Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/8bfbe947-6130-3027-9160-9675c543f8da.roa
File:                     8bfbe947-6130-3027-9160-9675c543f8da.roa (raw, json)
Hash identifier:          4ajyjtiws7U5ydy/UX9AWEErjPAu06vMTviP13ad6nY=
Subject key identifier:   66:F1:0D:41:99:00:F1:A9:EB:E5:BD:96:54:7A:27:B1:21:76:CC:AC
Certificate issuer:       /CN=7770be2f-95a3-43e4-a139-53984564db4a
Certificate serial:       010D0C9F4328584F480D3DB1E2228C5738556900
Authority key identifier: 8E:FC:B1:77:D6:58:1B:C2:CE:12:0D:5D:2A:E9:67:7A:33:C7:6E:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/8bfbe947-6130-3027-9160-9675c543f8da.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     53706
IP address blocks:        162.213.204.0/24 maxlen: 24
                          162.213.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/7770be2f-95a3-43e4-a139-53984564db4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/7770be2f-95a3-43e4-a139-53984564db4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:3d:b1:e2:22:8c:57:38:55:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7770be2f-95a3-43e4-a139-53984564db4a
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=80641c5f-09f0-439a-b061-677fc2e9d94b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9b:93:6d:22:c3:0a:5b:55:e6:6f:bb:6a:4b:
                    df:1f:66:59:06:c1:5b:18:e1:77:03:9b:bb:0c:99:
                    c1:e5:b7:80:dc:19:a3:44:18:67:f2:7e:96:37:0b:
                    64:ed:8b:4d:94:69:0d:ee:17:35:29:7a:c3:3e:b9:
                    c5:b7:b9:fc:09:10:f6:04:fc:fa:1a:1e:93:57:f7:
                    7e:a1:10:18:46:19:5e:b1:e5:c9:ee:57:58:ff:2c:
                    01:15:88:eb:16:5b:13:fe:22:80:b7:d5:63:4f:fc:
                    3b:ae:e8:6f:54:3f:c9:3a:56:ba:cf:9e:47:a4:b2:
                    ff:73:e0:66:3c:72:14:8d:32:65:34:47:87:c5:0e:
                    f5:0e:db:85:84:10:66:e0:e7:ca:8c:2d:c2:b9:5f:
                    ab:44:f1:3c:5b:8f:b8:43:62:97:69:7a:85:1e:42:
                    e3:80:98:3d:ca:3d:66:ea:e7:ad:41:67:2b:3c:ba:
                    c2:dd:0a:1a:dd:36:09:65:d6:65:c4:11:ca:ae:c8:
                    5a:bc:e0:4f:31:e4:c2:f3:8a:48:75:66:bd:70:be:
                    d4:a4:4d:5c:a8:53:29:e4:df:95:29:6e:50:0d:90:
                    13:3d:5b:ac:94:b0:88:1c:f5:28:24:db:75:f0:08:
                    b4:f2:76:53:ac:44:53:21:94:f8:86:58:1d:39:ba:
                    06:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F1:0D:41:99:00:F1:A9:EB:E5:BD:96:54:7A:27:B1:21:76:CC:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/8bfbe947-6130-3027-9160-9675c543f8da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/7770be2f-95a3-43e4-a139-53984564db4a.crl

            X509v3 Authority Key Identifier:
                keyid:8E:FC:B1:77:D6:58:1B:C2:CE:12:0D:5D:2A:E9:67:7A:33:C7:6E:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.213.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:8e:b4:f3:56:93:f5:f0:6a:06:bc:1b:d5:15:d6:d9:e7:d7:
         fe:85:c4:06:fa:88:f4:2e:f0:3f:e6:de:40:4d:51:bb:2f:f1:
         0c:c5:2f:6b:74:22:93:32:fc:c5:c5:e6:fd:9f:71:bb:b9:1b:
         61:2f:7d:e0:a2:2d:b5:d7:86:93:4f:8d:2d:f1:73:b5:a1:df:
         68:ab:57:f2:ad:33:ee:12:a5:4c:94:34:e7:0b:ca:0e:f7:b9:
         57:40:d2:81:e2:a0:11:68:86:0a:5b:25:d6:59:7d:f9:3c:22:
         43:bb:15:fc:37:29:34:fa:29:9a:b8:e2:4e:01:75:71:d6:b7:
         62:02:6f:b6:dd:79:65:ca:8d:43:ec:91:d2:ef:28:d4:89:e2:
         ec:f9:44:84:6c:77:ff:e6:b1:f9:86:44:2a:19:e2:9f:83:7d:
         cf:14:ea:d8:0b:5f:8e:62:54:a3:6d:54:5e:28:f2:bc:21:0c:
         50:99:13:4f:05:b5:59:6b:07:e1:d1:0a:ca:7b:98:f8:01:cd:
         64:2f:8f:2a:2e:81:02:d2:55:c9:e5:0a:ec:ad:1c:4e:69:52:
         bd:d1:6e:b5:1a:3e:8e:3b:f1:f4:b5:e2:55:db:a7:10:e4:bd:
         4c:50:15:8c:e3:de:5a:6c:d4:b9:d2:b7:04:d9:4d:d5:77:93:
         a2:69:cb:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:53:41 2026 by rpki-client