Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/1d2b4342-0945-32da-94ae-d69a5ae08fe4.roa
File:                     1d2b4342-0945-32da-94ae-d69a5ae08fe4.roa (raw, json)
Hash identifier:          SsbzV3uOWVJ3bSIuWKyecJNBpqZqT5AwXjedk4ta3DU=
Subject key identifier:   C7:54:A4:6E:78:FE:59:21:4F:BF:B4:BE:79:F5:8B:B1:2E:70:79:0E
Certificate issuer:       /CN=0a9d33e4-ed4d-4b47-b363-b42110f88557
Certificate serial:       010D0C9F4328584E6F3A21627D8C1CB0702F7600
Authority key identifier: 8B:65:0F:A5:8E:C3:A9:0D:82:74:8D:DA:2E:95:21:E2:D7:FD:DA:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/1d2b4342-0945-32da-94ae-d69a5ae08fe4.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     395214
IP address blocks:        172.82.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/0a9d33e4-ed4d-4b47-b363-b42110f88557.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/0a9d33e4-ed4d-4b47-b363-b42110f88557.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:21:62:7d:8c:1c:b0:70:2f:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a9d33e4-ed4d-4b47-b363-b42110f88557
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=7a8535a9-84b5-4e17-af89-16e9cf50b243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:4c:35:09:9f:7c:69:2b:2f:ff:f4:bc:c9:32:
                    15:86:80:52:d1:00:08:35:b5:e1:10:fe:14:77:a4:
                    5f:ba:56:37:41:b6:f4:ef:14:2a:8c:08:b1:07:d1:
                    cd:f8:a7:a0:24:f6:81:21:46:9b:18:b4:12:aa:6c:
                    ca:a4:95:63:d9:bd:5a:51:80:2d:b4:e0:85:f0:12:
                    97:37:7b:d3:35:4f:f0:2d:be:5b:9b:34:6b:2e:ae:
                    40:07:b1:98:73:08:31:1e:61:61:b5:7f:d2:35:21:
                    36:c0:1c:96:d4:44:72:a0:24:0c:e9:60:9b:7f:9a:
                    1d:65:c6:58:7a:f5:0f:85:8d:97:dd:14:df:d3:0a:
                    c9:67:45:da:e6:a9:06:d5:44:6d:62:dd:02:bb:4a:
                    f9:3e:36:4c:39:89:af:e2:e3:02:fc:e5:1c:35:d4:
                    c2:c1:88:2c:c4:2a:77:39:b1:b6:b6:eb:d0:ea:f6:
                    c9:7c:f8:31:19:d9:67:c2:7b:18:9e:3b:21:dd:62:
                    5e:fb:a8:7b:cb:db:38:5f:92:71:ae:e0:f8:63:35:
                    c0:7b:33:79:f0:f8:78:3d:70:79:72:dd:72:8d:a1:
                    38:51:8b:17:51:61:ba:40:2e:a3:ba:01:bf:c1:3e:
                    d5:90:bc:af:f7:4c:e9:df:a0:1f:b5:12:0b:6b:3d:
                    10:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:54:A4:6E:78:FE:59:21:4F:BF:B4:BE:79:F5:8B:B1:2E:70:79:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/1d2b4342-0945-32da-94ae-d69a5ae08fe4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/0a9d33e4-ed4d-4b47-b363-b42110f88557.crl

            X509v3 Authority Key Identifier:
                keyid:8B:65:0F:A5:8E:C3:A9:0D:82:74:8D:DA:2E:95:21:E2:D7:FD:DA:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:2f:a3:71:3f:b1:c7:13:85:6f:00:83:26:d9:36:3b:f0:b8:
         80:77:57:5a:a4:6c:3a:f0:3c:39:9e:4d:03:55:02:59:7c:d0:
         66:de:e3:e3:1e:49:de:17:34:27:14:ce:5f:71:e4:6a:01:fb:
         7c:7f:c3:34:75:3b:3e:98:a6:a5:99:b7:84:bc:0f:a7:32:7e:
         91:e8:a0:4a:25:a3:ee:d8:92:ed:81:6e:6f:b3:cd:bc:61:d4:
         a1:55:5e:5c:18:e2:4d:b1:c7:7f:f0:3b:5f:af:3b:8b:b9:26:
         3e:91:1f:c8:96:97:4e:7b:8c:87:fc:97:85:ed:99:c5:c9:f7:
         24:53:b9:b3:af:24:5d:07:6c:22:ae:36:8e:55:28:d1:f3:be:
         9a:3b:96:06:0f:bb:77:93:83:d1:56:60:95:3c:57:0b:1c:45:
         74:49:ca:04:a8:5b:dc:55:bb:d6:a3:ee:73:99:cc:19:20:c8:
         12:2a:ae:d0:7d:bd:ed:a0:1d:ce:c1:b1:b3:49:05:a2:e5:1a:
         32:91:65:af:fe:46:b7:54:35:f2:04:da:ba:a8:f4:ad:4e:ba:
         e0:8c:c6:0b:d4:1a:bc:2f:24:05:f1:0f:bd:6a:8b:75:6b:d8:
         32:02:2c:46:bb:93:f8:5c:51:17:98:31:f4:d2:4e:66:23:fd:
         2c:08:32:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:12:12 2026 by rpki-client