Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/291f8723-5bb1-39f4-85dc-4095ea0cc216.roa
File:                     291f8723-5bb1-39f4-85dc-4095ea0cc216.roa (raw, json)
Hash identifier:          7wyZJXF3cxnpui5DyJpVGxNttWMnJ0LV2gSalV1EBxc=
Subject key identifier:   7A:D5:A9:4C:48:E7:CE:7F:C3:C8:FE:2F:08:87:77:A0:70:8D:B2:15
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F50AD23B4A6F15EB2429ABDB0
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/291f8723-5bb1-39f4-85dc-4095ea0cc216.roa
Signing time:             Sun 27 Sep 2026 15:08:58 +0000
ROA not before:           Sun 27 Sep 2026 15:08:58 +0000
ROA not after:            Sat 26 Dec 2026 16:08:58 +0000
asID:                     62904
IP address blocks:        173.44.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:50:ad:23:b4:a6:f1:5e:b2:42:9a:bd:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 27 15:08:58 2026 GMT
            Not After : Dec 26 16:08:58 2026 GMT
        Subject: CN=a1c822f4-b189-49fe-8daf-6e4ab0834721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:39:bd:58:53:b6:86:65:ee:a3:c4:a7:ee:dd:
                    95:93:7c:61:3a:cf:50:d2:61:11:6d:f1:59:5c:b5:
                    a9:c1:fe:0c:76:70:5f:ee:91:e4:a1:bd:cb:b3:d5:
                    8d:4c:bc:47:51:51:ea:b4:e3:23:61:2b:f1:69:37:
                    36:8f:ed:e1:9a:9d:43:f5:31:97:8d:d5:ce:40:d5:
                    5d:f5:d0:70:2f:6e:8f:12:08:e5:84:3b:01:1b:82:
                    e1:7e:16:0d:63:28:cc:31:38:3e:0d:93:d8:40:85:
                    f8:c2:82:1c:ff:27:0a:fb:f6:46:31:fb:c6:b7:81:
                    27:74:45:12:e2:8e:d2:70:d3:f7:17:4c:69:08:59:
                    46:01:2c:80:7e:4f:cb:89:5c:88:6a:d0:d7:5b:a2:
                    c6:c4:6e:58:5d:5f:f4:e2:ee:e8:02:f5:7e:58:1d:
                    64:04:20:a8:9a:97:f5:c8:a2:ca:82:88:17:df:25:
                    f3:ce:4e:57:5e:ca:ce:91:0e:d0:d6:13:64:4b:e4:
                    65:e8:6e:db:de:64:3c:07:5f:a5:81:cd:0c:7f:02:
                    f3:04:e9:28:cf:0a:5f:cc:44:c0:96:dd:d5:b0:fa:
                    5b:0b:7f:c3:63:70:7d:a5:f8:f0:d3:d1:e2:22:1d:
                    20:27:4d:67:54:d0:1e:0a:f7:c0:c1:0e:18:36:a6:
                    21:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D5:A9:4C:48:E7:CE:7F:C3:C8:FE:2F:08:87:77:A0:70:8D:B2:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/291f8723-5bb1-39f4-85dc-4095ea0cc216.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.44.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:33:9a:41:12:ae:57:7c:b0:64:c5:05:5a:d4:6e:2d:61:72:
         d1:84:fe:b4:b8:95:77:09:c5:0c:5a:54:1b:43:bf:6b:a7:32:
         a4:93:4a:40:d6:b6:dc:7d:ed:ab:c3:89:2d:33:d2:a9:17:f5:
         b4:80:9c:57:99:3a:a1:4e:9e:35:41:45:b7:31:5b:cd:79:78:
         eb:ca:c5:ed:fa:57:de:cd:ad:3d:16:ab:51:17:35:3d:a0:15:
         47:ad:37:96:2b:ce:68:23:b9:93:03:ce:5d:6a:ef:d0:68:a9:
         8c:f0:94:08:78:9f:f4:44:b6:37:32:5a:13:1e:50:8e:73:54:
         45:6a:f4:39:de:b8:cd:0d:ca:16:95:74:2b:18:32:a6:ac:17:
         90:9a:3a:e5:e9:41:9e:90:28:97:9e:f7:54:51:7f:18:7c:44:
         f0:4c:a3:36:73:80:48:6d:43:af:50:8c:86:12:26:23:9a:c2:
         f8:5d:bd:4e:c1:83:90:45:4b:3f:06:da:94:dc:8e:f5:a7:6f:
         67:18:a7:e6:dc:3e:12:2d:16:b2:4c:1e:2f:26:2a:20:cb:80:
         a1:e3:e9:cf:ff:27:23:20:ce:5d:d1:89:75:6c:3b:3d:e1:7c:
         8a:4c:85:57:0f:b8:ae:60:44:27:59:f6:a6:80:49:4a:6f:65:
         e1:e0:ab:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:26:56 2026 by rpki-client