Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7df0b835-dadc-336a-ad82-ab976c925770.roa
File:                     7df0b835-dadc-336a-ad82-ab976c925770.roa (raw, json)
Hash identifier:          AusB2nAHX1qfx6A2kStMY7SOkrFKSB6+FJaHX0pbCYU=
Subject key identifier:   A0:87:A8:2E:AC:A5:31:DF:6B:0C:91:78:8D:C2:F4:05:26:2F:A8:89
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584EE4232AFE3C9B61B012D02600
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7df0b835-dadc-336a-ad82-ab976c925770.roa
Signing time:             Wed 19 Aug 2026 18:03:41 +0000
ROA not before:           Wed 19 Aug 2026 18:03:41 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     35994
IP address blocks:        204.2.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:2a:fe:3c:9b:61:b0:12:d0:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 19 18:03:41 2026 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=5e4ceaf2-01da-4bb4-b88d-fb2b847c1e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e3:9b:1a:14:5b:3e:4c:17:c0:c5:d7:02:cb:
                    66:16:56:a3:7e:c5:61:07:31:a5:b8:b6:0c:51:fa:
                    d3:c3:0c:65:07:d4:34:db:eb:06:40:da:4c:23:5d:
                    ec:64:8f:4f:6c:6e:10:83:2f:9f:80:63:7b:b1:88:
                    ab:e3:f6:01:05:b9:21:ab:b9:fb:df:b2:89:61:9f:
                    a1:73:df:67:56:13:53:41:2e:53:e1:d2:c1:6a:11:
                    de:98:e8:d5:88:59:75:72:d7:47:28:42:02:c7:6e:
                    02:f2:1b:08:8e:8c:a1:d7:91:f5:49:cc:13:b2:46:
                    54:4b:79:d0:72:9d:97:ea:7a:65:30:85:ad:2f:c7:
                    3d:a9:87:00:a4:25:dc:b8:14:3e:58:96:97:50:98:
                    35:4d:e7:2a:7c:82:bc:1b:ec:85:20:16:c6:25:12:
                    38:6d:c7:44:70:fc:a8:6e:65:e5:7d:18:88:71:1c:
                    93:04:13:57:10:b1:1a:30:53:81:82:6b:fe:04:1d:
                    46:35:cd:c0:c8:9d:66:bd:71:ff:87:84:08:df:d1:
                    87:43:7c:7a:21:0a:e2:6b:d9:ce:d4:cb:bb:0b:d0:
                    9a:9e:7d:d6:b7:7c:e4:df:02:bd:60:f4:1b:75:b6:
                    80:f4:00:df:bb:5b:d9:af:d9:b3:08:8e:72:68:7d:
                    af:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:87:A8:2E:AC:A5:31:DF:6B:0C:91:78:8D:C2:F4:05:26:2F:A8:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7df0b835-dadc-336a-ad82-ab976c925770.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.2.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:14:15:64:aa:03:05:30:33:64:30:ba:71:04:ca:1c:5e:b2:
         77:9e:f1:d4:b5:50:db:ee:f6:eb:8d:30:f5:fc:56:af:a3:d0:
         d9:44:ba:74:da:23:f5:30:de:0f:df:0e:59:ac:ae:e1:8c:8d:
         ce:48:21:f9:32:98:97:42:3d:d1:0e:bf:68:78:b3:b9:69:8e:
         5c:b1:e4:2a:97:a2:ee:57:7b:9c:79:a2:fb:a5:e3:7d:1e:49:
         5c:66:e4:88:4c:74:d4:87:ed:69:16:ab:27:40:f2:a5:e4:9d:
         51:99:19:2b:71:99:11:b7:3f:32:de:af:22:76:2b:39:a9:a8:
         9f:3c:de:b8:99:1a:6f:e1:07:f9:2b:fc:72:71:0c:19:79:51:
         6b:9a:4d:b9:b9:e0:5d:f5:f3:4f:7b:a2:37:95:5b:f7:54:b7:
         e4:7f:ba:31:97:c0:40:2c:5e:fc:5f:72:1c:72:45:b8:f6:12:
         31:e7:2e:75:91:54:83:17:b6:ce:1c:3d:0b:95:b3:a1:8c:6b:
         c2:8b:18:a7:2a:f1:22:bd:b5:50:41:ff:3e:67:a9:0c:bb:21:
         cd:e2:60:59:95:d2:59:c8:82:3f:97:33:e1:37:71:d1:b9:30:
         f2:64:e9:0b:e0:90:68:20:9e:48:60:0f:38:c3:ea:b9:7d:5b:
         d3:72:68:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:52:42 2026 by rpki-client