Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/896bd389-6713-3ab4-aa3f-0666de8572b8.roa
File:                     896bd389-6713-3ab4-aa3f-0666de8572b8.roa (raw, json)
Hash identifier:          34JTTwCSl+w68vrnAgfsFljZBhW894aKvxrNLCjHN1g=
Subject key identifier:   77:76:2F:D7:51:C2:EF:64:A0:19:8B:53:2E:22:49:3B:02:45:E6:2E
Certificate issuer:       /CN=a8825ed0-210f-48ae-8970-c92773afbb48
Certificate serial:       010D0C9F4328584EF717BAE8B4BAB9C4A621FF80
Authority key identifier: BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/896bd389-6713-3ab4-aa3f-0666de8572b8.roa
Signing time:             Wed 26 Aug 2026 13:00:12 +0000
ROA not before:           Wed 26 Aug 2026 13:00:12 +0000
ROA not after:            Tue 24 Nov 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        208.122.49.0/24 maxlen: 24
                          208.122.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f7:17:ba:e8:b4:ba:b9:c4:a6:21:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8825ed0-210f-48ae-8970-c92773afbb48
        Validity
            Not Before: Aug 26 13:00:12 2026 GMT
            Not After : Nov 24 14:00:12 2026 GMT
        Subject: CN=20f997e9-ab54-4b08-a4cf-26761586454f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:08:98:c8:d7:2b:88:e4:e6:e1:5e:ee:29:b3:
                    84:0c:c2:00:74:0b:7e:e5:e0:81:24:81:6f:47:9d:
                    e2:d6:77:f5:ec:de:51:3a:3a:e1:a8:ea:6f:9b:68:
                    5b:36:26:e7:d3:1b:b9:9a:c3:53:54:39:53:b6:43:
                    79:e7:92:6b:fc:a4:a2:28:4d:bf:ab:10:3d:92:19:
                    44:1b:6b:a0:30:73:36:e1:7c:bb:cf:51:11:9f:b1:
                    38:90:c5:e2:26:20:33:a0:01:8c:d9:12:bd:2e:cf:
                    20:ba:85:52:78:f8:73:93:b4:26:d7:3f:9a:d8:86:
                    6d:83:46:9f:15:00:9f:ba:dc:5e:b7:fc:cc:4d:3b:
                    bf:f3:c2:5e:3d:2f:e0:43:ee:f6:95:97:21:3a:fb:
                    47:3d:dc:d8:aa:7e:7d:dd:4d:4b:1f:58:b2:20:8d:
                    9c:a7:c0:85:22:b9:75:c6:c7:33:34:7e:a0:55:02:
                    63:e7:45:33:c4:46:0b:87:92:ff:3b:7d:66:14:cb:
                    d3:a2:5f:74:de:7e:08:da:3d:30:14:43:de:95:91:
                    3d:80:e8:3d:d2:44:fc:5e:3f:f4:92:3f:e9:59:b2:
                    b6:84:ce:7c:6f:2b:a3:a0:5e:e9:6f:ef:e4:02:10:
                    7b:d6:4a:c1:20:a2:f5:61:27:94:dc:9c:ee:ce:a3:
                    b5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:76:2F:D7:51:C2:EF:64:A0:19:8B:53:2E:22:49:3B:02:45:E6:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/896bd389-6713-3ab4-aa3f-0666de8572b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl

            X509v3 Authority Key Identifier:
                keyid:BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.122.49.0-208.122.50.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:87:d1:cb:b8:b7:f3:de:a4:eb:19:96:e5:f9:4b:5c:b5:79:
         0a:36:43:5d:c7:fb:14:0b:98:6c:81:12:95:cd:d5:bf:f8:c9:
         94:19:fc:e4:81:3d:f8:27:67:86:7d:10:9b:24:b6:70:15:77:
         20:1f:79:61:a9:56:13:df:7f:7f:ab:d3:2d:fb:ec:c3:81:a5:
         1a:88:50:a9:2d:da:12:c4:67:02:c0:61:e9:b3:79:f7:88:e6:
         14:bb:b3:0b:79:3a:da:4c:22:ac:3f:ab:e9:03:5a:60:32:a8:
         df:86:94:db:d3:10:ff:97:9d:ad:37:23:58:d2:d1:79:16:82:
         af:3b:e8:1e:9e:a2:0c:a1:82:74:9e:b4:b2:cb:65:e3:cf:27:
         dc:ba:81:0c:ba:06:f6:2b:5c:fc:07:b2:50:9d:f5:34:8c:0a:
         70:3b:1f:aa:bd:fd:07:51:1f:03:33:f6:be:81:74:3b:cf:60:
         db:a5:2e:de:fc:92:9f:dc:c1:ab:55:df:9a:cb:2c:d2:9f:b3:
         12:ef:6c:5a:1f:34:8b:ac:d6:4e:b9:95:13:f3:2e:bb:4d:76:
         88:96:76:41:d5:39:61:df:e6:d7:ce:a1:d7:e0:c6:68:bd:ec:
         a9:14:ad:0f:31:10:9f:0e:1e:b0:b8:97:c0:d3:54:66:4c:87:
         f4:08:fa:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 06:45:54 2026 by rpki-client