Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a8579d4c-326d-3f42-998f-58f0c234c392.roa
File:                     a8579d4c-326d-3f42-998f-58f0c234c392.roa (raw, json)
Hash identifier:          SfX9ro1c70iMTO1rVYBhgwlp1ZaEy93JqUkGIk2TiM0=
Subject key identifier:   DA:CD:8D:AC:85:C5:27:79:7D:64:7F:8B:D4:05:87:27:7D:9D:85:CA
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584E9A7FEEA6D22BDDFD54E83D70
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a8579d4c-326d-3f42-998f-58f0c234c392.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     54252
IP address blocks:        208.89.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:ee:a6:d2:2b:dd:fd:54:e8:3d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=90b56147-91bc-4c91-b697-b623ec0d8238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2d:50:83:62:d2:01:c6:a7:6a:23:e5:1c:ef:
                    bd:7b:a3:83:ab:90:ef:fe:af:53:93:59:5a:53:3a:
                    5c:6e:87:ed:0b:e3:a1:c6:31:75:14:16:5d:14:cf:
                    e5:1f:ad:d2:de:7c:b4:58:41:68:53:c5:20:ef:9b:
                    94:a5:48:7d:5c:19:c8:ca:6d:fa:c9:2a:75:87:f0:
                    99:e0:b6:03:11:d4:b0:17:0b:5d:4e:ea:15:52:bc:
                    85:3a:68:6a:ce:35:73:b9:ca:5a:72:b2:55:d7:0c:
                    ed:3f:be:ff:41:0d:2d:d3:47:70:b5:b2:f5:94:fe:
                    b5:81:d4:5b:43:3e:1c:23:26:18:d0:17:d6:1a:d1:
                    6e:49:46:63:47:df:64:6a:d0:35:7e:a0:c3:08:bf:
                    2c:77:48:ba:6a:59:7f:7c:22:b9:f5:e9:4d:1a:b6:
                    48:6a:6e:30:fe:03:b0:6a:58:0a:90:1f:ab:88:5e:
                    d1:32:b9:6b:41:a3:eb:e1:fd:0a:b2:06:7d:69:54:
                    31:5e:ca:21:23:9b:03:4a:e6:42:a3:b4:d2:6a:fe:
                    5e:ec:95:b1:e6:71:bd:d2:6a:73:dc:c6:8a:36:13:
                    52:86:f0:48:1c:cb:8b:91:f2:52:6b:7d:98:7e:fc:
                    7e:01:e7:a7:aa:33:ed:c5:98:ad:9e:02:55:ae:98:
                    ac:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:CD:8D:AC:85:C5:27:79:7D:64:7F:8B:D4:05:87:27:7D:9D:85:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a8579d4c-326d-3f42-998f-58f0c234c392.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.89.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e0:37:4b:a5:30:54:30:23:23:43:72:1b:5b:7f:96:a3:a9:08:
         44:b0:ee:bc:ff:08:79:81:92:26:44:7d:bc:d2:2a:3c:a0:a5:
         69:55:68:f1:b5:0a:49:44:b1:63:9a:a6:57:51:82:74:d6:f6:
         e4:1c:c4:4c:c3:65:0c:0c:d8:d6:8c:30:30:f3:5f:2e:1b:6f:
         b0:fe:b7:6e:5b:c0:7a:51:4e:80:f7:f3:4c:49:15:e2:65:c1:
         90:62:70:39:8e:bf:66:6e:51:ba:fd:28:59:e8:43:f6:5c:ca:
         95:a1:91:da:d6:38:e9:70:c6:cf:d4:03:c0:53:c2:12:30:30:
         01:7f:fb:3c:29:bc:6c:6a:ef:b9:26:20:e5:d5:c0:a6:05:da:
         fd:de:af:bc:76:4b:9c:7d:47:5a:3c:e7:29:6b:8d:64:c8:dd:
         74:8c:b2:54:b4:26:7f:65:bd:2e:60:cb:7f:b2:b2:f3:53:02:
         87:0d:51:2e:c3:f1:64:3a:4a:25:2b:f2:43:17:53:f1:8b:e4:
         32:01:1e:6d:ef:15:30:49:28:c5:1e:1a:0b:37:6b:c3:e6:53:
         b3:b2:68:9e:b7:bc:aa:30:9d:51:44:06:2d:91:ba:3f:12:a2:
         93:c1:70:c0:7a:58:1a:d6:94:c4:66:a2:12:27:bb:ff:02:f0:
         44:46:b2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:10:07 2026 by rpki-client