Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/e208510e-919b-3acc-a02a-9e6cc9ba5abf.roa
File:                     e208510e-919b-3acc-a02a-9e6cc9ba5abf.roa (raw, json)
Hash identifier:          px9oF4i5MY9rc/Q/aGk6uLpxE9YOLsE9neY7djUS/YY=
Subject key identifier:   95:95:31:7D:76:3D:5F:EA:76:17:BF:23:EB:92:5B:1C:3F:E6:FC:C1
Certificate issuer:       /CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061
Certificate serial:       010D0C9F4328584EA788D919DAE593B5EFBD1330
Authority key identifier: 21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/e208510e-919b-3acc-a02a-9e6cc9ba5abf.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16509
IP address blocks:        208.64.80.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:d9:19:da:e5:93:b5:ef:bd:13:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e87c0b3-383a-438c-aa45-1e5df0d0e061
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=aca9fec0-9453-4a59-a78f-7205fc69184b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cf:5b:80:da:31:2f:ff:be:fc:3d:34:96:db:
                    72:e5:d3:b4:74:34:84:95:90:7d:8f:6d:b7:6f:7c:
                    da:40:73:42:18:ab:85:94:ef:c0:b2:97:e5:71:80:
                    84:9f:27:05:9e:c3:10:70:52:85:65:44:da:70:7a:
                    35:91:86:55:1e:71:c1:f4:3e:d1:86:53:7f:06:60:
                    da:10:6f:2c:17:91:23:f1:85:51:17:a7:3a:58:01:
                    b9:1b:09:fd:01:07:f1:ca:2f:a8:41:3e:e2:cf:27:
                    2a:62:ce:9d:0d:19:0a:8f:e0:e3:37:f6:0c:83:77:
                    c3:55:a6:5d:22:c4:8f:f9:8e:5a:1f:59:90:89:6d:
                    9a:d4:26:51:5e:82:09:1a:55:1a:25:3a:cc:eb:6c:
                    59:da:83:7a:6a:fd:6b:db:98:c9:1d:c2:ac:07:cd:
                    dd:3e:ee:27:80:bf:17:b1:4f:d7:96:af:9d:25:78:
                    f4:71:fd:77:6a:40:f3:d3:8b:2b:2c:5f:1c:3b:b7:
                    34:8d:d4:00:26:26:1f:1f:63:4a:e5:c2:46:ea:14:
                    ea:90:a0:48:b9:5c:0d:78:84:8d:ff:78:84:fd:cd:
                    92:89:3d:de:84:e2:49:41:6a:c8:c7:e5:26:b2:7c:
                    4c:7f:34:28:d6:7e:f1:d9:d9:2b:00:ab:cd:d4:3e:
                    a5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:95:31:7D:76:3D:5F:EA:76:17:BF:23:EB:92:5B:1C:3F:E6:FC:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/e208510e-919b-3acc-a02a-9e6cc9ba5abf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061/4e87c0b3-383a-438c-aa45-1e5df0d0e061.crl

            X509v3 Authority Key Identifier:
                keyid:21:B4:6D:BF:CB:19:2A:8D:29:54:F0:6B:20:82:83:C2:12:1B:7F:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4e87c0b3-383a-438c-aa45-1e5df0d0e061.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.64.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:ee:79:97:54:10:3b:fd:af:12:88:99:bf:7f:b6:40:c6:1c:
         a2:5f:f9:55:03:68:74:76:1d:48:5d:b4:a3:37:31:ef:38:bb:
         2a:04:4f:4d:23:c0:42:6e:c9:b5:e3:ab:32:65:93:4b:55:53:
         2e:a2:38:43:11:99:60:39:49:49:54:2a:9e:64:19:4a:73:6b:
         6d:a0:61:2d:98:67:41:75:5d:61:4e:06:9f:fc:f5:27:ff:0e:
         30:de:b5:d8:37:58:8e:3f:ce:62:8a:bb:c0:37:63:d5:bc:c9:
         6b:74:f7:eb:eb:5f:09:49:24:4f:2f:5e:cf:90:86:7d:12:cf:
         6e:01:8f:31:80:ba:9c:fa:4b:25:78:54:b1:cb:d9:df:e7:e4:
         19:73:f4:7d:fa:aa:37:52:33:25:09:43:ba:8a:14:72:f0:83:
         e6:88:57:1f:87:ff:47:d9:7c:09:79:81:f5:7e:a3:6f:cc:12:
         c2:00:d1:fb:d9:55:40:65:a2:cc:97:da:b7:df:9a:6d:e2:00:
         e6:61:b7:31:40:c2:0a:96:9d:0a:69:53:b5:c0:ac:64:59:aa:
         7f:5c:6e:bf:5f:fa:5b:02:48:dd:15:16:43:f8:af:5a:96:40:
         58:ad:82:c7:30:1a:3b:65:ba:ee:37:bc:3a:ce:15:c8:a5:f1:
         dc:a8:92:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:24:51 2026 by rpki-client