Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/e659502a-7563-373b-ade4-9e595919cb28.roa
File:                     e659502a-7563-373b-ade4-9e595919cb28.roa (raw, json)
Hash identifier:          i8P4N4T+2BOISJAwPWc2tlXelJgDVZzDkMwvqRU0/+o=
Subject key identifier:   23:B1:38:53:C5:0D:B8:FB:22:6E:D9:DF:89:F0:01:61:F1:74:5F:B4
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584F698D86C8835C497C093B56B3
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/e659502a-7563-373b-ade4-9e595919cb28.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     16417
IP address blocks:        207.54.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:86:c8:83:5c:49:7c:09:3b:56:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=1bfbc205-89d0-4657-828c-6e22fc7778e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f0:9c:7c:4c:f0:b1:77:a4:e9:b5:82:0e:30:
                    13:a0:94:41:2b:c0:12:cd:c1:e5:18:23:c5:1c:03:
                    7c:50:cd:32:58:b0:e2:ff:42:25:f8:75:ac:2c:10:
                    b8:6a:11:81:d0:4e:10:14:56:31:78:51:04:13:bd:
                    26:ab:88:35:4b:db:81:f4:b9:54:c9:2c:a5:96:75:
                    92:77:78:60:71:df:72:76:c0:11:8c:eb:9b:27:51:
                    f6:e9:fa:e0:9e:70:ad:cd:48:6b:da:6b:09:51:01:
                    3c:6a:e1:8c:c4:05:27:38:db:19:8d:25:29:bd:32:
                    51:e3:03:10:72:50:94:d1:71:1c:d3:54:f8:e8:f0:
                    f2:16:c9:76:33:d9:c8:e3:fe:2b:53:b3:b4:99:38:
                    fd:4b:2f:af:55:54:74:24:0e:45:86:a2:18:6e:0a:
                    cf:aa:2d:e9:08:53:ed:1c:eb:45:21:b2:28:9c:c2:
                    a8:a4:5c:5c:db:50:88:a5:31:aa:ab:e5:25:83:f6:
                    25:ce:dd:63:38:15:ee:01:c3:c3:1d:49:af:a0:7e:
                    cf:09:8a:52:e8:c0:b9:4b:62:37:7a:3a:21:96:4a:
                    77:a4:d3:54:35:0a:3a:2d:db:a4:64:6d:1f:38:95:
                    b8:0b:34:c1:1e:53:c1:0c:bd:a6:96:4f:3c:7c:39:
                    65:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B1:38:53:C5:0D:B8:FB:22:6E:D9:DF:89:F0:01:61:F1:74:5F:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/e659502a-7563-373b-ade4-9e595919cb28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.54.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:86:40:1e:54:fd:83:67:88:76:5b:f3:61:12:62:aa:8c:cf:
         be:a5:2a:43:91:2e:5d:84:5b:e0:fa:3a:03:85:9c:4a:ab:7a:
         59:0b:9a:9f:69:da:13:05:9b:bd:00:61:fd:4c:49:b8:d4:d4:
         9e:aa:ac:d0:5c:8d:30:77:df:e6:db:86:6a:65:69:03:eb:40:
         33:0b:7f:39:1b:79:04:de:df:9d:5f:27:63:78:10:c1:79:11:
         f6:54:89:e5:d2:02:87:af:30:c0:21:39:fd:4a:96:89:00:83:
         3e:46:cb:5c:98:2a:09:2c:94:88:03:d4:26:a8:ec:ab:6f:a9:
         49:f2:bf:95:b0:be:bc:a3:2e:f9:a0:4f:89:87:66:fa:f0:62:
         ab:ef:07:eb:ac:db:83:51:4a:7b:8d:77:49:8c:a5:24:b1:6c:
         da:e9:0f:27:6c:d0:3c:b8:2b:3f:40:04:a0:13:07:d5:6e:02:
         8e:31:81:2f:73:30:1b:3c:23:6e:4d:3a:b9:e2:a2:e1:97:cb:
         65:37:d7:e7:5d:f8:77:9a:e5:74:bc:0f:ab:a8:44:ea:ed:8d:
         0e:34:6e:dc:c9:14:93:7a:0b:7a:9d:0a:a5:75:f1:e8:a4:65:
         fc:42:ba:c0:8c:1b:7d:a3:74:5e:af:3b:74:8d:dc:69:55:6c:
         01:d7:f3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:48:04 2026 by rpki-client