Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/09fd78bb-ff36-3e12-9270-f6056e8b8de7.roa
File:                     09fd78bb-ff36-3e12-9270-f6056e8b8de7.roa (raw, json)
Hash identifier:          yefOHZDcuMXn89ai9uIB1QrzKJZ+VT9H0Qzhwit/Bjg=
Subject key identifier:   DD:A5:65:15:C2:E3:97:E2:F3:6E:94:8C:73:F2:E0:3B:7D:28:D4:95
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584D703FF71235111AD5856AB600
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/09fd78bb-ff36-3e12-9270-f6056e8b8de7.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     2914
IP address blocks:        162.244.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:f7:12:35:11:1a:d5:85:6a:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=b78421cf-1421-4e8a-bba5-a424906c281c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:9a:a4:c0:d7:fd:71:da:c1:2f:5e:72:78:2f:
                    39:42:4b:86:16:06:f6:4b:88:91:ab:ae:92:52:06:
                    b0:94:ce:e7:3f:cc:95:5b:8a:3d:f5:c3:af:ff:42:
                    12:84:c5:e6:c5:ae:c7:1f:ee:28:27:6c:62:f9:1d:
                    c4:b4:7e:8c:91:b3:e0:81:21:c6:2b:be:49:ab:ec:
                    aa:14:db:38:59:9f:a3:bc:47:c4:16:9d:1f:2b:77:
                    fb:f8:0f:f7:71:1e:3b:17:04:cc:0e:35:50:07:8f:
                    a2:75:f5:da:78:4a:62:3b:f0:5a:a9:66:ef:c7:15:
                    4c:a7:1e:9d:2e:cb:ad:ff:d1:c0:5c:95:83:c8:9f:
                    b6:a5:e4:73:a1:bc:68:5a:5e:3c:74:eb:ae:c4:fa:
                    ad:95:64:ac:1b:8c:33:8e:31:45:77:5e:fe:76:a7:
                    84:8a:62:f7:ce:cd:ab:fa:30:aa:7f:2a:e1:c3:61:
                    ae:bf:dd:d4:36:4c:40:a7:36:fe:00:ba:50:88:b3:
                    25:5e:98:bd:a5:aa:5f:55:cd:5a:cc:9d:62:77:d5:
                    c8:bd:be:ae:e2:91:9d:11:95:0c:18:73:4c:4a:44:
                    a1:51:30:37:ef:84:41:28:ea:18:c1:74:a6:eb:41:
                    11:53:11:41:fa:25:38:13:8a:44:8c:57:b8:b0:16:
                    7c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A5:65:15:C2:E3:97:E2:F3:6E:94:8C:73:F2:E0:3B:7D:28:D4:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/09fd78bb-ff36-3e12-9270-f6056e8b8de7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.244.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:35:1c:90:dc:d3:3a:ee:5d:72:49:ef:09:4a:0c:e7:75:a7:
         e1:77:0a:f4:b0:e7:b5:26:1e:48:9d:6b:39:c6:1e:db:95:c9:
         0a:a4:97:2f:53:f5:46:e0:d7:69:88:49:e1:84:4e:22:6a:30:
         20:6d:36:3f:54:ce:8e:68:57:5e:a5:4c:00:d6:01:8c:54:56:
         4b:c8:b1:19:f5:8a:38:12:e1:2c:bc:45:96:4d:c5:27:25:22:
         1c:03:b6:41:e5:c7:e4:d5:a1:17:ec:96:44:ba:17:83:57:d7:
         db:e5:39:ef:83:e5:1a:cf:34:09:26:fa:a1:4e:16:56:bd:39:
         49:7a:c0:bf:ff:0f:77:e1:bb:9d:1b:ac:71:5b:92:af:ad:ed:
         2d:93:9d:c6:8d:e9:16:d7:d5:8f:4d:80:83:0d:b0:c2:eb:ba:
         f7:bb:6b:33:fc:53:09:bd:af:48:1f:c1:ea:51:be:82:c7:0f:
         84:94:85:07:3d:bb:aa:c8:5e:ed:46:6a:fe:a2:6b:45:3d:11:
         27:f9:a1:0a:41:86:3d:36:c8:88:42:03:2b:63:24:cc:d1:92:
         5a:91:33:48:59:0a:44:5c:6d:ee:24:ac:4c:e1:02:b8:8b:61:
         94:5b:2b:5a:4e:1a:34:19:35:83:5f:d4:0d:c8:ed:4a:d3:6c:
         7a:03:cc:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:05:48 2026 by rpki-client