Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626/a4f11c39-9bea-3f49-a34f-41186754ac5f.roa
File:                     a4f11c39-9bea-3f49-a34f-41186754ac5f.roa (raw, json)
Hash identifier:          auHAfn/aqC6liozxla681c+OYE9oE9TMIUSQ/b1EP0Q=
Subject key identifier:   80:2D:7F:19:5B:4F:8B:E6:92:CB:A7:24:9C:A0:86:A0:62:E8:FB:6E
Certificate issuer:       /CN=4e08a47f-8ddd-473c-bb7b-011963e78626
Certificate serial:       010D0C9F4328584F02421E26AFE493EBA70B8D00
Authority key identifier: 5B:2B:92:1F:0A:91:18:93:54:79:F2:F8:EE:6A:AC:CC:EB:E6:F6:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626/a4f11c39-9bea-3f49-a34f-41186754ac5f.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     16509
IP address blocks:        207.66.104.0/24 maxlen: 24
                          207.66.105.0/24 maxlen: 24
                          207.66.106.0/24 maxlen: 24
                          207.66.107.0/24 maxlen: 24
                          207.66.108.0/24 maxlen: 24
                          207.66.109.0/24 maxlen: 24
                          207.66.110.0/24 maxlen: 24
                          207.66.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626/4e08a47f-8ddd-473c-bb7b-011963e78626.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626/4e08a47f-8ddd-473c-bb7b-011963e78626.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:1e:26:af:e4:93:eb:a7:0b:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e08a47f-8ddd-473c-bb7b-011963e78626
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=d40707e5-14bf-4115-b4cd-61956256ee73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:20:8a:9c:72:6d:47:94:0a:17:87:cb:2f:6a:
                    82:5c:c3:9a:01:8d:3e:e3:c0:f8:d5:29:28:f8:b2:
                    42:41:73:87:78:92:c2:f8:c8:9a:99:2e:af:d2:93:
                    07:73:8a:52:7e:79:f5:a3:c1:cb:d4:34:d7:ad:d5:
                    95:b0:e2:8e:21:8b:47:00:db:d4:3e:40:9f:3c:c7:
                    6e:ca:17:ae:a5:22:d8:1f:d6:15:6a:c5:74:61:cc:
                    64:8f:91:f0:89:32:a4:ed:ea:01:8f:22:07:48:2e:
                    49:a8:97:c8:3c:4c:ae:bc:a0:15:82:f8:dc:20:46:
                    a8:10:5d:48:36:1b:99:b5:10:75:e3:92:92:97:78:
                    34:ae:38:1d:82:f2:ec:fe:63:ce:e7:fd:97:a9:05:
                    f6:73:37:49:1c:98:4e:1a:a0:93:5e:d6:43:cb:74:
                    d7:f9:69:4e:2b:d9:c2:d3:5a:8e:bc:04:1e:f5:58:
                    6c:fb:6e:9f:2a:ec:5a:c2:30:41:7a:49:7c:23:97:
                    56:ce:5c:b8:a9:63:b4:3b:64:37:c9:37:66:c6:4c:
                    07:16:6d:c9:fe:46:88:73:d6:2b:00:b6:20:39:ea:
                    97:58:b2:10:6f:d6:f6:c8:6f:b7:07:c0:9d:b6:b1:
                    a3:e5:24:8c:4c:15:6d:71:e2:62:2f:04:b2:5b:b0:
                    54:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:2D:7F:19:5B:4F:8B:E6:92:CB:A7:24:9C:A0:86:A0:62:E8:FB:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626/a4f11c39-9bea-3f49-a34f-41186754ac5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626/4e08a47f-8ddd-473c-bb7b-011963e78626.crl

            X509v3 Authority Key Identifier:
                keyid:5B:2B:92:1F:0A:91:18:93:54:79:F2:F8:EE:6A:AC:CC:EB:E6:F6:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.66.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:ad:06:b9:78:88:d6:e7:db:49:ce:09:70:71:ca:26:62:4f:
         34:ca:b6:56:0f:d3:19:6f:d0:ec:2d:31:99:9a:31:07:9c:48:
         d8:6c:d1:eb:d2:65:37:08:b0:f8:3b:09:38:1c:87:b7:d4:a6:
         e1:9b:e5:4b:be:cc:6f:28:54:7c:2d:29:12:dd:d4:dc:8e:d9:
         e2:c7:4d:9d:74:02:78:04:a4:8f:37:19:10:bd:84:1b:e4:c7:
         d2:2a:c7:f8:44:c9:b2:7c:55:ef:57:07:4b:d5:39:a4:da:71:
         3c:58:af:e4:1a:d7:c2:f9:b2:45:b8:18:5d:c4:ed:81:2f:9b:
         d1:7b:73:5a:d3:a7:d9:ac:cf:30:0c:dd:5d:2f:26:a8:70:27:
         c6:d1:b6:8e:e1:38:b4:a2:ad:9e:ea:3f:df:a3:b7:b3:16:71:
         57:56:83:7b:6d:45:87:12:1a:fd:3e:25:30:00:f0:60:a6:e1:
         bd:32:bb:4e:c9:f7:34:b9:c7:a1:7f:0c:4d:d3:f7:ca:b0:e0:
         49:52:09:9b:d9:98:25:57:d7:d2:52:24:9d:a3:61:2f:c9:c4:
         e2:f2:73:74:c3:26:35:ed:ff:cb:c6:22:eb:5e:e6:fe:64:d6:
         9e:3b:9a:74:94:cb:d2:87:39:cb:e3:c7:a4:61:6a:d5:88:82:
         ee:0a:b0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:14:40 2026 by rpki-client