Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fff213e1-4c40-384e-a94d-b128794724e5.roa
File:                     fff213e1-4c40-384e-a94d-b128794724e5.roa (raw, json)
Hash identifier:          jPRHqoamHhFo7967LdNlLjEm78oEOOJfKDPJNoHfcTM=
Subject key identifier:   02:E7:90:D0:79:72:E5:DB:ED:81:05:D6:50:FE:EB:BB:A3:BD:0A:27
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F49763D99FD758D156517B900
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fff213e1-4c40-384e-a94d-b128794724e5.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397630
IP address blocks:        208.52.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:3d:99:fd:75:8d:15:65:17:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ae88ffd4-fddb-4396-b6f5-e9ca127e6c84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b2:a9:95:bc:a1:1d:25:db:f2:40:0b:a0:da:
                    3f:96:0c:62:55:2f:ea:24:cf:b4:4f:d1:df:7b:7e:
                    01:8a:e7:d3:73:14:78:27:c9:7d:20:02:62:3d:13:
                    0e:9c:21:e8:8e:75:b9:30:35:7b:ce:29:35:6d:97:
                    f2:3e:12:2f:a0:3a:bc:2c:ca:42:50:93:96:53:fd:
                    fb:7d:42:fa:de:b8:eb:a4:f3:3a:3c:c0:c3:58:02:
                    bd:ed:11:15:a3:90:f2:af:0a:25:bc:ca:a1:f7:ab:
                    3e:e5:56:f5:af:05:51:73:62:69:e4:33:92:50:89:
                    f5:94:fe:4f:e5:39:61:14:77:22:68:f8:05:89:b7:
                    92:57:0c:2f:30:62:67:b8:6e:09:60:0c:3c:93:8b:
                    47:8f:d0:0e:ad:05:d7:ec:ea:f9:1c:9f:01:b8:03:
                    39:7f:bc:af:f8:0e:29:ce:37:6c:bf:8c:47:a5:4b:
                    8d:a8:c5:92:14:07:e9:84:dc:e0:19:9a:5d:38:cf:
                    9c:b8:ad:b5:10:e0:34:7b:bd:81:a8:45:ad:f2:c1:
                    ab:4a:5b:9e:d8:71:14:fd:29:ca:bc:69:89:15:72:
                    e0:78:09:69:66:d7:97:fc:b6:ca:9f:b4:cf:07:3d:
                    17:ac:69:d9:88:37:16:f8:3f:12:d0:86:71:aa:12:
                    71:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E7:90:D0:79:72:E5:DB:ED:81:05:D6:50:FE:EB:BB:A3:BD:0A:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/fff213e1-4c40-384e-a94d-b128794724e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.52.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:f7:84:59:c1:63:a4:fb:ac:84:4f:6b:7f:dc:a3:6a:47:e5:
         f9:45:f7:0a:b4:60:49:58:77:c6:0d:3a:cf:5c:3a:70:48:0a:
         94:17:2e:37:3a:df:cb:d7:34:04:5b:c7:29:87:94:95:a1:e4:
         a8:db:d5:99:e5:a5:0b:3c:61:79:29:9e:12:92:8d:a5:ab:c0:
         8f:a5:85:24:3b:6c:7f:80:e9:ed:e9:df:4f:4d:6f:21:95:46:
         f5:2a:87:35:01:4c:e6:8c:ac:c2:73:96:f9:43:36:fe:32:ae:
         e9:09:19:99:15:bd:88:49:bf:5a:5d:36:c0:d6:bc:ae:1f:3b:
         d0:4b:dc:ee:ee:f2:b9:c5:e9:53:db:bb:6c:e2:16:23:16:e8:
         f4:2e:c8:56:4c:44:40:a7:a9:dd:c3:fa:78:88:a9:f9:26:d4:
         2e:45:bd:14:29:0d:e4:2c:9e:f0:ab:6b:90:9a:9a:06:4b:94:
         97:bc:c9:7e:51:89:80:1b:39:c8:1b:45:99:e6:53:1e:19:95:
         92:99:18:ff:c1:64:2a:28:da:2b:cf:6a:2e:41:3e:7c:d6:ac:
         81:fd:b0:cc:39:f2:9b:51:ac:b2:c8:98:ce:ac:35:e9:29:86:
         91:39:3b:4a:09:ec:7a:10:fe:84:fd:9b:d3:ef:da:a6:28:30:
         a7:99:b0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:03:35 2026 by rpki-client