Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/b9fd4502-a633-3494-981a-e1278ad342bf.roa
File:                     b9fd4502-a633-3494-981a-e1278ad342bf.roa (raw, json)
Hash identifier:          B2tZwFj1ZVh++hggs3EF4TFVprcs4VNV09k8Ub0whAs=
Subject key identifier:   92:9D:48:9B:92:10:F3:95:31:5F:A8:CD:ED:F2:25:62:D2:D7:6E:AE
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328584EF4385B0525D2BBD32219AA80
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/b9fd4502-a633-3494-981a-e1278ad342bf.roa
Signing time:             Tue 25 Aug 2026 12:19:18 +0000
ROA not before:           Tue 25 Aug 2026 12:19:18 +0000
ROA not after:            Mon 23 Nov 2026 13:19:18 +0000
asID:                     402819
IP address blocks:        208.117.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f4:38:5b:05:25:d2:bb:d3:22:19:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Aug 25 12:19:18 2026 GMT
            Not After : Nov 23 13:19:18 2026 GMT
        Subject: CN=2c9f5d6e-e7e9-4232-bef6-90183e438f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a3:81:e7:4a:00:25:78:ea:b7:05:65:98:e5:
                    de:69:4c:62:29:fb:16:f3:20:02:73:2a:58:b8:8f:
                    8b:4f:8f:70:bb:16:72:78:dc:61:bf:f6:ed:95:85:
                    10:d1:7c:58:a1:2b:3b:1e:e8:40:be:53:9f:0e:ee:
                    98:82:f9:6e:d2:4f:ae:5b:bd:31:28:47:13:54:f9:
                    25:9e:79:48:af:89:f5:d7:d0:7d:5d:56:5b:be:75:
                    e0:7d:9f:f6:18:b1:d9:0a:c2:62:5a:ed:60:24:4d:
                    a3:08:2f:0e:a2:a5:f0:36:13:68:46:e6:5d:32:d7:
                    c8:da:a6:01:aa:87:60:5b:68:db:ff:ae:70:3f:57:
                    75:cd:e4:c5:e8:74:b0:62:8a:c7:17:e4:4e:e3:c5:
                    06:89:9a:62:25:6f:81:8f:e5:3a:cf:05:80:65:55:
                    15:fa:d2:02:43:6a:06:77:c5:0d:92:0a:75:1e:30:
                    b0:8e:07:52:ab:51:ba:fc:2a:fe:9a:ce:0e:59:42:
                    81:b9:42:8e:cb:c1:bd:e6:9f:a7:04:46:f6:9e:3c:
                    5a:67:84:de:af:e5:b2:26:63:07:5d:7c:8b:64:06:
                    a7:9c:f4:90:86:65:77:70:89:68:e6:01:55:43:df:
                    d8:2c:7b:7f:00:ab:d7:3f:81:49:d0:2f:10:c5:a4:
                    55:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:9D:48:9B:92:10:F3:95:31:5F:A8:CD:ED:F2:25:62:D2:D7:6E:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/b9fd4502-a633-3494-981a-e1278ad342bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:55:aa:ed:82:50:56:da:a5:c8:48:6a:4b:16:e9:f6:3a:44:
         8c:e2:d0:86:2e:89:0c:7f:b1:20:b5:7e:0d:b6:64:d3:f6:6a:
         9e:e3:b7:c4:11:3f:ea:a3:5c:97:ba:39:41:27:cf:06:ac:40:
         1f:30:89:ec:0a:d2:29:9d:4c:ad:60:e8:a6:97:ef:78:3d:9b:
         fd:ad:79:62:0d:0c:6d:43:a0:e2:f3:4f:56:d1:95:e9:9b:a2:
         b3:44:95:8d:55:3b:cb:1f:1f:07:a9:08:6d:c3:cb:ba:98:7c:
         85:1b:3d:33:11:65:6b:88:d4:5e:3d:c2:3b:46:37:19:50:43:
         c8:24:3a:d3:bb:92:00:d4:bf:9c:43:f7:f3:95:f2:db:06:9e:
         dd:77:81:70:53:9a:be:8c:56:21:e9:43:5c:66:de:4d:65:b0:
         8f:12:c4:12:32:2d:57:42:c4:a3:c1:ea:3e:ea:75:03:e0:2b:
         68:0b:97:7f:58:98:91:c0:9b:b3:44:a2:11:7e:6d:51:9f:cb:
         ea:b9:3a:42:da:2e:c1:98:90:ed:d3:09:fb:3f:0a:a4:ae:61:
         04:bf:ad:3a:49:6e:82:7c:50:62:89:62:75:8c:2b:ae:cd:6b:
         32:bd:f8:08:8c:55:93:a9:a2:45:c2:24:2f:12:57:4e:4e:ce:
         8c:b8:e2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:02:37 2026 by rpki-client