Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/4433889e-7469-326e-ba6b-e9db4a76686b.roa
File:                     4433889e-7469-326e-ba6b-e9db4a76686b.roa (raw, json)
Hash identifier:          AU/mM/JZr0X022fYNkG8A8mXhVgzB6CpiUpj+1aCSXk=
Subject key identifier:   02:3B:5B:8F:9E:FB:C7:D9:B5:2C:76:77:A7:F0:D8:43:81:3B:96:30
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584F498517C716EAB28C0CF29C80
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/4433889e-7469-326e-ba6b-e9db4a76686b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36040
IP address blocks:        208.117.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:85:17:c7:16:ea:b2:8c:0c:f2:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=abda9fca-a2bc-44b6-ac41-69ab835a8c76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:46:a7:e2:08:1b:f6:63:8e:5f:32:e5:f2:de:
                    66:a9:45:7d:31:43:25:34:ff:99:63:9a:f1:c8:1b:
                    89:4d:7c:92:f4:df:c1:04:77:30:a5:94:ac:e6:6b:
                    8b:d6:28:39:f6:27:17:da:93:f9:16:a7:75:4a:6c:
                    2f:7e:8c:b5:39:41:27:72:4e:d1:ad:63:bc:20:31:
                    3e:1b:0c:09:1c:a6:63:83:3c:a1:49:e2:63:31:0b:
                    89:f9:d1:a9:63:f4:17:86:41:f7:23:e3:36:d5:fd:
                    e8:14:c0:41:22:6b:85:7f:20:99:47:17:ad:57:90:
                    d2:bf:07:43:f9:8b:1c:24:d2:91:9e:9a:cf:af:07:
                    42:49:3e:5e:8d:d5:b7:05:3d:96:1c:11:5d:b7:8c:
                    88:69:27:e4:c0:59:8c:5d:86:ae:8a:56:08:bd:60:
                    43:52:25:d1:ef:c9:ec:61:6a:ab:80:2c:42:18:e6:
                    18:50:04:cd:40:30:fb:4c:08:c8:95:ca:03:a8:6a:
                    6a:1f:60:d7:13:ee:3f:da:83:f2:f5:46:e7:05:f5:
                    56:51:b7:e7:1a:f4:e1:28:75:11:30:a3:c6:bf:78:
                    3f:e3:62:5e:38:b8:94:bc:f7:42:a1:8a:fc:d2:80:
                    a2:bd:74:db:ae:7d:9c:76:08:34:23:e4:32:6b:68:
                    e6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:3B:5B:8F:9E:FB:C7:D9:B5:2C:76:77:A7:F0:D8:43:81:3B:96:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/4433889e-7469-326e-ba6b-e9db4a76686b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:27:ef:85:70:42:68:11:29:aa:ad:13:6c:11:5f:54:3a:65:
         00:8e:dc:8c:be:71:20:c6:16:77:cb:c8:14:85:db:cf:4c:a3:
         b7:b2:7c:d7:2d:6e:61:b1:57:82:c6:63:38:b8:19:a2:1d:af:
         ec:70:74:8a:59:84:a3:cd:1b:c6:9e:50:f6:ff:d8:f3:48:98:
         d8:65:9a:f3:82:41:a5:b7:e5:22:06:db:71:09:32:85:c8:59:
         51:c7:de:c8:64:36:80:22:2a:ee:e9:1e:a8:ca:c3:26:ea:96:
         3d:9b:41:e6:d9:be:9c:c9:0b:75:70:60:fa:cf:41:b8:4a:de:
         b1:90:11:50:25:a2:d3:78:a3:cb:af:de:06:14:ff:80:cb:28:
         ab:83:12:00:5f:d8:1d:80:67:7e:a7:13:4c:a6:d9:e3:56:ac:
         59:30:fa:ab:01:22:a6:87:ea:d3:23:9f:cb:ce:61:cd:6d:0a:
         b2:11:49:4c:f4:e3:c9:5a:d4:63:4c:97:ba:64:31:46:b1:2c:
         6b:72:4c:b3:74:2d:ce:ea:1a:38:77:00:c5:73:f8:82:c5:ad:
         55:32:75:d5:6e:76:6c:f8:5f:5d:c6:fc:e7:0a:28:75:60:ff:
         f7:9f:09:27:85:10:3e:4e:2d:c8:d6:8a:fa:b4:62:a8:2c:ee:
         d7:cc:4b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 22:40:28 2026 by rpki-client