Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/768e78e5-c604-3310-be60-7daa7a1eafb4.roa
File:                     768e78e5-c604-3310-be60-7daa7a1eafb4.roa (raw, json)
Hash identifier:          gsZAtnK9nn4hH6/XwmgxN/ghzJQOTRA9sNwTZgRApFE=
Subject key identifier:   27:13:B1:9E:DD:28:16:20:DC:88:07:1B:7A:CF:31:F0:CF:EE:1B:19
Certificate issuer:       /CN=445edff1-360d-4ae2-a045-ccf7dbc4beeb
Certificate serial:       010D0C9F4328584E89BF8F653AFF8AD9E0213680
Authority key identifier: 00:B7:C6:A7:48:8A:12:60:2D:94:01:4C:B0:5E:88:88:58:B0:51:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/768e78e5-c604-3310-be60-7daa7a1eafb4.roa
Signing time:             Sat 18 Jul 2026 09:00:12 +0000
ROA not before:           Sat 18 Jul 2026 09:00:12 +0000
ROA not after:            Fri 16 Oct 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        208.89.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:89:bf:8f:65:3a:ff:8a:d9:e0:21:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=445edff1-360d-4ae2-a045-ccf7dbc4beeb
        Validity
            Not Before: Jul 18 09:00:12 2026 GMT
            Not After : Oct 16 09:00:12 2026 GMT
        Subject: CN=c39592a2-bcd0-43ef-846d-09ab6f2c34eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:60:40:ae:41:b4:c6:08:de:4a:0e:95:c8:4d:
                    80:dc:4b:c2:de:08:12:40:55:61:a9:7a:5a:d4:cc:
                    43:c6:40:80:20:f7:a6:02:59:33:31:22:53:7f:7e:
                    16:9d:29:6e:5a:ca:ac:96:83:f5:26:1c:fe:a3:20:
                    23:27:32:db:6b:ed:e6:4d:82:7e:4b:a9:52:f3:92:
                    8f:ac:ee:65:c9:36:ee:31:eb:69:c0:42:8d:72:d6:
                    c9:9b:a0:42:4c:86:42:2d:e2:6f:7d:72:52:c1:22:
                    c9:3d:4a:3a:ac:60:57:7c:c3:d9:a2:0f:fc:60:d0:
                    33:85:89:c3:21:22:50:ca:a3:86:09:bd:2a:cb:c4:
                    aa:53:d1:60:a7:4c:f3:45:7e:3f:27:0b:33:7b:27:
                    77:37:09:2f:e9:a5:06:fe:e7:6b:dd:16:09:a8:56:
                    87:67:f0:88:ad:46:63:61:0b:0d:26:1c:eb:54:0b:
                    a5:07:0a:0e:9a:58:83:ab:44:95:2e:98:81:49:c0:
                    21:da:2a:5c:c3:8f:9d:ac:af:80:2a:d8:7a:11:b9:
                    d5:bf:b4:48:2a:87:42:7a:91:a4:96:8a:0f:0e:9c:
                    b4:e4:89:8c:8a:a0:9d:9b:66:05:c2:64:c6:7f:4f:
                    d7:18:27:4c:ad:c3:e3:f0:6c:1d:99:d3:51:16:bc:
                    2a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:13:B1:9E:DD:28:16:20:DC:88:07:1B:7A:CF:31:F0:CF:EE:1B:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/768e78e5-c604-3310-be60-7daa7a1eafb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.crl

            X509v3 Authority Key Identifier:
                keyid:00:B7:C6:A7:48:8A:12:60:2D:94:01:4C:B0:5E:88:88:58:B0:51:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.89.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:94:92:d5:68:df:1c:e1:58:11:be:48:e3:d4:a9:dc:dc:94:
         cc:8b:38:e0:36:76:e8:43:19:cc:9f:49:46:a0:4e:2a:41:22:
         17:9b:9b:99:2d:fb:1b:f4:03:bf:c8:96:a8:02:24:c4:2d:6f:
         6a:fb:d8:2d:66:be:5e:40:26:7a:f0:c3:24:a0:1a:50:87:ba:
         4d:25:fa:b9:ce:66:03:e7:2c:a3:04:17:aa:f4:2f:94:7f:2a:
         bc:08:3d:7c:f8:17:19:cb:7d:4e:0e:ef:36:d6:09:6b:17:58:
         ec:55:37:22:a2:af:9c:ed:b1:fb:f0:04:61:f9:9b:31:ee:e0:
         67:6f:2f:e3:0b:7b:32:f3:75:04:b1:00:93:fc:b6:4c:f8:04:
         9b:83:8d:c8:3f:6b:67:8b:34:d9:97:66:27:69:71:2b:b8:3a:
         9b:ac:bc:bb:9c:20:c0:86:49:9f:8a:bf:b0:a3:ca:81:31:05:
         11:c2:53:30:8f:ea:59:d4:15:b5:d2:28:09:25:34:40:3b:c8:
         e5:6e:39:94:82:19:89:5a:cc:c8:3a:cf:31:78:a6:c2:f9:5e:
         4c:4f:97:28:e0:3c:4e:0a:37:1b:7f:54:61:35:82:74:17:06:
         81:38:33:68:47:9e:10:b1:60:4a:2e:91:aa:c7:2d:64:2e:d2:
         1f:f8:2e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:33:26 2026 by rpki-client