Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/8e5d139d-a0de-3b0d-a990-caf789c51809.roa
File:                     8e5d139d-a0de-3b0d-a990-caf789c51809.roa (raw, json)
Hash identifier:          2dCKgr7UDtReV0B7YkxIpj799ASvzjm9dGVBy1n48Fg=
Subject key identifier:   7F:72:39:9E:12:28:47:A6:3F:B8:09:9C:CD:EB:58:5E:FF:0B:56:79
Certificate issuer:       /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
Certificate serial:       010D0C9F4328584F4976C59C8F835FDB5BE77880
Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/8e5d139d-a0de-3b0d-a990-caf789c51809.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     46450
IP address blocks:        172.93.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:c5:9c:8f:83:5f:db:5b:e7:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=fb9531c2-aa20-4f6a-914d-3d1d361e6df1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1e:96:5a:82:c6:88:82:ba:e1:c9:73:9b:ac:
                    95:43:f3:44:71:cf:09:2c:5a:19:1b:5a:ac:84:e3:
                    a5:04:b4:5d:67:c6:a9:4c:7b:a8:ad:bb:5b:1b:19:
                    df:c5:b2:d9:a5:25:88:3b:8b:4e:83:a4:11:3c:39:
                    8d:4e:2a:97:1c:e4:6e:e9:0f:19:08:40:18:8d:e6:
                    2b:9e:57:2b:49:93:46:f5:bb:bf:5d:1b:09:ff:fb:
                    97:d5:28:f3:00:5b:49:0e:6b:77:44:f4:e5:f9:5c:
                    79:d1:ab:a9:e1:75:f9:0d:25:fa:27:44:90:23:5e:
                    0a:bc:4b:8d:6d:54:7a:2a:5e:e6:05:1c:c4:ce:57:
                    78:17:a8:d4:d6:d3:3f:e1:07:28:00:a4:09:9d:6a:
                    d2:5f:5d:2a:4d:a6:be:19:db:0d:d9:d7:d0:78:81:
                    9d:2f:fd:c0:a1:d0:f2:36:85:28:31:d3:8a:fe:95:
                    6a:a1:ad:e4:bd:b0:04:67:60:6c:1a:39:fc:69:ff:
                    23:51:6a:9d:87:90:8e:53:21:b0:f2:50:4b:b6:aa:
                    67:f2:6b:d2:84:64:ed:1f:f9:25:e5:64:da:0e:83:
                    64:33:42:38:60:d2:3e:fa:1a:a7:bb:30:40:4f:ed:
                    c9:86:fb:1f:30:84:51:5e:81:c7:ba:bf:25:da:e1:
                    e0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:72:39:9E:12:28:47:A6:3F:B8:09:9C:CD:EB:58:5E:FF:0B:56:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/8e5d139d-a0de-3b0d-a990-caf789c51809.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl

            X509v3 Authority Key Identifier:
                keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.93.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:78:df:e9:df:03:1b:b7:e2:dc:8b:ca:c0:2a:dd:43:9d:9b:
         24:a2:0d:ac:b6:4f:5c:c0:b7:c3:eb:74:29:5f:95:59:cf:7c:
         6f:e1:04:fc:ea:e0:10:04:54:4a:a3:6c:76:9e:83:c3:74:ff:
         b4:37:5f:aa:43:eb:d2:c2:85:3e:8c:db:9a:ed:1c:04:c3:23:
         5d:43:c7:77:f5:c5:da:24:42:d7:ba:97:d5:96:9d:36:3e:7d:
         a0:e6:7f:2e:19:b3:49:c5:8b:d8:e7:c2:26:25:92:ea:09:b2:
         78:00:59:89:88:9a:3e:0f:60:a5:f6:1e:1e:de:a0:a7:6f:33:
         d0:48:9f:0d:60:3d:49:71:d3:06:f9:91:6b:19:37:7c:7c:68:
         9f:5f:63:1e:53:38:cf:ab:57:35:a7:e1:49:8c:a2:a3:e9:50:
         1f:30:75:d5:2c:9f:c3:87:16:8d:58:30:0a:bf:7a:36:58:f0:
         41:1b:62:a0:50:41:c0:27:e5:f4:44:32:de:1c:6b:a4:a4:a6:
         a7:95:7e:93:0d:3e:77:00:dc:e9:dc:7d:5a:42:8e:90:87:7e:
         e8:65:a7:73:9a:66:37:d3:98:1a:33:cc:6d:d0:46:7a:79:1a:
         7a:9e:b9:08:77:49:69:4f:2c:8e:49:51:40:9f:85:11:b4:b5:
         ca:2b:85:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:08:25 2026 by rpki-client