Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/889b07c6-b4bd-3cec-be94-4ffd7873c163.roa
File:                     889b07c6-b4bd-3cec-be94-4ffd7873c163.roa (raw, json)
Hash identifier:          X0qWHAP+xwp+5dFvv3LxcZnY1zUQnrWxlMbwjfXwCEM=
Subject key identifier:   54:82:8C:EB:39:45:D7:D3:76:DC:06:ED:59:B4:20:6C:24:CE:56:14
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584F4973F657D4F502FF455BD480
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/889b07c6-b4bd-3cec-be94-4ffd7873c163.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     21723
IP address blocks:        208.181.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:f6:57:d4:f5:02:ff:45:5b:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=174c8087-a456-496d-a0f7-e08181885d1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c2:f8:ae:d5:87:a6:32:a2:f6:7c:e1:a8:c0:
                    a0:34:19:5f:c0:9a:31:c6:57:c4:fa:23:4b:f6:a9:
                    73:16:09:cb:18:a1:91:7e:e1:c2:49:36:40:82:b8:
                    d0:f2:b1:e7:94:5b:54:3c:3d:12:39:3e:33:27:65:
                    bd:87:3f:e8:84:77:c5:f0:b8:ba:97:9b:e0:f9:c9:
                    29:ef:92:94:d8:32:8d:18:b5:d6:44:75:4b:52:0f:
                    7c:3c:28:18:fc:e7:d7:a0:dc:09:1c:f0:e5:49:b0:
                    47:7b:bc:55:ab:d8:33:bd:69:af:25:50:a6:9d:22:
                    52:b0:f8:88:91:c6:92:85:8e:10:78:1e:98:91:9d:
                    fb:e8:0f:25:17:22:99:9c:23:a0:b2:ad:52:2c:cd:
                    f1:68:60:89:dd:dc:fd:76:7d:90:7e:45:46:a2:57:
                    94:14:94:9a:8e:aa:b4:aa:bd:d0:32:66:75:1b:40:
                    8a:f7:47:9b:89:63:17:dd:42:72:35:77:2e:46:ff:
                    f4:4d:70:53:59:3c:79:8f:44:36:4c:16:a0:f7:ec:
                    4d:ad:8c:c3:3d:54:07:ac:47:e2:c9:c1:7f:b6:f1:
                    53:4a:db:a4:ac:e5:c3:66:e0:30:bd:dd:f9:55:b0:
                    05:1a:fe:f4:41:3b:ed:b3:c8:d0:36:b4:44:92:4f:
                    37:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:82:8C:EB:39:45:D7:D3:76:DC:06:ED:59:B4:20:6C:24:CE:56:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/889b07c6-b4bd-3cec-be94-4ffd7873c163.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.181.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:2d:60:5c:61:f2:05:2c:67:c3:bf:12:96:54:e9:2d:1c:fb:
         d1:bd:5d:98:5c:15:8d:af:90:c8:18:3d:bd:7e:4b:6e:42:03:
         df:d8:3d:a3:06:87:49:c8:74:8a:66:d1:48:17:20:a4:5f:5f:
         3a:3e:4a:a7:d2:d6:2b:0d:11:cb:4d:04:20:6d:99:d2:4f:9a:
         24:3e:b4:8f:34:97:a3:40:d3:58:ab:9e:d4:1e:f1:ff:22:d4:
         dd:94:21:d9:74:c6:49:2d:32:a0:c5:69:fe:3f:5e:49:1b:51:
         94:11:67:b2:87:7f:25:75:f6:07:86:40:8d:35:af:0d:f6:8c:
         58:a1:c9:42:62:61:2f:8f:f1:3d:af:b2:7f:ee:50:e2:72:9a:
         38:13:a0:b5:60:a1:e7:64:0e:67:b5:73:f1:3f:bf:52:9b:9e:
         7c:3a:7c:d2:f2:32:bb:f9:52:1a:05:9d:34:b5:39:4d:85:05:
         60:48:df:a3:6f:38:08:c5:e9:37:c3:22:4a:70:7e:1d:39:54:
         ee:77:4a:53:34:a4:d2:d5:e1:f3:40:c9:ac:a7:5a:75:4b:d6:
         52:e6:ac:42:a5:68:88:ca:06:8b:34:b2:e2:41:45:5e:71:f2:
         9a:86:17:36:17:01:2a:11:6b:99:db:37:ab:98:75:57:29:59:
         ed:25:b7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:15:01 2026 by rpki-client