Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/890db329-2478-3442-b6b3-ec84331a6a0a.roa
File:                     890db329-2478-3442-b6b3-ec84331a6a0a.roa (raw, json)
Hash identifier:          HZf9z9dQMtLtU0I6997gB7kqxY/TxVAiaYV1yH5VvxI=
Subject key identifier:   21:41:A3:5B:5D:A5:5A:2F:2C:B5:ED:A8:B2:9E:1D:D6:3D:D2:AB:FF
Certificate issuer:       /CN=9822150f-2e6f-4fc9-b0d3-5a8e0903b333
Certificate serial:       010D0C9F4328584E4C54903E260E26DF15DCAD80
Authority key identifier: E8:FB:53:43:63:09:90:50:5B:E8:A4:C4:4A:09:BC:46:9B:50:73:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/890db329-2478-3442-b6b3-ec84331a6a0a.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     198949
IP address blocks:        205.208.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:90:3e:26:0e:26:df:15:dc:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9822150f-2e6f-4fc9-b0d3-5a8e0903b333
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=dc240e72-dc16-4cef-9b73-59db5331ab57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0a:3b:af:b5:6a:44:69:1a:d8:ea:02:4c:ad:
                    3c:f8:0f:54:61:e1:34:f8:35:57:37:20:3e:eb:a1:
                    17:63:77:c6:8d:cc:dc:e5:50:4d:11:43:45:44:db:
                    d9:de:6d:3e:e0:71:7a:cd:79:4c:cd:81:95:d4:52:
                    c4:d9:43:9a:dc:a3:d6:2b:b0:a0:39:80:06:63:d9:
                    b7:d0:0b:d5:4a:ab:42:21:ef:2f:8d:a2:06:25:8c:
                    94:4e:e8:8e:04:d4:a6:9a:a3:26:f1:a9:b5:cd:e9:
                    1e:e6:f1:ec:e5:81:bf:7a:2d:9b:08:bd:97:95:62:
                    c1:89:ef:56:f8:da:93:9f:37:7c:dd:51:93:b0:13:
                    25:40:e3:68:34:a1:c7:aa:77:ad:04:b8:b2:ac:7f:
                    22:f1:10:9d:b2:e4:83:8a:1a:5e:ec:fa:78:64:c1:
                    1f:e7:d7:2a:a2:88:a9:d5:67:26:a1:10:30:f0:9f:
                    cb:79:13:57:ed:36:00:31:06:bf:0c:78:59:57:90:
                    53:10:d4:29:37:2a:0f:77:48:f4:66:f8:c0:8e:4f:
                    28:ec:12:e9:8d:bd:a6:68:48:9f:00:3d:3c:34:53:
                    00:c9:43:ae:0c:88:45:ab:63:52:8c:35:7a:35:d8:
                    69:07:c1:75:84:b7:1c:70:83:58:34:18:80:fd:5a:
                    43:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:41:A3:5B:5D:A5:5A:2F:2C:B5:ED:A8:B2:9E:1D:D6:3D:D2:AB:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/890db329-2478-3442-b6b3-ec84331a6a0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.crl

            X509v3 Authority Key Identifier:
                keyid:E8:FB:53:43:63:09:90:50:5B:E8:A4:C4:4A:09:BC:46:9B:50:73:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.208.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:ac:fd:eb:a8:55:27:a4:cb:ea:36:80:ff:10:0c:fd:e3:86:
         b2:de:6c:4b:51:30:9d:52:42:bc:50:4b:03:43:cb:26:15:c9:
         46:c7:8a:f2:9d:93:5a:62:1d:02:f9:fa:b8:3b:2b:a2:0a:0e:
         d8:1d:3a:c4:3b:72:4c:2e:98:54:b5:02:05:15:3d:7a:69:89:
         06:ec:61:b0:15:eb:0b:22:2b:06:16:75:15:bb:19:a2:cd:a8:
         f3:72:2b:3f:59:38:85:ca:7d:52:84:c9:80:8b:73:60:09:2f:
         64:65:a7:a5:8c:e4:84:2d:11:d3:f7:15:3b:9f:53:36:b5:ef:
         b9:26:64:21:20:fd:69:a4:43:1c:d5:1a:8e:0c:4c:56:2c:77:
         dd:5a:0d:23:49:1d:63:49:8b:c2:24:df:00:67:97:58:3b:90:
         17:49:ae:d8:79:2c:8a:28:dc:cb:b7:ac:d6:8e:c9:31:3e:b5:
         43:94:64:ca:61:b8:97:0f:54:09:8d:1d:91:fc:a9:b7:94:4e:
         2b:24:1a:ab:a5:69:6d:d5:16:97:e9:d6:b6:6a:47:52:36:f9:
         16:3a:10:76:d3:34:a5:d9:1a:95:cc:cb:83:9f:45:1a:f8:7e:
         8a:88:24:6f:aa:a9:c7:d0:22:b6:f0:28:be:e0:67:2e:18:64:
         d5:80:6f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:15:08 2026 by rpki-client