Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/293ffb60-5163-4ccd-8c12-c520cba4608b/982ab640-7a3e-3ba8-bc9c-0d7448b20820.roa
File:                     982ab640-7a3e-3ba8-bc9c-0d7448b20820.roa (raw, json)
Hash identifier:          4eeubuqG+epIapqmivZ1wvEcSX8+wIg9VHP8J4Eh0oA=
Subject key identifier:   8C:9C:16:6E:DB:DA:A1:E1:EF:D8:EE:24:FD:4A:35:86:A4:4F:2C:88
Certificate issuer:       /CN=293ffb60-5163-4ccd-8c12-c520cba4608b
Certificate serial:       010D0C9F4328584EF2E75D1DE91D6CE815C8B480
Authority key identifier: 6D:A3:88:72:CF:F2:A2:88:34:FF:26:E8:6E:73:11:06:0D:DF:B1:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/293ffb60-5163-4ccd-8c12-c520cba4608b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/293ffb60-5163-4ccd-8c12-c520cba4608b/982ab640-7a3e-3ba8-bc9c-0d7448b20820.roa
Signing time:             Tue 25 Aug 2026 01:00:12 +0000
ROA not before:           Tue 25 Aug 2026 01:00:12 +0000
ROA not after:            Mon 23 Nov 2026 02:00:12 +0000
asID:                     42495
IP address blocks:        208.76.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/293ffb60-5163-4ccd-8c12-c520cba4608b/293ffb60-5163-4ccd-8c12-c520cba4608b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/293ffb60-5163-4ccd-8c12-c520cba4608b/293ffb60-5163-4ccd-8c12-c520cba4608b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/293ffb60-5163-4ccd-8c12-c520cba4608b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f2:e7:5d:1d:e9:1d:6c:e8:15:c8:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=293ffb60-5163-4ccd-8c12-c520cba4608b
        Validity
            Not Before: Aug 25 01:00:12 2026 GMT
            Not After : Nov 23 02:00:12 2026 GMT
        Subject: CN=b4c5522a-c6d7-46f7-81c5-c1173e79dcac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5b:14:a3:43:05:c8:da:e5:e2:84:70:3d:ea:
                    e5:fe:56:ef:9c:0e:21:7f:12:a6:48:68:c8:9a:39:
                    06:a5:a2:bf:3c:f8:08:5d:6d:19:b6:ac:65:e6:57:
                    55:75:ea:ce:25:a5:d0:83:59:f4:d8:15:a1:e4:52:
                    a3:4f:3c:07:e9:3a:c5:e3:e7:1f:c5:03:d1:c8:4c:
                    f0:21:1d:13:1e:86:48:b9:34:fa:d4:c8:57:e8:65:
                    6e:40:1c:ac:d7:de:72:9e:d6:c9:4a:15:b8:13:ad:
                    57:c0:4f:c7:6f:a6:34:96:d9:1d:48:79:37:e1:d1:
                    57:36:4a:0c:18:a5:49:01:ff:ad:89:ad:56:9d:75:
                    71:e2:99:ca:17:c5:0b:b1:59:0a:eb:ad:98:92:83:
                    0b:f5:59:2c:dd:a0:99:ae:7d:e1:44:77:4f:34:b3:
                    0d:1c:11:c7:2d:24:f7:73:7d:1c:66:46:ba:00:3c:
                    91:b3:d3:3b:11:cb:07:0b:f2:bf:ef:3f:6e:41:f6:
                    47:38:8d:cc:7b:43:2a:0f:45:74:5e:d7:6a:00:64:
                    07:e6:64:2b:39:07:63:1b:7e:66:8a:33:ef:c4:e0:
                    ce:a1:1b:34:52:bf:02:f0:e2:3c:61:90:bd:fb:8e:
                    af:79:48:57:84:bc:c4:05:16:da:c7:0a:32:32:1d:
                    41:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:9C:16:6E:DB:DA:A1:E1:EF:D8:EE:24:FD:4A:35:86:A4:4F:2C:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/293ffb60-5163-4ccd-8c12-c520cba4608b/982ab640-7a3e-3ba8-bc9c-0d7448b20820.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/293ffb60-5163-4ccd-8c12-c520cba4608b/293ffb60-5163-4ccd-8c12-c520cba4608b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:A3:88:72:CF:F2:A2:88:34:FF:26:E8:6E:73:11:06:0D:DF:B1:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/293ffb60-5163-4ccd-8c12-c520cba4608b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.76.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:8e:bf:2d:e9:ae:3d:cb:64:d0:32:63:7e:5d:ed:12:1c:80:
         d3:f7:e2:9c:b6:85:93:6f:2b:01:21:ae:cf:a7:ec:a9:9c:c7:
         fe:23:c5:da:f9:7f:8e:f6:66:25:7d:c6:5b:6e:25:96:d2:3b:
         15:4b:4f:5b:44:5a:af:9a:88:d3:86:c1:b5:dc:c2:f6:3c:05:
         a4:9c:9c:f5:b8:49:f5:99:02:f5:75:3a:f1:3e:c5:c4:44:86:
         59:59:df:14:d6:f2:d2:b4:25:75:6f:4d:31:e8:9c:99:8f:ec:
         66:8c:18:a5:a3:53:cd:16:ee:7c:1e:dc:40:c1:af:80:c9:5a:
         75:e2:15:88:ee:be:96:9b:35:8a:d1:df:90:1f:db:87:d7:35:
         4b:31:bd:e2:5f:4a:dc:8e:dd:f8:60:81:a1:a3:6d:47:6f:9c:
         d0:72:03:d3:73:a1:81:b8:fa:d8:84:c3:51:54:26:5b:8a:9d:
         db:2f:10:7d:38:5a:9d:51:eb:0d:d4:43:1d:a7:83:8a:05:ed:
         6c:46:e2:37:46:36:98:11:90:78:ad:07:84:89:0b:5f:58:e5:
         a8:17:e2:02:bf:8d:1c:2e:47:45:41:90:5c:8b:44:b8:ee:2f:
         ce:86:ac:ae:cf:d5:3e:6f:8e:a6:f3:6d:f2:03:38:69:f8:bc:
         12:02:dd:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:50:28 2026 by rpki-client