Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/55cb20ca-a3eb-341a-ab7b-c818a3ae5a49.roa
File:                     55cb20ca-a3eb-341a-ab7b-c818a3ae5a49.roa (raw, json)
Hash identifier:          ycMa7UUbPOzrUEn2SM4J+eSr1TcKV2kSR0bHNYAFDEA=
Subject key identifier:   83:E8:73:F6:4B:82:49:E3:CF:53:2F:03:90:3F:93:E0:76:08:5F:74
Certificate issuer:       /CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
Certificate serial:       010D0C9F4328584FA5933EF5DF6A30AA1724FF40
Authority key identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/55cb20ca-a3eb-341a-ab7b-c818a3ae5a49.roa
Signing time:             Wed 28 Oct 2026 01:00:13 +0000
ROA not before:           Wed 28 Oct 2026 01:00:13 +0000
ROA not after:            Tue 26 Jan 2027 02:00:13 +0000
asID:                     400238
IP address blocks:        204.8.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a5:93:3e:f5:df:6a:30:aa:17:24:ff:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
        Validity
            Not Before: Oct 28 01:00:13 2026 GMT
            Not After : Jan 26 02:00:13 2027 GMT
        Subject: CN=42852873-d3f4-4127-b052-675b432998c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:24:41:ad:bd:18:7e:2a:9c:dd:a0:29:24:a9:
                    18:0d:14:19:f0:6f:1d:29:35:3a:aa:28:4d:da:4b:
                    c6:87:a2:d8:86:0e:01:3b:95:50:ab:25:6d:7d:35:
                    67:57:fa:cf:1e:77:0b:8c:fb:6d:2c:b7:83:bb:12:
                    fc:b6:6d:9c:9a:e1:bb:89:d5:a6:24:79:49:b8:b4:
                    5e:bf:a6:ff:a5:2f:d0:9a:23:bd:7e:14:7d:1a:09:
                    86:b2:f5:2c:0b:94:f8:3b:8e:50:d5:95:8b:3f:90:
                    eb:27:50:60:ca:b2:b1:81:b2:91:6c:a0:a3:31:71:
                    d6:6a:9c:d8:83:fb:b4:9b:aa:f2:85:d8:6f:e0:c6:
                    ac:0b:bb:2a:25:01:b9:e7:9d:e5:ec:89:ae:81:83:
                    c7:08:a1:44:33:40:85:cb:70:ee:2a:c9:94:d2:3b:
                    44:4c:00:29:2b:82:46:c2:9b:4a:70:07:5f:18:2a:
                    e7:0f:b3:32:61:41:1b:78:b4:dc:85:21:6b:58:a3:
                    ab:cc:12:37:51:47:47:6d:9b:39:e5:65:8b:6e:dc:
                    05:fa:96:df:ff:ef:d8:30:f6:b7:e3:03:1a:3f:4c:
                    7f:94:f0:3c:39:66:b3:91:43:a3:bb:4a:e5:28:01:
                    97:37:26:b9:4a:2c:3d:1d:5f:b0:e3:f1:86:76:bf:
                    06:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E8:73:F6:4B:82:49:E3:CF:53:2F:03:90:3F:93:E0:76:08:5F:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/55cb20ca-a3eb-341a-ab7b-c818a3ae5a49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl

            X509v3 Authority Key Identifier:
                keyid:E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:4d:ec:b9:90:4b:8a:ca:4f:80:a4:70:f4:c2:a5:82:48:40:
         d0:a6:88:bc:f2:89:ca:0f:74:c6:19:8f:8e:ff:0b:c5:77:11:
         eb:5d:b4:27:b5:bd:df:a3:a6:4e:a3:ca:af:0d:a4:6b:f3:f8:
         6a:0f:d1:c1:dc:b9:87:88:0d:e8:8b:57:5c:7c:35:a5:2e:ca:
         51:73:e0:00:ea:2b:67:d4:59:0b:78:4e:01:63:2c:10:ed:dd:
         c7:d7:75:5f:76:c1:01:d8:a8:30:89:96:50:3e:03:9c:da:26:
         2b:5f:89:91:e3:af:30:be:1c:cb:3d:b6:04:9b:4d:de:d0:6a:
         ea:89:2b:bc:e1:9c:83:4f:9f:ff:a0:11:04:82:90:ec:95:43:
         9d:9b:1a:9f:31:ca:dc:cc:ec:b8:b7:12:77:a8:9f:60:91:97:
         c1:88:9e:88:97:20:ef:e3:05:18:e8:27:90:74:61:88:ce:ae:
         d7:ce:8d:6c:fc:b4:bd:1e:9c:ad:76:f9:79:39:e2:7d:b6:07:
         85:da:a3:bb:e1:c8:3a:b3:88:46:8f:1d:4d:52:5c:ca:ae:20:
         97:69:59:14:d6:2d:76:f8:b3:57:c7:81:9b:35:af:a5:43:31:
         31:25:38:85:05:49:cd:f1:d6:94:57:92:4c:64:d2:a3:c5:4f:
         5d:32:50:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:53:36 2026 by rpki-client