Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e8753aa8-d1c8-4cf8-95d4-c8fdaa973ed1/db4a5e6e-5f27-358a-9461-929e1f08f72e.roa
File:                     db4a5e6e-5f27-358a-9461-929e1f08f72e.roa (raw, json)
Hash identifier:          EbcqjH2M1f6bZnnNSsG0XCXeyDy8feh4PsKJywoJPlo=
Subject key identifier:   D0:DA:E4:C7:3B:4E:B5:9D:4F:68:FE:A4:74:0D:BB:97:59:99:07:37
Certificate issuer:       /CN=e8753aa8-d1c8-4cf8-95d4-c8fdaa973ed1
Certificate serial:       010D0C9F4328584F05936F44582CB4E072476660
Authority key identifier: 0F:1A:B0:3F:4A:8E:84:18:30:E6:F2:72:72:39:BD:0E:91:86:9D:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e8753aa8-d1c8-4cf8-95d4-c8fdaa973ed1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e8753aa8-d1c8-4cf8-95d4-c8fdaa973ed1/db4a5e6e-5f27-358a-9461-929e1f08f72e.roa
Signing time:             Mon 31 Aug 2026 17:31:33 +0000
ROA not before:           Mon 31 Aug 2026 17:31:33 +0000
ROA not after:            Sun 29 Nov 2026 18:31:33 +0000
asID:                     19572
IP address blocks:        209.173.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e8753aa8-d1c8-4cf8-95d4-c8fdaa973ed1/e8753aa8-d1c8-4cf8-95d4-c8fdaa973ed1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e8753aa8-d1c8-4cf8-95d4-c8fdaa973ed1/e8753aa8-d1c8-4cf8-95d4-c8fdaa973ed1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e8753aa8-d1c8-4cf8-95d4-c8fdaa973ed1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:05:93:6f:44:58:2c:b4:e0:72:47:66:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8753aa8-d1c8-4cf8-95d4-c8fdaa973ed1
        Validity
            Not Before: Aug 31 17:31:33 2026 GMT
            Not After : Nov 29 18:31:33 2026 GMT
        Subject: CN=47feef51-84cb-4876-811d-b356e1d30407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ca:06:4a:5d:57:92:e7:08:ba:04:3e:c5:eb:
                    6c:a8:65:7b:ac:c0:c1:4c:c2:a8:a1:6a:78:9f:51:
                    37:06:4e:b4:d4:c4:45:80:4a:1d:02:12:b0:73:36:
                    c1:f3:0a:7f:6b:84:3a:d4:f1:9a:a2:e9:06:99:47:
                    4b:46:22:15:fe:53:b3:a8:87:21:0d:24:5c:c7:7c:
                    81:13:88:51:f2:a3:3f:9b:03:b6:31:96:38:64:f3:
                    07:f6:58:38:3a:07:65:a6:2e:e7:e3:f9:c7:26:be:
                    70:63:2d:93:e2:b6:bb:16:d7:47:90:5c:57:cb:09:
                    b4:ac:d0:9c:6b:75:c6:bd:3d:5b:aa:08:8d:91:ea:
                    4c:e5:c8:f3:e0:e3:cf:52:8b:37:f3:94:cc:1e:33:
                    b0:31:a7:22:92:89:ed:98:a9:f7:68:3b:ca:a0:18:
                    6a:62:2a:08:6e:97:9b:2c:be:e7:78:dd:10:af:b3:
                    d6:47:66:b6:a5:61:06:a9:bf:e7:bc:e3:7b:a9:95:
                    0d:17:62:87:79:db:0c:ad:1e:8e:e7:6e:92:7c:42:
                    58:9d:8a:d7:ba:5e:7c:75:d3:28:a6:51:79:8e:87:
                    69:de:3f:b6:be:cb:e4:16:3a:3c:09:87:7c:91:0c:
                    d4:15:00:c2:c2:a2:2c:ae:26:c3:68:ab:c3:b9:95:
                    d2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:DA:E4:C7:3B:4E:B5:9D:4F:68:FE:A4:74:0D:BB:97:59:99:07:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e8753aa8-d1c8-4cf8-95d4-c8fdaa973ed1/db4a5e6e-5f27-358a-9461-929e1f08f72e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e8753aa8-d1c8-4cf8-95d4-c8fdaa973ed1/e8753aa8-d1c8-4cf8-95d4-c8fdaa973ed1.crl

            X509v3 Authority Key Identifier:
                keyid:0F:1A:B0:3F:4A:8E:84:18:30:E6:F2:72:72:39:BD:0E:91:86:9D:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e8753aa8-d1c8-4cf8-95d4-c8fdaa973ed1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.173.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:9b:2d:cd:42:f6:0b:e2:a8:84:20:26:47:ce:01:a9:aa:a3:
         9b:0d:3b:89:73:67:5d:cc:ca:01:b3:32:20:ee:7a:2e:34:7e:
         8f:56:8e:b1:14:c6:e0:c2:e7:4b:5d:70:ea:a1:d7:24:6f:66:
         3b:0d:ed:4b:1d:d2:3d:27:88:14:3a:6e:0a:9b:78:bb:5f:27:
         fb:8e:72:ca:97:1a:2e:0d:ae:cc:18:3d:68:0c:2f:3a:d3:47:
         13:25:3e:8f:6c:a3:92:28:a2:d8:28:a3:3b:f4:58:ce:01:06:
         d7:1b:fc:75:b7:4e:49:43:23:cd:6c:92:5a:2a:e5:87:f4:42:
         21:1e:ab:0a:b1:3e:0b:d8:5c:50:fe:fc:d4:92:4e:9b:3e:10:
         24:c1:f0:40:41:ec:fc:09:60:6a:04:81:89:9d:8f:73:c4:ac:
         10:01:69:0e:8e:4a:e8:3d:7a:92:8f:7b:ed:b8:4d:e8:26:31:
         bd:49:54:f7:9e:57:f9:28:94:fe:21:4a:31:8f:79:84:16:bc:
         fb:7d:c2:92:90:f2:2c:dd:7e:2d:9b:9f:1d:a2:44:d8:2b:f7:
         6a:79:fc:e1:ec:21:3b:fc:60:3f:90:6d:0d:29:23:75:03:6e:
         5f:fc:45:d7:15:3c:7f:d9:d1:b9:e4:26:2d:e4:34:02:f2:2b:
         af:4b:e8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:41:05 2026 by rpki-client