Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/f0e6bc09-7531-3685-a6e0-97cf596a7a96.roa
File:                     f0e6bc09-7531-3685-a6e0-97cf596a7a96.roa (raw, json)
Hash identifier:          cbVOEC68OBUC2VrgnzYiHTyVHTHVBeOu8uxHq9tQZZ8=
Subject key identifier:   D4:3A:B9:02:80:C8:BC:07:E8:CD:79:58:3B:D6:D1:F8:FB:73:94:19
Certificate issuer:       /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
Certificate serial:       010D0C9F4328584EE227491E87B618258E847540
Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/f0e6bc09-7531-3685-a6e0-97cf596a7a96.roa
Signing time:             Wed 19 Aug 2026 01:00:12 +0000
ROA not before:           Wed 19 Aug 2026 01:00:12 +0000
ROA not after:            Tue 17 Nov 2026 02:00:12 +0000
asID:                     8075
IP address blocks:        170.176.140.0/24 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e2:27:49:1e:87:b6:18:25:8e:84:75:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
        Validity
            Not Before: Aug 19 01:00:12 2026 GMT
            Not After : Nov 17 02:00:12 2026 GMT
        Subject: CN=8cd7feda-fb37-41d7-8324-5c6c1a502fe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bc:f0:98:ad:ec:25:be:81:ca:be:12:8c:e8:
                    5a:d0:c1:08:06:9c:5a:6a:92:8a:59:f7:37:be:fe:
                    85:79:76:6a:c1:87:b2:29:6b:16:9e:48:b7:8f:73:
                    0b:6e:e7:a8:07:0a:7a:e9:2e:61:0f:f5:71:52:14:
                    ab:28:85:1a:22:b1:6f:aa:7f:ff:81:31:f9:77:6d:
                    dc:cf:f9:cc:12:86:41:5f:20:c9:09:cb:4f:de:63:
                    73:b4:f0:ee:f2:e6:1a:ab:f1:a3:45:74:03:98:89:
                    57:e3:90:47:03:df:3b:63:ff:ae:1c:54:74:2a:f0:
                    41:d1:1e:42:94:5d:f8:e7:75:c7:5f:d6:aa:c4:26:
                    36:a8:3c:0d:d8:18:ca:fb:1e:af:79:e1:de:83:0e:
                    6d:e8:fb:d6:98:55:d8:df:3b:53:9e:b0:ac:5d:8d:
                    8d:cc:18:ce:a1:e1:b0:51:60:e7:d3:32:9b:0a:60:
                    59:fd:02:ae:8a:f7:7d:34:1e:6a:ca:d3:cf:7b:ca:
                    d8:07:c7:56:7d:c4:b6:5f:eb:4e:57:74:f7:75:67:
                    d9:4e:02:0e:ac:42:8e:ff:59:40:e9:e7:ae:e2:02:
                    fd:03:31:79:e8:f4:cb:a3:5c:7c:a9:fe:a3:c8:a2:
                    40:8d:2e:e1:2d:ed:b3:4c:d5:ea:4a:3f:65:7d:66:
                    65:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:3A:B9:02:80:C8:BC:07:E8:CD:79:58:3B:D6:D1:F8:FB:73:94:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/f0e6bc09-7531-3685-a6e0-97cf596a7a96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl

            X509v3 Authority Key Identifier:
                keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.176.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:4a:4e:cd:d2:a8:0e:bd:81:ba:5f:82:f8:6d:0f:2a:3a:11:
         e0:b6:12:6a:5c:84:80:d2:7a:2d:46:38:45:a5:44:f9:56:93:
         4b:af:d0:7c:20:e1:90:d5:9f:e1:29:d9:3d:f4:d5:0c:39:ee:
         40:ae:33:3c:4c:d1:9f:01:c5:52:09:20:8b:af:34:5b:21:3c:
         6c:1a:18:14:97:e4:a7:b1:ec:9f:99:66:c2:73:18:52:66:8f:
         85:84:0f:e1:b2:6e:ca:f6:ab:fe:21:1a:32:cd:3a:dc:da:04:
         45:7c:57:23:93:87:64:77:a2:35:c7:9e:bc:ec:ba:f4:78:c5:
         2e:74:a9:c3:fe:3d:9d:e3:d5:f0:7e:9f:ce:9d:8f:42:f1:94:
         49:90:02:dd:8f:9a:14:35:0d:81:1a:86:3d:5d:09:25:0e:22:
         a7:a5:2c:cc:48:28:d1:b1:a6:63:b5:72:e9:31:42:ab:73:4a:
         3e:69:b0:fe:c5:4d:66:82:41:66:89:9d:6f:cd:4e:80:ac:4a:
         b1:b7:be:0e:29:ed:e8:f2:b1:ad:2b:cf:f6:f8:4f:1c:de:e1:
         fa:70:9a:37:5d:27:82:21:10:11:cd:50:27:b4:dd:2c:fa:c9:
         83:b3:ad:6c:a7:1d:27:c9:3f:4f:89:30:de:31:1c:17:0b:09:
         6a:e0:9b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:56:46 2026 by rpki-client