Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/8f83a025-4c20-3f17-8d78-fe614226ddcb.roa
File:                     8f83a025-4c20-3f17-8d78-fe614226ddcb.roa (raw, json)
Hash identifier:          WpanQWjK1FeteNhJCh9DIyKbUaTri2CRuQ5zYMSyois=
Subject key identifier:   40:76:48:75:C2:4F:F1:7E:EA:6F:9A:2D:49:B4:3D:8F:F2:54:24:E7
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584F2EED156056A339A23AD99A40
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/8f83a025-4c20-3f17-8d78-fe614226ddcb.roa
Signing time:             Tue 15 Sep 2026 13:00:12 +0000
ROA not before:           Tue 15 Sep 2026 13:00:12 +0000
ROA not after:            Mon 14 Dec 2026 14:00:12 +0000
asID:                     394285
IP address blocks:        68.68.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2e:ed:15:60:56:a3:39:a2:3a:d9:9a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Sep 15 13:00:12 2026 GMT
            Not After : Dec 14 14:00:12 2026 GMT
        Subject: CN=508d8daa-2724-472d-bb31-02de4b3210db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:69:ac:2c:d7:24:56:fe:4b:a9:83:28:e2:2d:
                    96:f7:22:df:7d:f7:52:35:da:bb:f5:88:71:2f:6e:
                    f2:e9:e4:35:1d:c9:0c:99:dd:54:f3:6e:a9:44:35:
                    da:bc:fd:d6:e1:33:3d:2b:a3:f4:2f:db:6c:2f:12:
                    dc:9c:b4:37:81:6d:df:2c:c8:07:65:94:86:54:5d:
                    4f:c8:c6:55:51:79:be:43:12:3d:96:f3:7c:e2:44:
                    f8:6e:88:d0:a2:a0:7a:7d:69:60:2a:99:44:0f:58:
                    ff:6e:6d:6d:b9:80:a2:48:03:fb:e7:b8:dd:92:42:
                    b7:91:84:4b:d9:b0:9f:5c:0a:89:98:27:ec:bd:d4:
                    f8:f6:86:a7:f4:42:32:43:7a:20:47:d7:45:a4:6c:
                    e8:ad:85:34:6e:c3:8a:8d:a9:ec:ab:4a:d6:c8:4d:
                    90:83:9b:ce:4a:9d:53:86:e3:82:e0:4a:28:cd:a0:
                    a6:76:37:5e:13:ec:36:63:ba:58:9c:d2:d8:90:21:
                    30:81:ef:0f:eb:fd:13:34:05:21:78:4e:57:a5:85:
                    8c:bd:f0:08:ab:09:4c:17:db:97:bd:a2:b7:46:a1:
                    ec:84:31:41:04:b2:58:de:1d:e5:16:11:2b:2d:72:
                    9c:6d:6e:84:77:a2:87:d0:ed:3e:cc:26:e3:6d:97:
                    4c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:76:48:75:C2:4F:F1:7E:EA:6F:9A:2D:49:B4:3D:8F:F2:54:24:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/8f83a025-4c20-3f17-8d78-fe614226ddcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.68.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:50:f2:1d:78:44:ff:3f:51:57:0e:62:c3:bd:8b:3b:cc:5e:
         15:57:e5:f0:24:18:03:23:cb:f5:a9:1f:c7:71:29:13:5b:de:
         43:b4:c1:c9:db:f7:75:43:7f:06:71:88:6b:f1:af:4e:05:cb:
         88:a6:cf:40:c1:83:4b:5e:31:41:9b:3b:fb:60:b7:77:15:1f:
         d2:9a:96:9f:92:58:a1:4b:bc:e1:7a:41:dc:62:23:09:19:c7:
         27:db:67:ed:b6:70:02:8d:e5:50:75:5b:c6:e9:07:34:fd:1f:
         13:39:d9:e9:71:de:0d:4f:35:2f:1f:82:ce:09:4a:ef:d1:2b:
         40:e5:15:12:94:6f:2c:27:e3:d2:53:bd:6f:14:78:f1:75:87:
         d4:9f:a4:93:0a:c1:71:83:bd:8f:f3:e8:fd:e8:ca:91:2c:e9:
         bf:14:4d:0e:49:78:e0:7b:17:59:7d:2f:ad:4f:b8:18:a7:83:
         1c:c5:13:84:8a:49:e6:d7:25:3c:4e:71:72:1b:32:69:9b:ce:
         c4:df:24:f9:bb:dd:23:b1:fd:8a:ee:f6:7b:ae:ec:8c:c9:1d:
         2c:23:7d:cc:46:9f:65:69:c1:a7:1d:1d:33:2a:a2:ad:e7:ee:
         b9:4d:ff:13:ec:15:5a:79:9b:c3:ff:ee:1b:04:21:07:98:ce:
         27:7c:9b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:43:18 2026 by rpki-client