Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/0b303bc2-150d-317d-a5b8-89981f88cbe7.roa
File:                     0b303bc2-150d-317d-a5b8-89981f88cbe7.roa (raw, json)
Hash identifier:          7BD2XkDxfDbsJjP2CBSfJny8mreAoAYMP8d8+slNGm0=
Subject key identifier:   E6:FD:53:6D:28:FD:DD:CE:B6:C4:A2:AB:3C:5C:3C:7A:81:18:6A:56
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584F7782F22D0110351B23F9E500
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/0b303bc2-150d-317d-a5b8-89981f88cbe7.roa
Signing time:             Sun 11 Oct 2026 13:00:12 +0000
ROA not before:           Sun 11 Oct 2026 13:00:12 +0000
ROA not after:            Sat 09 Jan 2027 14:00:12 +0000
asID:                     6461
IP address blocks:        8.44.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:77:82:f2:2d:01:10:35:1b:23:f9:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Oct 11 13:00:12 2026 GMT
            Not After : Jan  9 14:00:12 2027 GMT
        Subject: CN=408ef796-cb4a-4be8-8617-642ee2b7d032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:dc:e8:08:05:3a:62:95:18:00:06:fc:c5:f9:
                    d0:ca:36:41:20:09:fc:5e:dd:95:8d:1c:63:28:27:
                    6a:82:bc:e9:86:b3:85:83:07:e6:3d:66:4e:29:8c:
                    03:20:49:8f:04:d4:af:d6:f7:5d:3c:d6:99:21:eb:
                    98:a0:b9:30:a4:b7:20:bf:32:b4:9f:da:44:96:77:
                    f9:ef:cb:cf:95:12:87:10:ce:3c:65:07:17:77:9e:
                    8f:17:5c:b6:d2:10:82:24:a8:51:37:a9:5e:6f:0d:
                    ec:7c:78:b2:a0:02:78:79:98:3c:96:69:79:96:53:
                    33:c8:f9:1f:9c:58:4a:32:19:61:ec:4e:b1:17:5e:
                    2a:53:d1:7a:01:10:03:83:b0:2a:72:fa:04:e1:5a:
                    56:9e:66:9b:74:d3:2a:1d:ff:b0:c3:6c:83:b3:13:
                    bb:b6:c3:7f:78:d8:3f:54:ca:8d:e0:50:db:4b:9b:
                    8a:46:1c:2f:53:e4:1c:f3:b7:07:fe:a6:ee:0a:94:
                    b5:5e:3e:69:a6:26:10:6a:fd:af:75:48:6d:39:21:
                    17:ee:45:d8:ef:71:6e:ba:d8:15:19:1c:62:26:d7:
                    86:e4:7e:18:14:99:55:4d:52:99:c3:95:48:6b:6e:
                    4a:9d:5e:2c:d3:32:e2:06:d3:af:2f:ad:3b:71:21:
                    f4:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:FD:53:6D:28:FD:DD:CE:B6:C4:A2:AB:3C:5C:3C:7A:81:18:6A:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/0b303bc2-150d-317d-a5b8-89981f88cbe7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.44.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:fa:87:db:93:8c:31:51:2c:ea:b5:a8:3b:c9:b0:00:90:62:
         99:bc:2e:cc:37:e8:fe:ea:bb:14:1d:d8:33:63:36:33:ab:26:
         d4:6d:5b:53:36:7a:93:e4:8b:bb:df:e0:6a:27:b3:ff:0d:06:
         79:60:1c:c6:2c:64:6c:a0:c8:71:13:68:8f:22:42:1e:13:a9:
         54:9c:06:89:e3:e3:09:4f:d9:4a:54:70:b1:6a:82:4a:5a:78:
         d5:c8:65:74:40:b7:7b:6b:bb:3a:01:47:e1:ef:09:d6:fe:60:
         e9:f1:22:76:e7:ae:07:0f:76:d2:c0:26:cd:2d:93:01:82:4b:
         2c:1c:1f:1b:85:4c:96:b0:c5:ac:1d:f7:1f:80:0f:b1:77:03:
         e0:a5:7b:83:d3:f6:9c:27:01:d3:30:e5:1f:97:de:7c:85:13:
         db:0f:4d:5b:80:f5:f1:73:61:81:44:df:61:4c:57:a6:06:05:
         12:ad:bb:74:9a:43:bd:d4:ee:57:a2:78:91:6c:6c:44:bd:2c:
         33:0a:57:77:93:5d:6e:8e:e9:c2:73:85:dd:d4:b3:3c:ce:0e:
         05:e0:20:fd:dc:2f:36:c3:ac:7f:e8:69:54:c0:6d:8b:38:0b:
         85:cc:27:3e:9f:06:38:aa:e9:3c:54:46:78:80:92:1a:37:88:
         0f:c3:76:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 00:02:02 2026 by rpki-client