Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/550f69e7-3015-44b7-8bc9-3c320a530648/2c5c789c-7d76-3d03-a483-964cb1635ae5.roa
File:                     2c5c789c-7d76-3d03-a483-964cb1635ae5.roa (raw, json)
Hash identifier:          /JVkWKwFiTm8zPt80QW+21O6qEbJ+NNTcPiYb8SwT3M=
Subject key identifier:   C0:8B:C7:12:A1:98:9F:BE:45:27:63:3A:7C:D4:A3:04:32:F3:E2:40
Certificate issuer:       /CN=550f69e7-3015-44b7-8bc9-3c320a530648
Certificate serial:       010D0C9F4328584F23C25F9039082816956391A0
Authority key identifier: 45:28:13:3F:C4:1C:23:71:CD:91:62:43:D2:8E:38:EA:B7:84:40:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/550f69e7-3015-44b7-8bc9-3c320a530648.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/550f69e7-3015-44b7-8bc9-3c320a530648/2c5c789c-7d76-3d03-a483-964cb1635ae5.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     8075
IP address blocks:        208.74.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/550f69e7-3015-44b7-8bc9-3c320a530648/550f69e7-3015-44b7-8bc9-3c320a530648.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/550f69e7-3015-44b7-8bc9-3c320a530648/550f69e7-3015-44b7-8bc9-3c320a530648.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/550f69e7-3015-44b7-8bc9-3c320a530648.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:5f:90:39:08:28:16:95:63:91:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=550f69e7-3015-44b7-8bc9-3c320a530648
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=cd716054-5710-4c95-9b4b-aeaca0facc9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f0:e6:d1:21:59:c3:e6:8f:d7:98:be:35:61:
                    be:37:bc:63:f2:32:11:12:ba:ca:73:0d:e0:ed:05:
                    a6:0a:20:99:41:4a:9f:31:8a:f1:00:d7:7f:42:45:
                    ce:7b:1b:fc:9e:01:51:43:d7:f4:0f:d2:b3:ce:51:
                    c4:7e:e1:da:e8:d5:bd:37:5e:3f:d9:56:0c:7b:44:
                    ad:ea:b6:b0:64:f5:10:06:ea:d0:ce:1d:88:62:b5:
                    b9:ad:f6:be:36:0a:4e:9c:7e:be:9a:9e:d9:e7:0a:
                    68:08:4f:1f:94:02:b6:4b:cf:94:c1:1a:4b:9b:c8:
                    07:d0:da:af:c5:58:62:a9:91:12:a9:a6:61:85:34:
                    24:cd:7d:41:41:60:67:8a:ee:77:28:3f:f0:6a:23:
                    e8:32:62:d1:fe:af:85:96:80:23:ff:fa:7c:e5:44:
                    a2:5f:0e:ba:71:ca:d8:89:d5:53:f2:f1:56:76:87:
                    e6:02:6e:76:3f:4a:4e:b2:43:f1:ec:91:04:8f:13:
                    a1:16:c3:f8:03:62:eb:9f:5e:87:84:67:b4:93:09:
                    18:a9:1d:2c:d6:07:0f:8b:65:df:25:22:01:b8:95:
                    8e:3c:58:c2:62:2e:ca:c6:a2:5e:e0:66:7e:7b:c2:
                    a4:33:22:6f:a3:71:af:fc:bf:29:45:3a:07:ac:fd:
                    89:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:8B:C7:12:A1:98:9F:BE:45:27:63:3A:7C:D4:A3:04:32:F3:E2:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/550f69e7-3015-44b7-8bc9-3c320a530648/2c5c789c-7d76-3d03-a483-964cb1635ae5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/550f69e7-3015-44b7-8bc9-3c320a530648/550f69e7-3015-44b7-8bc9-3c320a530648.crl

            X509v3 Authority Key Identifier:
                keyid:45:28:13:3F:C4:1C:23:71:CD:91:62:43:D2:8E:38:EA:B7:84:40:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/550f69e7-3015-44b7-8bc9-3c320a530648.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.74.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:f2:05:e7:ff:87:a9:79:84:c2:12:c7:83:67:10:03:f9:f6:
         35:78:bc:63:5d:4c:c8:32:46:9a:39:d5:43:29:be:d8:d7:10:
         c0:07:89:65:92:45:f8:99:43:07:37:51:91:29:3a:44:bc:3b:
         66:28:65:e2:60:33:fd:0d:8e:b7:0a:b5:70:5b:60:36:36:69:
         80:5b:6f:f5:0d:57:db:4b:c2:2f:72:fd:ca:65:1e:b7:fb:9b:
         90:cb:ff:76:2a:1c:07:c7:6d:3e:4b:d4:9b:bf:81:32:0c:63:
         67:10:e9:59:e7:c7:47:70:fe:43:f3:84:6d:f2:ea:38:97:f2:
         9f:e4:48:77:16:21:7c:1d:85:4b:45:52:52:51:ba:f1:f8:e5:
         b6:71:72:58:d0:a4:77:41:a3:46:62:06:ce:99:47:09:a7:3f:
         62:4c:7c:97:88:cd:31:89:77:11:23:f9:6c:68:89:13:96:c3:
         a4:5a:0c:bb:bc:ec:ce:87:a8:61:b6:dc:6d:54:ef:8a:01:ae:
         7d:86:35:43:06:d9:f8:e0:c4:cd:58:46:9a:7c:66:37:63:30:
         a9:9d:80:20:28:93:20:64:eb:bb:5a:9e:60:da:e3:07:ae:f9:
         e1:ec:01:e7:eb:c5:e2:f7:08:d5:d0:48:30:e2:60:4e:25:c9:
         09:d6:e5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:47:33 2026 by rpki-client