Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9eccbc7e-a4e8-4673-ba6f-4c67350003be/cbaee1de-fee4-3554-8a4a-c0e2838fd7fa.roa
File:                     cbaee1de-fee4-3554-8a4a-c0e2838fd7fa.roa (raw, json)
Hash identifier:          1cT8QFS8wvc73m81lYnAcBu7baUk8Xe1r+1GHKjQBPA=
Subject key identifier:   87:5E:CF:9B:18:BD:D5:1B:10:BD:EA:DB:7E:22:B4:E1:5B:1C:3E:C1
Certificate issuer:       /CN=9eccbc7e-a4e8-4673-ba6f-4c67350003be
Certificate serial:       010D0C9F4328584BBE40427D45A9195CC2236200
Authority key identifier: 0B:5D:70:E8:DD:9A:D5:D3:32:6B:18:4C:E3:E6:B2:42:FB:15:49:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9eccbc7e-a4e8-4673-ba6f-4c67350003be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9eccbc7e-a4e8-4673-ba6f-4c67350003be/cbaee1de-fee4-3554-8a4a-c0e2838fd7fa.roa
Signing time:             Tue 04 Nov 2025 02:00:31 +0000
ROA not before:           Tue 04 Nov 2025 02:00:31 +0000
ROA not after:            Mon 02 Feb 2026 02:00:31 +0000
asID:                     26824
IP address blocks:        208.79.182.0/23 maxlen: 23
                          2602:fc8c::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9eccbc7e-a4e8-4673-ba6f-4c67350003be/9eccbc7e-a4e8-4673-ba6f-4c67350003be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9eccbc7e-a4e8-4673-ba6f-4c67350003be/9eccbc7e-a4e8-4673-ba6f-4c67350003be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9eccbc7e-a4e8-4673-ba6f-4c67350003be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:be:40:42:7d:45:a9:19:5c:c2:23:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eccbc7e-a4e8-4673-ba6f-4c67350003be
        Validity
            Not Before: Nov  4 02:00:31 2025 GMT
            Not After : Feb  2 02:00:31 2026 GMT
        Subject: CN=98b9b8dc-1d75-4f1f-9165-6c61abdba953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:43:fe:29:5d:8c:da:3f:8a:e1:f5:e3:1f:19:
                    c8:18:b9:90:b3:4c:e0:9a:bf:94:66:83:3a:e7:e8:
                    0f:26:f9:4a:cd:59:b7:01:a4:38:cf:55:b6:65:2f:
                    df:d6:6b:26:f1:18:b2:b8:9e:6e:72:59:85:49:6f:
                    17:4b:13:c6:6e:f6:6f:9d:3f:cc:a7:ad:37:fa:97:
                    f4:df:49:3a:06:c8:75:06:ea:3c:83:3d:32:a7:82:
                    95:b8:17:7d:16:54:85:cd:a4:d6:70:63:f0:16:1c:
                    34:8b:dc:9a:ed:87:07:d8:79:98:13:76:6a:a8:dc:
                    b6:7d:87:e4:3a:f3:f1:f2:42:5d:4b:8a:ec:55:8b:
                    86:ae:48:76:30:64:ec:c5:83:18:ce:a1:f8:a7:af:
                    0e:8b:ac:ba:8c:82:1b:a6:1c:a6:6c:e0:81:f0:87:
                    dd:40:43:02:d0:3f:34:6a:69:d7:65:4a:4a:e5:72:
                    fe:38:95:f0:6f:96:5c:29:a2:d4:62:d2:60:cf:a1:
                    95:68:89:df:7d:51:e2:3c:e8:16:6b:67:98:d8:16:
                    e3:9d:3f:68:1f:39:ef:4e:cd:a1:fc:b3:23:93:db:
                    be:3f:d5:3d:d4:f2:a5:79:08:d2:c7:46:11:bd:6a:
                    62:e0:5b:34:a3:80:8d:ff:ae:98:19:04:94:fd:c6:
                    97:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:5E:CF:9B:18:BD:D5:1B:10:BD:EA:DB:7E:22:B4:E1:5B:1C:3E:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9eccbc7e-a4e8-4673-ba6f-4c67350003be/cbaee1de-fee4-3554-8a4a-c0e2838fd7fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9eccbc7e-a4e8-4673-ba6f-4c67350003be/9eccbc7e-a4e8-4673-ba6f-4c67350003be.crl

            X509v3 Authority Key Identifier:
                keyid:0B:5D:70:E8:DD:9A:D5:D3:32:6B:18:4C:E3:E6:B2:42:FB:15:49:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9eccbc7e-a4e8-4673-ba6f-4c67350003be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.79.182.0/23
                IPv6:
                  2602:fc8c::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:c7:a8:14:d0:d7:ec:4a:f1:97:0c:43:ec:ae:38:d6:95:72:
         a7:9f:c4:71:8a:5d:4a:29:cb:01:3f:fb:1b:b4:0d:fb:62:4a:
         8c:6b:97:6b:78:fa:cd:1f:43:fd:40:25:3b:0c:b2:00:c0:af:
         64:93:97:17:31:5f:0a:bf:5d:89:86:ac:8f:09:6d:b5:e6:06:
         3e:bd:ea:16:d0:fe:e5:ec:c0:79:14:2c:70:1d:70:22:d3:73:
         4e:59:7f:88:78:ff:a4:04:e2:4c:cd:6f:94:c6:f7:a9:b7:7b:
         69:f4:37:97:80:bc:8e:af:22:db:c0:18:f0:ef:d4:0b:05:21:
         19:b2:3b:52:d8:2b:f9:c4:19:43:fd:fc:86:87:3d:25:a2:29:
         e5:c0:96:ee:51:7c:03:2a:6e:72:9e:46:04:83:e0:71:ac:ea:
         89:89:82:ef:22:2a:64:8c:0f:26:d5:f8:ee:99:48:12:89:6a:
         de:a6:53:1f:d5:84:73:5c:5e:50:16:19:d3:25:13:0e:00:e8:
         e6:93:c8:47:7e:09:7e:c1:81:5d:bd:d2:1a:7b:e0:b9:7f:e1:
         6c:d9:44:05:ae:6e:87:59:e5:e7:f9:b0:85:5c:3b:71:51:1c:
         f9:3a:73:0e:df:b2:0c:e6:73:fd:82:5e:89:9e:d5:06:61:aa:
         9d:97:77:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:31:42 2025 by rpki-client