Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/c8bc0bb8-b9be-3844-a06b-1be2791b3b1e.roa
File:                     c8bc0bb8-b9be-3844-a06b-1be2791b3b1e.roa (raw, json)
Hash identifier:          4F0OrVoEHK4lWKxc5t064a3QFEUU3m+85cjDx2KH/KE=
Subject key identifier:   3C:07:55:DA:1F:8F:78:67:7E:26:A7:F1:8A:B8:9F:0B:E3:87:A2:DE
Certificate issuer:       /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
Certificate serial:       010D0C9F4328584F225D066B4CB21070B9E1EA80
Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/c8bc0bb8-b9be-3844-a06b-1be2791b3b1e.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     21559
IP address blocks:        72.46.158.0/23 maxlen: 23
                          199.116.62.0/24 maxlen: 24
                          208.81.58.0/23 maxlen: 23
                          208.81.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5d:06:6b:4c:b2:10:70:b9:e1:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=8692be87-074e-4d6c-9330-e6ac3d13953b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2f:c0:f7:81:5b:d8:ca:90:3c:58:22:7e:32:
                    7a:b6:81:3f:91:9a:fb:cc:be:67:46:1e:05:d9:66:
                    d6:6e:c1:38:b7:ce:91:fb:02:a1:e8:bf:cf:ec:2b:
                    3d:e7:70:b9:c1:ed:67:8d:d2:3c:82:13:a2:8d:86:
                    2a:3a:fa:09:06:b0:53:07:a3:12:cc:6c:07:7f:87:
                    70:be:c8:3a:80:e8:bc:d5:32:b5:87:b1:d6:f1:61:
                    e8:6d:17:64:b1:97:e6:59:39:80:5d:e6:31:3e:c5:
                    3c:47:1f:73:e9:86:6c:ca:94:3a:df:3e:f9:ff:2a:
                    8c:04:4c:42:8a:0a:76:45:4b:2b:4b:78:e1:8b:13:
                    15:e4:7d:69:03:6f:d5:c2:5f:bc:a2:9d:2e:e2:22:
                    d0:15:aa:96:7c:c4:6f:97:d0:0c:e6:a8:6e:26:49:
                    69:28:38:93:98:66:f7:f4:b2:db:ed:af:b7:bc:cc:
                    0c:ad:ab:aa:69:a0:27:56:7a:c0:1c:dc:d2:93:87:
                    6f:87:dd:37:c4:ad:de:96:54:41:aa:b7:40:42:38:
                    3e:5c:18:b1:91:a4:70:d7:fb:96:d7:c8:c2:f4:b1:
                    c6:f2:f9:4a:12:6d:e9:94:cd:a7:bc:c7:fe:39:00:
                    7b:d3:3c:98:27:6c:40:93:39:7d:52:59:c7:2d:8e:
                    51:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:07:55:DA:1F:8F:78:67:7E:26:A7:F1:8A:B8:9F:0B:E3:87:A2:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/c8bc0bb8-b9be-3844-a06b-1be2791b3b1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl

            X509v3 Authority Key Identifier:
                keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.46.158.0/23
                  199.116.62.0/24
                  208.81.58.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:7a:0c:83:77:e1:b8:40:f1:e2:5e:1c:f1:86:94:21:aa:27:
         87:ed:91:ef:7a:a7:e1:00:3e:10:bf:f9:0c:69:f1:93:4c:0c:
         c1:53:4c:e2:b7:40:25:b5:03:19:6a:d1:2b:ba:7e:96:51:2c:
         50:77:25:c1:35:a3:de:76:fa:8b:cc:a8:34:7b:44:5e:d1:51:
         9b:93:4e:84:a6:dc:ab:37:41:98:8b:f4:0b:8b:c4:c4:fa:20:
         bc:b9:51:e8:d1:e7:3b:80:33:7b:e2:b8:0b:a6:46:24:f4:c3:
         6e:e8:47:9b:3b:ca:e4:ea:08:5c:3e:0a:21:26:a3:19:2c:d0:
         22:71:fd:83:fd:7d:b0:2a:4a:d4:18:4a:ac:a4:2e:9e:f0:37:
         34:69:ac:97:eb:41:4c:80:57:ee:88:cb:e3:da:a7:9c:b9:77:
         7b:5a:be:35:2a:e8:d1:1a:37:cb:2e:c0:fb:52:c2:c4:98:c0:
         41:e2:d3:4c:fd:1c:1e:56:c3:a2:a2:63:8f:bd:16:33:f7:49:
         52:1c:8f:2b:6e:21:f1:4c:d3:76:97:5e:17:06:b2:64:c7:be:
         1d:86:1a:f9:b6:af:87:3b:b8:d5:36:58:53:16:4a:a9:11:3e:
         14:b3:eb:06:19:f6:50:fc:47:7d:1d:2e:7e:92:ea:fa:e8:0a:
         a0:a6:d1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:29:26 2026 by rpki-client