Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/537586fc-e04f-3774-8708-edf711f3e7bf.roa
File:                     537586fc-e04f-3774-8708-edf711f3e7bf.roa (raw, json)
Hash identifier:          oMuOU/RDTDWeyfAaddrpqAlocLjZ5wk+j3xM0QDUsxk=
Subject key identifier:   7E:99:EA:9F:0D:4B:29:F2:32:D6:7C:1F:63:37:4A:BC:79:02:AF:64
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F4328584F0ED24485CCBB310BC1D3BC80
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/537586fc-e04f-3774-8708-edf711f3e7bf.roa
Signing time:             Fri 04 Sep 2026 01:00:12 +0000
ROA not before:           Fri 04 Sep 2026 01:00:12 +0000
ROA not after:            Thu 03 Dec 2026 02:00:12 +0000
asID:                     402236
IP address blocks:        208.123.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0e:d2:44:85:cc:bb:31:0b:c1:d3:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Sep  4 01:00:12 2026 GMT
            Not After : Dec  3 02:00:12 2026 GMT
        Subject: CN=b366f2b2-24fe-4c7a-91a0-7c046a4c8eed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d4:68:57:ae:0c:ea:82:53:e1:8d:dc:76:9e:
                    a0:e4:12:34:c3:e1:b6:ab:d9:a8:76:b0:f7:cf:77:
                    bf:06:4b:e9:c3:66:eb:e5:5c:20:a8:9e:bb:97:b7:
                    11:d4:e0:c7:28:9e:5f:4c:35:0f:af:98:24:55:c8:
                    c3:1e:5c:8c:d5:b7:27:d6:69:95:bb:40:ab:73:fd:
                    3e:87:47:05:35:a6:b6:19:f0:68:3d:2a:93:3b:d7:
                    2a:77:2b:6e:13:32:bf:e9:2a:91:c8:a0:6b:7e:4a:
                    50:1c:5e:d0:18:6a:ba:7e:19:d2:69:58:b8:8f:73:
                    46:38:b4:e7:9e:c6:c8:e6:c7:82:3f:19:02:a8:46:
                    42:53:53:1e:2e:da:f2:bb:95:d2:56:76:2d:c9:d1:
                    4e:51:3a:45:f6:31:43:96:a6:30:24:3b:66:81:88:
                    7f:0c:7b:43:39:1c:a0:c2:04:00:52:06:f6:c3:9d:
                    28:7c:32:0b:31:41:0c:27:af:a0:c3:ab:61:bd:4d:
                    74:5f:f7:51:4a:ac:46:8b:24:fd:dd:31:34:c5:14:
                    1d:48:7e:03:6c:8a:05:82:70:d7:c6:d4:9e:d9:2b:
                    49:e4:b7:d8:ba:21:ef:d0:fa:9f:4e:10:8d:da:83:
                    6c:78:ab:b6:47:af:3c:a0:43:86:96:b9:16:08:6b:
                    5a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:99:EA:9F:0D:4B:29:F2:32:D6:7C:1F:63:37:4A:BC:79:02:AF:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/537586fc-e04f-3774-8708-edf711f3e7bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.123.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:8a:89:e9:c7:a6:93:c4:96:3f:91:3c:c9:c5:54:a3:5b:2b:
         04:32:fa:39:0b:5b:fd:83:cf:c3:8f:df:9c:55:f1:c1:33:b4:
         39:f9:e0:e0:91:2b:56:78:44:16:3a:16:89:36:2f:bd:98:90:
         83:8b:c9:b8:d7:fd:c1:cb:b6:d5:41:95:8d:53:1d:55:e9:86:
         ee:d1:99:bf:b3:34:2a:e6:76:ac:08:0c:19:3b:c3:88:58:18:
         f4:34:10:8d:16:28:af:bd:71:f6:78:8a:f2:98:b6:f6:3f:b6:
         3c:37:1b:8d:f4:16:7a:8f:3a:95:77:e1:dc:55:a4:52:06:18:
         eb:a4:72:b9:b2:32:1c:8d:61:31:6f:c7:81:9f:4c:53:69:50:
         2a:4f:10:df:ad:9d:e1:df:db:eb:11:a7:2c:66:9d:7f:3f:09:
         69:74:27:44:9b:c9:9d:d8:23:4e:63:3d:4f:0d:42:16:3a:87:
         11:20:80:9e:f4:a9:55:fe:2e:17:74:c7:ea:ce:40:82:6d:9b:
         c5:a0:44:e4:f6:b5:9d:d9:3c:f4:93:a9:7f:78:58:b7:c2:fb:
         2b:7c:9d:57:2d:bf:7c:3f:00:e2:73:8c:93:82:ab:42:e1:1c:
         dc:73:b6:1f:57:18:7d:bf:a1:6d:7a:06:e7:96:3a:62:90:de:
         0e:77:67:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:52:47 2026 by rpki-client