Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/34024d5e-410a-4fc4-aabb-138fcdc6b2be/3800e00c-81bf-342d-9b8f-8a698cc57d1f.roa
File:                     3800e00c-81bf-342d-9b8f-8a698cc57d1f.roa (raw, json)
Hash identifier:          hp/GnQFILnBiSx62rTHpmDroqAqhawJze1PbHsN2pTQ=
Subject key identifier:   44:C7:6E:B5:95:D1:DD:F1:18:1B:09:9F:E9:8A:2C:0C:2E:14:C8:DD
Certificate issuer:       /CN=34024d5e-410a-4fc4-aabb-138fcdc6b2be
Certificate serial:       010D0C9F4328584EB2B1B0C76178023770C36080
Authority key identifier: D0:A9:FA:7F:33:25:4D:72:CC:20:BD:8C:EA:67:04:E8:58:4D:5C:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/34024d5e-410a-4fc4-aabb-138fcdc6b2be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/34024d5e-410a-4fc4-aabb-138fcdc6b2be/3800e00c-81bf-342d-9b8f-8a698cc57d1f.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     396982
IP address blocks:        208.83.114.0/24 maxlen: 24
                          208.83.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/34024d5e-410a-4fc4-aabb-138fcdc6b2be/34024d5e-410a-4fc4-aabb-138fcdc6b2be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/34024d5e-410a-4fc4-aabb-138fcdc6b2be/34024d5e-410a-4fc4-aabb-138fcdc6b2be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/34024d5e-410a-4fc4-aabb-138fcdc6b2be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:b0:c7:61:78:02:37:70:c3:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34024d5e-410a-4fc4-aabb-138fcdc6b2be
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=abdaae26-0051-4e04-9b22-b16c7dfb5ecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e2:35:7a:6a:41:e0:de:13:3a:c7:d2:e3:68:
                    99:62:af:34:94:8a:79:f0:f7:bf:c5:90:89:c7:99:
                    d6:41:c8:11:e7:2e:b2:18:45:78:82:e3:a2:b3:26:
                    9b:38:62:83:06:a6:09:26:77:32:39:a4:1d:74:69:
                    9e:5b:de:9d:ee:51:29:a2:65:9f:f3:e9:b9:70:dd:
                    73:f7:75:f7:00:48:ca:b3:b7:e3:93:22:5a:81:02:
                    fe:54:de:7a:65:72:fa:95:95:08:b2:27:ef:f9:9e:
                    37:bc:cb:27:79:69:e1:f7:e8:e5:6d:f5:59:46:8a:
                    13:00:2f:40:c5:0e:7d:84:a6:f4:0c:fd:0e:6f:1e:
                    6b:0a:a1:3e:8e:8c:52:e0:73:47:09:a8:f3:9e:74:
                    e4:92:61:00:a1:69:c7:1d:6e:9a:0a:19:e2:88:9a:
                    c6:5b:ed:bc:d1:fd:41:10:b2:a5:d5:f2:5c:49:f1:
                    b5:fb:af:8d:88:73:7f:f1:a4:23:a3:14:7e:56:12:
                    84:c0:43:11:19:a7:34:13:7e:7f:9c:4a:d3:87:44:
                    51:3d:23:71:0f:00:72:e5:1c:03:b8:5b:4f:47:a9:
                    35:33:51:d1:b6:a2:d6:04:da:ff:5d:3c:cd:80:a1:
                    46:a4:4e:df:4b:f2:3e:5d:5e:a3:c9:eb:1f:85:9f:
                    bd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C7:6E:B5:95:D1:DD:F1:18:1B:09:9F:E9:8A:2C:0C:2E:14:C8:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/34024d5e-410a-4fc4-aabb-138fcdc6b2be/3800e00c-81bf-342d-9b8f-8a698cc57d1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/34024d5e-410a-4fc4-aabb-138fcdc6b2be/34024d5e-410a-4fc4-aabb-138fcdc6b2be.crl

            X509v3 Authority Key Identifier:
                keyid:D0:A9:FA:7F:33:25:4D:72:CC:20:BD:8C:EA:67:04:E8:58:4D:5C:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/34024d5e-410a-4fc4-aabb-138fcdc6b2be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.83.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:ab:0a:0e:63:83:46:69:10:97:69:0a:d9:13:d3:bf:97:57:
         7e:a1:ea:2a:03:8b:13:a4:6a:01:66:36:f4:35:1b:10:e2:73:
         fe:fc:74:95:81:5a:16:10:73:e3:68:cf:e9:f8:eb:eb:99:df:
         2c:1e:e3:c0:b9:ed:27:a3:c7:49:46:4c:a0:68:ad:9a:81:42:
         e0:5e:30:8d:35:54:07:0d:81:cd:0f:ec:95:7d:33:57:4a:cf:
         c9:06:fa:9e:29:1e:75:9c:c5:9a:72:dd:bc:02:9a:66:fd:92:
         48:e7:fc:42:89:58:6f:7e:17:7a:9b:da:6a:c7:67:32:7d:16:
         20:61:e7:e4:10:5a:ba:97:01:1f:0c:ec:0e:bc:ec:c0:4f:49:
         da:5e:e0:90:3b:83:ac:ea:d1:9f:ea:43:31:a5:ae:41:92:2d:
         21:53:a4:d7:09:78:61:ea:df:cb:a2:38:b8:17:42:37:13:82:
         07:ba:97:43:b5:01:fd:42:44:c6:3e:2d:8e:ba:a8:c3:df:65:
         15:ed:3c:d3:3b:ea:2f:1a:11:65:67:fc:c2:37:2b:91:7c:a7:
         f5:b4:2d:82:85:93:a5:0c:ad:90:5b:0b:39:83:81:d8:c6:5f:
         02:bc:3e:14:92:64:b4:64:2b:89:de:12:78:dc:ed:ed:1f:1f:
         e0:36:07:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:32:45 2026 by rpki-client