e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e/7895ee85-2a16-4e54-9c5b-a9a05908877e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:e3:4e:59:18:96:21:1b:21:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7895ee85-2a16-4e54-9c5b-a9a05908877e
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=d6529d3a-6bd0-436e-8724-55516001c275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e7:66:e1:3b:b8:0a:42:f4:77:be:45:c1:38:
                    8a:f5:08:66:a5:33:67:ce:16:20:57:87:6f:20:5e:
                    35:48:bc:8a:d0:cb:ca:e7:78:3f:13:7a:34:6f:63:
                    52:d9:28:52:1d:79:7f:86:1a:84:ba:18:56:d0:fc:
                    9d:f4:02:5a:cf:83:49:95:b2:91:d8:d7:7e:b2:9f:
                    dd:46:fe:34:11:50:2d:10:b2:b0:b3:7c:1e:71:3c:
                    43:65:ac:7e:a5:43:ad:6e:1b:96:03:3b:c6:0b:49:
                    80:32:4d:59:49:92:c8:d5:05:bf:2d:5f:f3:f8:3b:
                    4e:24:4f:34:77:31:67:ad:f4:5f:c7:f2:b2:99:aa:
                    9b:f4:8f:22:18:80:49:d4:f9:ff:6f:04:50:5c:22:
                    1b:51:94:36:d5:ef:68:8b:b3:0f:0e:6c:ba:3e:a8:
                    84:0f:b3:cf:e1:c6:dc:b2:0b:7c:d1:76:6e:97:87:
                    a2:dd:98:88:a9:a1:60:28:15:89:81:2a:1a:ef:17:
                    18:82:38:9d:12:4a:3a:e7:49:20:98:51:1c:68:1b:
                    86:23:83:d4:77:ad:8a:f6:51:93:7f:ec:2d:89:76:
                    aa:08:59:8c:6a:c2:87:32:6d:a1:f9:c8:64:8a:2d:
                    82:8c:7e:50:ee:a0:2e:f6:29:85:96:ae:a1:02:f2:
                    f0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:29:33:33:60:F2:C2:E1:07:D0:B4:01:9A:90:C3:D8:08:E1:F7:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e/154a27e8-b12a-3eb3-bf1a-775a3b535727.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e/7895ee85-2a16-4e54-9c5b-a9a05908877e.crl

            X509v3 Authority Key Identifier:
                keyid:B3:A1:A3:AD:2A:8A:F8:D4:55:EF:1D:E7:A8:25:7E:11:79:B2:F5:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7895ee85-2a16-4e54-9c5b-a9a05908877e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.123.140.0-208.123.147.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:c0:bc:c4:cc:e2:9a:06:e4:e1:16:d7:0e:78:1a:9e:ca:22:
         f7:dc:6a:7c:df:2c:9b:dc:35:c3:82:0c:41:9b:e2:48:d8:04:
         b3:ca:6e:b1:13:14:cf:dd:45:8d:c4:5c:26:87:de:0b:ea:66:
         97:a4:a3:de:75:11:62:2a:7d:fe:bb:b4:6e:7f:19:1c:fb:7e:
         21:eb:81:0e:da:d1:6e:9d:a7:80:2c:1d:42:f6:b6:97:76:74:
         e9:c9:7c:e6:70:d0:cc:ab:60:4b:9e:2c:16:9e:fe:da:82:36:
         fb:55:b9:21:db:09:06:ed:42:8f:b3:ff:98:6e:e8:4c:97:40:
         17:48:12:12:a6:19:c7:75:b2:38:be:19:61:b1:d9:5d:b6:d8:
         ca:f2:55:32:fe:b9:28:83:92:01:94:a4:07:87:63:fa:6b:cc:
         fd:0a:39:00:ec:80:a5:3b:90:f4:14:39:10:c9:56:43:e9:33:
         72:4e:7e:d3:b8:a2:4d:77:57:dc:40:52:52:ed:6a:7e:68:20:
         de:77:f0:c6:68:52:3a:b4:74:15:5d:60:98:bd:99:ef:b7:57:
         2d:c4:aa:5c:d1:33:1c:c1:e7:4d:d5:40:f8:92:ed:ce:38:c5:
         cb:4e:1b:a7:02:f3:1a:7a:24:a1:cb:58:7d:a6:79:8e:5c:46:
         4c:18:bc:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 10:15:46 2026 by rpki-client