Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fd73a5f0-beae-449b-9f3f-c7c8dbf3038c/f2debf41-b6dc-3faa-80ac-7098ab3a09ba.roa
File:                     f2debf41-b6dc-3faa-80ac-7098ab3a09ba.roa (raw, json)
Hash identifier:          gzESqKsmrTnuaPvIj33MEwz/hfNaT+CR2RGWh7RPcyI=
Subject key identifier:   F9:30:D5:74:54:73:4D:73:A9:47:3B:74:BD:68:09:0A:75:49:BB:CB
Certificate issuer:       /CN=fd73a5f0-beae-449b-9f3f-c7c8dbf3038c
Certificate serial:       010D0C9F4328584F42949059507D5015F5B13D10
Authority key identifier: F8:2F:31:83:29:E8:A9:A3:49:AF:63:39:A1:26:88:1F:BD:C5:6C:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fd73a5f0-beae-449b-9f3f-c7c8dbf3038c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fd73a5f0-beae-449b-9f3f-c7c8dbf3038c/f2debf41-b6dc-3faa-80ac-7098ab3a09ba.roa
Signing time:             Tue 22 Sep 2026 13:58:08 +0000
ROA not before:           Tue 22 Sep 2026 13:58:08 +0000
ROA not after:            Mon 21 Dec 2026 14:57:51 +0000
asID:                     11374
IP address blocks:        208.77.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fd73a5f0-beae-449b-9f3f-c7c8dbf3038c/fd73a5f0-beae-449b-9f3f-c7c8dbf3038c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fd73a5f0-beae-449b-9f3f-c7c8dbf3038c/fd73a5f0-beae-449b-9f3f-c7c8dbf3038c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fd73a5f0-beae-449b-9f3f-c7c8dbf3038c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:94:90:59:50:7d:50:15:f5:b1:3d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd73a5f0-beae-449b-9f3f-c7c8dbf3038c
        Validity
            Not Before: Sep 22 13:58:08 2026 GMT
            Not After : Dec 21 14:57:51 2026 GMT
        Subject: CN=d76f8da6-2455-493c-87c7-e0fe1e1f5657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b3:b1:83:ea:53:46:0b:79:14:8a:65:cf:9d:
                    ee:80:2d:6f:4f:7b:fa:b8:d9:a2:f8:39:b4:3a:00:
                    02:08:fa:84:56:61:57:5a:50:b7:9f:5b:c5:91:ea:
                    ff:48:ca:2e:7f:16:23:f2:e6:96:be:01:32:53:28:
                    51:4f:3e:b9:51:d4:f7:5e:57:00:47:d4:49:55:ab:
                    77:c4:1f:39:eb:e6:8e:1c:43:50:7c:09:2d:48:18:
                    53:2d:c8:30:a9:f2:e2:f1:66:a9:ca:2b:2f:d7:87:
                    1b:37:0b:ea:6e:69:95:26:c3:45:9f:11:9a:11:80:
                    c7:6a:ce:eb:f3:1a:af:d9:64:10:ba:15:ac:58:f1:
                    ea:39:56:33:4f:77:ae:6d:b0:74:7c:9e:2d:12:93:
                    1c:bc:3d:8c:37:39:fe:99:a2:e2:31:b1:d9:6f:62:
                    74:a9:e4:9e:ee:27:d2:16:68:7b:2b:33:dd:dd:c4:
                    73:07:b9:c9:12:da:9f:00:b7:fc:a4:38:c5:45:92:
                    8e:3e:47:06:85:59:5a:ab:89:d7:e0:be:9a:52:af:
                    57:70:8a:33:36:9f:46:e7:6f:f2:59:e5:fe:8a:ec:
                    3d:9c:94:1b:ee:09:09:e5:a8:dd:cf:68:06:15:96:
                    b5:c0:09:f1:bc:0b:83:88:b9:bd:6d:23:0f:c1:f1:
                    97:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:30:D5:74:54:73:4D:73:A9:47:3B:74:BD:68:09:0A:75:49:BB:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fd73a5f0-beae-449b-9f3f-c7c8dbf3038c/f2debf41-b6dc-3faa-80ac-7098ab3a09ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fd73a5f0-beae-449b-9f3f-c7c8dbf3038c/fd73a5f0-beae-449b-9f3f-c7c8dbf3038c.crl

            X509v3 Authority Key Identifier:
                keyid:F8:2F:31:83:29:E8:A9:A3:49:AF:63:39:A1:26:88:1F:BD:C5:6C:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/fd73a5f0-beae-449b-9f3f-c7c8dbf3038c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.77.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:c4:94:86:1e:95:bb:a7:1e:27:93:eb:f2:85:f3:77:6d:43:
         fe:14:06:9f:0f:4e:41:6d:4b:ec:7b:62:30:3b:3a:69:ee:82:
         e1:e8:bb:42:d9:c0:70:40:f8:ab:85:bc:e3:1d:38:07:b2:8b:
         73:aa:47:e6:f8:cc:a0:f7:b2:27:72:ce:27:e4:c8:24:91:aa:
         48:d2:39:62:55:a2:2f:f5:1c:4d:0f:0a:ff:92:9e:48:5f:3b:
         5b:ff:e0:ea:61:8d:55:4f:26:bd:a2:6b:34:54:ed:3f:0a:14:
         a9:3c:25:81:fb:26:e3:8a:9a:42:b0:dd:01:6c:60:45:88:0b:
         23:5f:2e:b6:71:01:a9:b1:d5:e1:c3:61:49:2a:5a:7e:16:78:
         49:18:77:d7:de:d3:54:d9:a5:55:61:55:46:ee:e6:81:ac:e7:
         02:a9:12:78:08:c0:60:29:62:62:9d:dc:26:df:d0:92:f0:cc:
         05:30:8b:22:9d:bb:e9:ed:6d:7b:26:ed:06:f0:55:2d:6c:2e:
         0d:fa:14:c0:e1:d6:90:f2:6e:aa:b1:be:f0:e2:ab:02:03:74:
         91:f0:c4:52:bb:2d:b3:6f:c2:d2:97:85:3b:ec:38:ef:6d:eb:
         54:f6:cb:a1:6e:6d:72:51:3c:72:ff:43:f4:65:72:34:e6:88:
         45:f1:51:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:59:49 2026 by rpki-client