Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7c5fa773-36da-4c6b-beda-8a3af57b1266/8e463dc6-f020-3cac-9895-cab1f187fa59.roa
File:                     8e463dc6-f020-3cac-9895-cab1f187fa59.roa (raw, json)
Hash identifier:          Kio+WxSK1DOxmsAheSdQkj6VzuGpXqVuC9Z7xAHiBho=
Subject key identifier:   25:C8:AF:CD:44:CB:B1:78:DF:D8:71:39:E9:6F:48:8B:B9:C7:21:F8
Certificate issuer:       /CN=7c5fa773-36da-4c6b-beda-8a3af57b1266
Certificate serial:       010D0C9F4328584F4F080C17AF7E31C14F9AE380
Authority key identifier: F7:0A:05:1D:51:2D:90:D8:C4:7D:1C:EC:FE:8D:5E:36:95:98:7B:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7c5fa773-36da-4c6b-beda-8a3af57b1266.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7c5fa773-36da-4c6b-beda-8a3af57b1266/8e463dc6-f020-3cac-9895-cab1f187fa59.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     20469
IP address blocks:        216.25.208.0/20 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7c5fa773-36da-4c6b-beda-8a3af57b1266/7c5fa773-36da-4c6b-beda-8a3af57b1266.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7c5fa773-36da-4c6b-beda-8a3af57b1266/7c5fa773-36da-4c6b-beda-8a3af57b1266.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7c5fa773-36da-4c6b-beda-8a3af57b1266.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:0c:17:af:7e:31:c1:4f:9a:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c5fa773-36da-4c6b-beda-8a3af57b1266
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=188faee1-61ea-40c4-a85e-594701887806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:de:53:31:ef:b1:87:eb:3e:24:d1:ee:26:7f:
                    95:b0:e2:1e:66:e6:14:14:77:a6:ff:f8:0f:a3:37:
                    03:a4:11:c6:5e:2f:2d:b2:4f:63:de:7c:29:59:29:
                    3e:5e:ff:68:d1:af:c0:1a:1d:25:62:53:fc:02:ae:
                    d1:4a:f7:f1:6a:ff:bf:90:ca:cb:3a:93:7f:e3:9d:
                    d2:37:2b:07:59:a4:76:29:26:bf:0e:0c:ea:e5:13:
                    99:a5:cf:e1:9d:bd:d6:37:87:98:45:5c:f3:7f:bd:
                    f7:0d:65:a4:f1:ad:3b:4b:04:83:15:89:d1:b3:82:
                    18:f3:c9:d7:40:69:ff:ef:6a:ea:5e:e1:35:dd:4f:
                    15:50:f3:21:bc:55:21:1c:82:08:0b:d8:cb:ea:e8:
                    58:3c:63:b5:22:f0:80:d7:6f:33:6c:8f:2c:0e:c1:
                    6c:9a:d9:07:45:fc:a3:b8:5a:4f:d4:c4:b0:81:ef:
                    ae:4d:9b:f2:92:9c:aa:79:92:7f:88:20:4c:62:ac:
                    f1:fd:60:f8:e9:25:31:8d:97:d6:a1:be:eb:43:7f:
                    7a:69:7a:dd:3d:ea:b0:be:11:23:29:1f:57:f9:e2:
                    bf:81:32:be:8e:3d:2a:57:88:c2:90:29:9a:2a:00:
                    47:62:88:11:32:98:4b:a5:c1:76:a4:ad:7b:f4:6d:
                    89:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C8:AF:CD:44:CB:B1:78:DF:D8:71:39:E9:6F:48:8B:B9:C7:21:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7c5fa773-36da-4c6b-beda-8a3af57b1266/8e463dc6-f020-3cac-9895-cab1f187fa59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7c5fa773-36da-4c6b-beda-8a3af57b1266/7c5fa773-36da-4c6b-beda-8a3af57b1266.crl

            X509v3 Authority Key Identifier:
                keyid:F7:0A:05:1D:51:2D:90:D8:C4:7D:1C:EC:FE:8D:5E:36:95:98:7B:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7c5fa773-36da-4c6b-beda-8a3af57b1266.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.25.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:82:67:ac:30:e6:1f:30:d6:e1:5f:8a:e7:17:61:10:56:f1:
         b7:5a:4e:15:6e:ae:f9:00:a1:ba:03:97:34:61:d4:0f:5a:d5:
         37:bc:de:db:26:14:7e:bd:65:57:e7:a2:24:5c:39:04:38:de:
         41:46:e4:32:11:07:03:c4:ce:0c:dd:36:b7:81:6a:52:6c:9b:
         92:7d:4a:b9:61:58:f7:da:1d:10:bb:19:c6:35:23:93:8d:52:
         6d:db:cc:d4:d3:82:70:ed:0d:ea:ac:df:ce:a8:23:bb:e0:5a:
         a2:f8:33:60:7f:38:2d:36:73:36:33:9e:e0:67:e2:66:ae:b9:
         10:4c:ed:61:78:b2:a1:d7:d0:ef:41:7b:ee:25:e0:9f:18:b0:
         c2:29:6a:d9:54:5b:a1:c8:99:fb:a4:d3:1d:b5:3a:e7:2f:aa:
         fb:fe:88:4a:d5:d7:35:24:4d:f8:b6:df:bf:28:6d:a3:a4:15:
         12:4d:6e:3c:eb:3f:83:68:ce:28:91:8a:f8:c7:a9:40:77:02:
         06:b8:18:dd:0f:2f:04:52:64:8e:c4:2a:65:d5:fb:b0:37:5f:
         9b:51:f4:eb:69:fd:10:16:99:a4:14:83:28:f7:b6:3e:a9:b8:
         e0:9a:39:aa:19:ee:4b:30:77:c9:d6:7a:b1:e0:15:57:87:7b:
         9e:a5:8c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:50:12 2026 by rpki-client