Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/cab94f58-acfa-33ab-adac-aa1d5df30eb1.roa
File:                     cab94f58-acfa-33ab-adac-aa1d5df30eb1.roa (raw, json)
Hash identifier:          uuAM2VayyYMjL6wu3aaMKXrlq6VUGcL0+y4jDUIYdfQ=
Subject key identifier:   72:40:22:71:C4:00:FA:74:25:BC:C9:F5:14:57:FC:9C:3A:32:7D:E6
Certificate issuer:       /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial:       010D0C9F4328584EDC920976C674BF5798ADC900
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/cab94f58-acfa-33ab-adac-aa1d5df30eb1.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        208.70.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:09:76:c6:74:bf:57:98:ad:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=3246063f-0296-4849-bc91-01b494349264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:59:e5:df:94:b8:bc:49:82:d7:8d:4d:c0:0d:
                    94:74:de:bc:1d:f3:ba:dd:c9:93:e6:ce:c1:d0:f2:
                    83:6a:c5:76:a6:24:d7:03:02:56:cf:53:3d:78:ee:
                    24:61:9e:fd:32:79:cc:95:e6:39:78:a9:46:f5:ca:
                    69:f4:cc:13:ce:6f:2c:3b:a3:42:e0:ce:d4:e5:d0:
                    ab:8a:7d:63:ae:9b:a8:43:b3:a9:4a:8e:ea:e7:7e:
                    6b:94:8d:1b:ed:61:16:1c:91:89:08:d4:3c:58:e6:
                    76:60:e5:48:b0:47:d6:c1:94:f4:b6:aa:70:86:3f:
                    29:27:09:1d:74:4b:74:8a:fe:ff:d1:ac:b2:3e:bf:
                    14:84:4e:f7:9c:50:94:16:d0:40:34:0f:ae:e4:13:
                    ba:ef:ef:6b:87:ff:e5:0f:c4:48:61:12:d7:4d:b8:
                    47:ba:83:8a:48:da:b9:60:13:7c:c0:8c:24:f6:7a:
                    85:58:39:ec:1e:46:93:fb:0c:5e:a6:7d:51:55:77:
                    18:a0:c7:4d:d1:34:61:8a:50:32:35:90:9a:61:a0:
                    c4:e4:75:5e:66:3b:13:45:fe:e3:93:39:b2:0f:34:
                    5d:48:f6:6e:4f:57:4d:43:58:bc:ef:cf:5a:2b:f8:
                    91:71:f5:76:c8:72:67:b2:ff:c4:25:9b:5f:b5:2d:
                    ce:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:40:22:71:C4:00:FA:74:25:BC:C9:F5:14:57:FC:9C:3A:32:7D:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/cab94f58-acfa-33ab-adac-aa1d5df30eb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl

            X509v3 Authority Key Identifier:
                keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:07:c4:48:29:9f:4a:03:97:d2:c6:35:bd:b7:81:59:8d:63:
         da:bc:5d:3c:e1:7d:ab:cf:2f:22:c8:eb:fa:79:12:62:43:ed:
         da:44:17:f0:61:99:a1:09:d1:80:08:db:f8:16:b7:a0:3c:06:
         9c:da:39:ac:0b:a0:cd:98:34:67:44:cb:31:5d:0b:76:e3:fe:
         8a:cb:7c:ad:94:5f:54:03:23:d4:35:d7:18:e7:79:08:af:27:
         a8:7c:59:08:09:b6:02:a3:65:4a:32:85:b6:75:13:a4:e1:62:
         1f:e3:4c:fc:b0:35:d8:49:d5:d1:79:fa:d1:5e:29:3c:36:a8:
         61:ee:34:50:c1:54:08:03:44:ed:17:f0:86:a0:b4:94:e6:3c:
         ff:fc:c5:ad:d3:d8:b1:a2:7f:b5:a9:24:83:ef:f7:a0:1f:a2:
         42:93:8b:a3:c3:d1:83:bc:f5:1a:e0:60:0c:dd:51:99:0a:8d:
         b0:96:13:d5:10:bf:e4:13:5f:ce:9b:73:04:dd:15:fb:38:ba:
         85:b7:5d:c4:9d:f5:61:c0:be:4c:5d:d5:b4:4b:f8:f0:14:f2:
         2e:8c:37:2f:42:f3:fe:a5:06:4a:75:69:9b:56:0e:13:4b:a3:
         74:f5:83:32:af:cb:42:7b:12:f5:6d:84:3d:dd:8a:74:90:53:
         b3:31:8c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:01:57 2026 by rpki-client