Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/007573df-7a6e-3a8c-9096-c1e74084e70f.roa
File:                     007573df-7a6e-3a8c-9096-c1e74084e70f.roa (raw, json)
Hash identifier:          23kiqpR+/4e1uNYZRsb2Mkc5d/q9i8elHCfm2aloNi8=
Subject key identifier:   E6:3F:E6:E4:69:49:5B:FF:CB:AC:58:8B:A8:CF:15:15:15:1F:D3:37
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584F497D1D56FE4C11316BCBFC70
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/007573df-7a6e-3a8c-9096-c1e74084e70f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36040
IP address blocks:        208.117.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7d:1d:56:fe:4c:11:31:6b:cb:fc:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=3a6c9804-282b-4962-8076-60f2cf9f567f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4e:ac:26:f6:54:3f:56:95:ce:e6:5a:97:25:
                    1a:6f:46:d9:dc:7e:75:5e:87:4e:22:ce:f2:30:d7:
                    68:41:ea:a4:7d:3e:04:fc:56:ef:64:71:5f:f2:82:
                    41:15:4c:31:02:d4:d3:f0:18:7a:29:c5:55:9d:5c:
                    5c:d3:a8:67:41:42:23:0c:58:63:61:a3:5c:a7:cd:
                    24:64:cc:f7:a7:20:c4:20:bd:13:63:4d:29:58:2c:
                    cd:b7:26:6a:38:09:8c:69:b1:ea:e6:77:35:67:d3:
                    12:0f:48:9e:51:74:f9:ae:e6:ae:94:2b:06:bb:62:
                    6b:71:f5:1b:c7:03:aa:77:ec:e5:64:f5:07:de:ed:
                    e9:82:a4:00:f3:ab:52:12:74:6a:77:da:ba:98:f2:
                    34:24:02:fc:19:a7:db:b5:a1:35:ec:45:d1:29:14:
                    c8:39:f7:d4:44:f5:35:77:58:26:cd:2c:8c:5b:2d:
                    86:69:8c:ba:e2:a8:7e:35:37:ea:c9:36:e8:db:f7:
                    22:71:55:04:64:bf:6a:27:2a:9c:fc:3e:e5:00:6b:
                    ea:23:d5:47:b2:9f:69:ee:41:43:6f:9d:22:12:08:
                    71:82:a4:09:fd:0b:29:f5:1e:05:db:8b:32:78:cb:
                    0a:34:52:1c:05:49:a2:e5:d6:44:f1:be:d7:e0:9d:
                    ad:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:3F:E6:E4:69:49:5B:FF:CB:AC:58:8B:A8:CF:15:15:15:1F:D3:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/007573df-7a6e-3a8c-9096-c1e74084e70f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:65:eb:20:ae:0d:65:24:d6:8d:05:d2:8e:16:43:a9:a6:c8:
         aa:b4:ca:70:d5:8c:9e:fe:54:60:1f:84:76:01:bb:cf:5f:e0:
         b4:f2:b3:5c:67:1b:1a:fe:a2:60:38:22:1d:fd:a5:25:3b:83:
         5a:4c:44:a7:08:59:94:f4:08:23:b6:bb:47:3c:9e:ea:71:28:
         9e:87:c5:83:dc:fc:5c:8a:c3:bb:a3:08:58:9a:2b:e1:f4:f2:
         f9:ae:3e:af:f3:9b:93:a3:0d:61:f1:2d:96:b8:f3:6d:67:ea:
         84:bd:30:b5:ce:43:a1:80:4b:99:dd:98:b8:b6:e6:f9:17:ef:
         62:9e:50:60:57:cb:34:50:ce:76:8f:9a:d0:7d:79:86:6b:d3:
         a1:ac:b7:d5:33:20:6b:2a:ac:fd:aa:0d:ca:c6:4d:b8:5b:41:
         48:25:db:78:0c:8f:df:1c:f1:bf:5e:bf:50:6a:e8:6f:6b:af:
         d3:87:c4:b2:29:4e:a3:d1:48:b3:0e:da:8e:53:45:2e:dd:32:
         2a:49:44:45:ec:31:9c:d4:8c:df:02:bd:3a:ca:15:75:b2:1e:
         97:a1:06:7b:5d:40:52:dc:dc:f1:31:0a:70:fd:0d:3d:f8:61:
         73:31:93:51:1a:3d:47:6a:51:a5:1d:de:b5:50:3d:04:3d:d3:
         be:f3:b7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:44:38 2026 by rpki-client