Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f018d80c-6e70-3947-8c5e-e1ccd3d00f22.roa
File:                     f018d80c-6e70-3947-8c5e-e1ccd3d00f22.roa (raw, json)
Hash identifier:          GU4P5KPQdSR4D3Xeuo1Ps4pBIQi0iJ2cuw6u8ER9DHc=
Subject key identifier:   EB:2D:1F:43:D2:09:63:09:A3:CA:18:23:C1:B1:B8:F0:FB:FA:14:18
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584EA7A04905DCED3D4783490080
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f018d80c-6e70-3947-8c5e-e1ccd3d00f22.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36040
IP address blocks:        208.117.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:49:05:dc:ed:3d:47:83:49:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=96d5becc-5089-4d8b-b04e-2669143fa844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:70:f8:f1:bf:93:4e:19:2c:a4:40:f4:cb:76:
                    f1:48:7c:53:b8:b2:c6:3d:1e:fa:6a:5b:ca:82:86:
                    2f:8d:f5:17:f3:d6:6f:0f:12:da:a6:66:85:54:fc:
                    88:f8:68:b4:ee:49:80:4e:cd:d8:b8:f9:27:b9:81:
                    dd:a1:1b:40:e6:05:fe:00:58:f4:24:ec:38:ee:23:
                    9c:60:3f:e5:7c:dd:91:08:76:c6:5f:be:60:ec:3d:
                    55:c2:2a:9d:9f:a3:08:da:d6:34:e4:36:9e:4c:67:
                    1a:e8:6c:a3:80:fb:0b:9e:9d:fa:b6:c5:a8:f4:2d:
                    3a:66:43:ea:eb:3a:54:18:9c:54:d6:cd:3a:5f:bb:
                    65:26:bd:ab:d7:cb:0a:e3:dc:5c:f0:90:d4:55:91:
                    04:a1:80:86:bb:9b:9b:62:ee:80:66:f9:c7:1d:69:
                    80:75:87:66:58:c5:03:3e:0b:74:67:07:c7:f8:4f:
                    1b:08:c0:37:1b:e1:f7:14:42:3a:b2:00:4b:f8:0d:
                    87:3a:cd:f1:00:7a:c4:96:c3:07:50:81:ad:42:ae:
                    60:ec:52:16:a6:af:99:da:83:c2:bb:25:bc:28:39:
                    2d:7f:e4:75:20:48:3e:25:6c:93:c8:eb:d9:a6:d2:
                    9d:c0:fe:80:47:8d:95:9e:c1:99:7c:18:ee:bf:e3:
                    bc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:2D:1F:43:D2:09:63:09:A3:CA:18:23:C1:B1:B8:F0:FB:FA:14:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f018d80c-6e70-3947-8c5e-e1ccd3d00f22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:50:13:8c:bf:e5:ec:4e:3c:1e:67:8f:8e:96:76:cc:49:6e:
         36:86:59:9d:df:10:03:21:90:fc:95:0a:ac:3a:e6:61:85:f4:
         f1:27:54:a6:4e:75:29:e5:ce:5b:29:52:dc:7b:01:fe:10:a9:
         14:b2:33:1e:8c:0a:d1:05:18:77:d4:b0:96:07:bb:68:12:d6:
         a9:f5:55:07:a7:28:38:40:8c:39:dc:da:de:48:22:ec:65:4b:
         8d:0e:4f:f9:55:25:3a:a5:d5:ce:f5:c3:50:14:00:3b:2a:01:
         a9:34:74:e5:29:7f:82:4f:9e:93:da:c2:d7:ce:6e:68:4e:47:
         b9:6b:be:ff:dd:93:1b:54:70:8f:24:56:ab:a8:6d:78:6e:13:
         27:a7:17:45:07:de:b3:7a:2a:f9:7e:2d:83:65:d1:fa:11:43:
         b7:f8:b2:47:57:4e:f7:5f:fe:27:f1:0e:20:35:9a:16:5f:6e:
         29:66:ce:62:77:2d:ab:e6:43:e4:83:2b:49:de:73:8b:c6:6c:
         88:48:00:48:35:fa:00:cc:87:dd:1a:3d:ff:17:4b:16:ac:71:
         8a:21:b9:db:3a:67:9d:cd:d0:05:3f:14:21:34:6a:07:80:28:
         cd:43:44:a7:b8:80:ac:c6:56:06:dc:d5:64:8d:67:21:48:a6:
         e6:77:54:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:15:56 2026 by rpki-client