Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13de6f16-d107-4bd3-9789-960ad0df19bc/e85b829e-4187-31e1-8233-da0005797706.roa
File:                     e85b829e-4187-31e1-8233-da0005797706.roa (raw, json)
Hash identifier:          PxDuoY0Ed2bnNlp4FiI4ljaoauGMZwpNKrVxdduYK2w=
Subject key identifier:   8E:30:48:15:D1:E6:7F:B4:93:3C:05:1D:6C:41:37:E0:D7:19:58:9A
Certificate issuer:       /CN=13de6f16-d107-4bd3-9789-960ad0df19bc
Certificate serial:       010D0C9F4328584F331D1F94CDB3B0A7A35E8B20
Authority key identifier: C7:D2:7B:B2:A7:FA:25:1F:B6:5A:B8:53:21:D5:C8:1C:52:33:84:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13de6f16-d107-4bd3-9789-960ad0df19bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13de6f16-d107-4bd3-9789-960ad0df19bc/e85b829e-4187-31e1-8233-da0005797706.roa
Signing time:             Thu 17 Sep 2026 01:00:11 +0000
ROA not before:           Thu 17 Sep 2026 01:00:11 +0000
ROA not after:            Wed 16 Dec 2026 02:00:11 +0000
asID:                     13335
IP address blocks:        208.88.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13de6f16-d107-4bd3-9789-960ad0df19bc/13de6f16-d107-4bd3-9789-960ad0df19bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13de6f16-d107-4bd3-9789-960ad0df19bc/13de6f16-d107-4bd3-9789-960ad0df19bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13de6f16-d107-4bd3-9789-960ad0df19bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:1d:1f:94:cd:b3:b0:a7:a3:5e:8b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13de6f16-d107-4bd3-9789-960ad0df19bc
        Validity
            Not Before: Sep 17 01:00:11 2026 GMT
            Not After : Dec 16 02:00:11 2026 GMT
        Subject: CN=01587505-78a6-4f50-aab1-57372cb2788d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d6:2c:40:1f:71:b5:01:b6:6c:36:d4:25:b0:
                    3c:e7:41:91:44:2d:51:22:fa:35:02:8b:4c:1a:ff:
                    e3:ae:47:5c:dc:0b:57:2f:e9:15:42:bd:78:87:ce:
                    1c:c4:b0:44:b2:7f:84:dc:eb:64:d7:f5:a7:6d:32:
                    99:fa:f4:a5:12:76:b4:d3:64:27:61:75:fc:b7:f5:
                    3b:75:94:2f:8c:89:c2:09:4d:e7:33:2b:30:66:f7:
                    dd:71:a3:98:92:a2:b8:52:18:73:bb:f9:e8:d1:56:
                    47:7b:d7:bf:ce:e5:29:80:55:60:1b:34:43:81:08:
                    9a:72:0b:ae:29:f7:ef:d8:6e:03:02:2c:82:c9:4b:
                    f7:49:80:7a:9d:97:74:a9:f7:45:8d:d5:6d:0e:b2:
                    7a:1a:7d:3a:7e:eb:2b:cc:b8:7b:a4:b7:af:07:73:
                    9f:9b:0d:60:43:cb:31:27:3d:41:99:d6:3f:7b:de:
                    ac:e9:6e:0d:12:38:ab:25:6e:7d:17:ea:6a:ae:7c:
                    54:bf:06:da:de:3b:6c:60:03:be:50:56:88:1f:9f:
                    bc:00:05:64:01:f7:bb:85:7c:91:03:a3:cd:49:0e:
                    e6:8b:29:df:d0:0d:e2:aa:cf:aa:9f:8a:57:75:dd:
                    80:80:6f:70:50:ff:57:e8:84:df:af:a3:7a:e8:78:
                    12:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:30:48:15:D1:E6:7F:B4:93:3C:05:1D:6C:41:37:E0:D7:19:58:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13de6f16-d107-4bd3-9789-960ad0df19bc/e85b829e-4187-31e1-8233-da0005797706.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13de6f16-d107-4bd3-9789-960ad0df19bc/13de6f16-d107-4bd3-9789-960ad0df19bc.crl

            X509v3 Authority Key Identifier:
                keyid:C7:D2:7B:B2:A7:FA:25:1F:B6:5A:B8:53:21:D5:C8:1C:52:33:84:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/13de6f16-d107-4bd3-9789-960ad0df19bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.88.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:d0:4a:fb:cf:fa:9a:fa:ea:3f:0d:61:65:9e:e3:47:93:c3:
         51:e3:08:fd:f1:16:47:78:93:0d:20:6b:06:29:d8:a4:2d:c5:
         3e:fe:a1:ae:14:68:05:30:74:d3:67:23:17:dc:f8:20:bf:11:
         1b:37:8e:0c:13:d1:d9:14:c1:a9:35:da:cd:4a:68:ff:61:f0:
         d1:69:74:23:b9:75:29:50:bb:18:a8:ed:1e:97:e7:e7:c9:4b:
         85:84:6d:0d:e7:fc:51:d4:e5:6e:d9:fa:93:0d:e6:f9:d3:7a:
         60:18:36:aa:87:2c:7f:80:17:35:98:82:79:a7:28:20:58:da:
         ec:43:7e:ff:a3:18:e8:e9:cf:05:cd:c1:7b:d3:70:73:66:e4:
         8f:af:77:a6:af:bf:38:e4:75:7c:5a:bd:eb:9d:0c:d5:54:19:
         b2:80:29:cd:96:55:d8:d3:f8:23:30:3e:7a:c8:3a:39:38:03:
         ef:98:23:a0:e2:91:dd:1e:ef:23:b4:15:a4:f8:45:36:6d:da:
         a2:1b:f9:08:a9:5c:83:f8:ba:3f:0d:4e:58:32:19:6c:57:3b:
         53:db:bf:45:49:20:db:53:c4:85:90:27:13:76:c1:d3:63:cd:
         4c:09:88:86:74:35:61:6f:48:3b:5c:d5:ea:aa:e6:cf:11:b7:
         d7:41:f3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:06:59 2026 by rpki-client