Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/297a377c-fdb4-3fdf-8c41-6bbe3d623ce8.roa
File:                     297a377c-fdb4-3fdf-8c41-6bbe3d623ce8.roa (raw, json)
Hash identifier:          a+8p83aA2KHF/VT67k5BObEQirdVot5a8a+lRTi/iUU=
Subject key identifier:   A7:50:56:65:56:BE:39:7E:44:25:5B:0D:4C:1A:60:1C:E0:D9:D8:41
Certificate issuer:       /CN=445edff1-360d-4ae2-a045-ccf7dbc4beeb
Certificate serial:       010D0C9F4328584DA3E55CBE04DAAF682680A280
Authority key identifier: 00:B7:C6:A7:48:8A:12:60:2D:94:01:4C:B0:5E:88:88:58:B0:51:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/297a377c-fdb4-3fdf-8c41-6bbe3d623ce8.roa
Signing time:             Mon 27 Apr 2026 01:00:24 +0000
ROA not before:           Mon 27 Apr 2026 01:00:24 +0000
ROA not after:            Sun 26 Jul 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        208.89.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a3:e5:5c:be:04:da:af:68:26:80:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=445edff1-360d-4ae2-a045-ccf7dbc4beeb
        Validity
            Not Before: Apr 27 01:00:24 2026 GMT
            Not After : Jul 26 01:00:24 2026 GMT
        Subject: CN=06d20fae-5139-4dbe-bd04-71bf983d92dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:02:91:b3:b0:b8:a7:d2:76:16:7f:11:4a:80:
                    95:7e:14:e8:27:82:d0:8e:76:4c:28:e9:10:56:c9:
                    46:6d:53:ec:66:3c:53:1e:e5:d9:62:03:0d:30:52:
                    7a:de:84:c9:1e:a2:39:cf:ca:69:9a:4c:6a:17:63:
                    68:bf:71:86:7b:da:66:f3:30:13:2a:f2:4f:ec:7a:
                    9b:08:55:48:f0:74:76:dc:5c:5c:5c:0a:12:82:83:
                    5e:66:c6:e5:b9:67:17:db:3e:9a:2f:1d:39:aa:48:
                    58:a3:cc:cb:e3:2e:3e:ba:66:b5:92:8e:7e:b9:09:
                    78:d0:4d:61:3a:7e:7d:92:57:f7:ae:f3:e8:44:d5:
                    45:71:87:5e:e7:b9:1a:5b:63:fe:f5:80:b3:e4:3b:
                    50:0b:cd:d8:81:31:ff:f7:a3:df:2c:84:32:a9:17:
                    e1:82:ce:6e:fb:9b:85:7e:72:a4:3c:4e:7d:e7:09:
                    8f:57:93:d7:93:98:87:44:84:ce:0d:2e:21:ab:33:
                    7e:1a:98:87:5e:0b:aa:dd:32:32:48:fc:d8:b9:25:
                    bc:bf:dc:b7:c8:fa:83:8a:1e:8d:00:3d:3d:dd:91:
                    4c:83:db:2a:07:d9:ea:6e:db:0a:cd:96:67:c8:68:
                    29:6b:4f:78:f6:59:b8:c6:37:7d:11:dd:22:c0:86:
                    81:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:50:56:65:56:BE:39:7E:44:25:5B:0D:4C:1A:60:1C:E0:D9:D8:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/297a377c-fdb4-3fdf-8c41-6bbe3d623ce8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.crl

            X509v3 Authority Key Identifier:
                keyid:00:B7:C6:A7:48:8A:12:60:2D:94:01:4C:B0:5E:88:88:58:B0:51:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.89.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:ef:76:70:f9:93:aa:e6:99:24:ef:4d:f5:75:59:33:d7:1c:
         b7:e1:af:ec:a7:1a:83:9f:38:a4:fb:a6:b4:7a:5e:54:e6:7c:
         0c:5f:8c:6e:3e:d4:0f:6c:c2:68:61:62:6f:1f:29:44:a5:9a:
         ce:95:60:b4:2e:e1:09:76:cc:50:15:2a:a6:05:0b:21:6f:00:
         10:e4:2b:86:fa:5b:c5:da:15:7d:d6:21:97:80:58:8a:30:9d:
         e4:1a:c7:35:b8:71:7b:1e:b1:24:28:85:7b:58:93:ec:37:b6:
         ce:fb:74:2e:f5:ee:4c:63:e4:0c:94:15:73:91:50:75:a1:f3:
         10:c4:ac:8b:e1:ae:1c:fe:de:ed:30:05:ed:eb:2e:af:6b:84:
         58:7d:95:e1:12:17:50:fd:5d:bf:0d:09:c7:0f:45:bf:72:55:
         bd:c5:4d:5b:75:cc:01:aa:3d:8b:02:a8:d9:f3:6d:54:32:06:
         80:a4:00:10:16:97:ce:40:49:28:39:3b:b3:c4:1c:1c:3d:c5:
         01:0f:8d:9b:d8:cc:5b:2a:0e:d9:59:79:17:4a:e0:58:28:11:
         67:76:e1:96:46:4f:ab:15:b5:e0:44:4f:dc:f5:cb:0a:6e:0e:
         7c:e5:ef:18:d2:63:c8:44:b7:e9:a2:81:fa:0b:2d:ab:b7:14:
         57:d4:58:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:02:13 2026 by rpki-client