Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/2427250f-9572-3c12-a905-8148cbe1c196.roa
File:                     2427250f-9572-3c12-a905-8148cbe1c196.roa (raw, json)
Hash identifier:          6UCbfY59LqZxouuFIFRTJ0aNEfkYTytFNJZHhwy36rA=
Subject key identifier:   41:5B:A1:FB:EA:09:6E:1F:7A:23:17:BD:4E:F6:C0:69:8B:AF:A0:79
Certificate issuer:       /CN=f29918e2-971b-4c6a-bc57-75bdb88796a9
Certificate serial:       010D0C9F4328584EC0A7644AB6A434B035058540
Authority key identifier: C4:A2:9F:A5:63:02:53:CD:87:5E:AF:A2:1A:8E:35:EC:94:73:A1:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/2427250f-9572-3c12-a905-8148cbe1c196.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     32590
IP address blocks:        205.196.6.0/24 maxlen: 24
                          208.64.200.0/22 maxlen: 24
                          208.78.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/f29918e2-971b-4c6a-bc57-75bdb88796a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/f29918e2-971b-4c6a-bc57-75bdb88796a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:64:4a:b6:a4:34:b0:35:05:85:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f29918e2-971b-4c6a-bc57-75bdb88796a9
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=af4e4e68-28d6-4d80-b494-cafa5e90f9e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e2:85:9b:b9:eb:f0:d7:bf:01:57:59:d4:62:
                    46:71:7d:6b:22:59:9a:db:89:14:2f:ef:8e:08:98:
                    32:83:34:55:9e:8e:b3:90:d6:32:c4:68:75:ad:01:
                    a7:ba:54:61:bc:ff:6d:93:fd:7b:53:92:f0:35:47:
                    39:ec:bf:30:92:ea:22:97:78:53:a1:de:0a:1a:a8:
                    d7:83:bb:82:8a:8a:77:b2:85:19:32:11:36:81:ac:
                    99:31:b0:1b:9f:e9:d6:f8:ce:bd:b9:8b:f8:91:0d:
                    c8:6e:20:bd:2c:03:b9:00:19:cc:50:7a:85:e5:d3:
                    cd:76:c2:a8:da:33:1b:49:3d:08:52:8c:c6:7a:8f:
                    19:bc:a8:11:bf:de:96:23:79:19:69:da:1f:d0:1c:
                    8b:38:bb:53:e4:62:74:88:d0:2a:77:48:8a:b5:c4:
                    f5:a3:c0:bb:dd:ad:a4:54:23:48:90:0c:f3:6e:60:
                    b7:c8:59:b9:38:01:ae:c5:60:ac:7f:73:7b:c8:1f:
                    56:89:90:d0:bf:b8:8e:13:b9:49:17:e7:94:df:4f:
                    6a:15:dd:14:68:d8:3a:83:20:08:14:e7:c1:46:37:
                    e7:a4:c5:12:f0:33:c9:86:63:11:c6:03:ef:da:ec:
                    9f:7b:56:b1:2c:36:a7:5b:5d:c7:b0:b2:5e:6b:b7:
                    69:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5B:A1:FB:EA:09:6E:1F:7A:23:17:BD:4E:F6:C0:69:8B:AF:A0:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/2427250f-9572-3c12-a905-8148cbe1c196.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/f29918e2-971b-4c6a-bc57-75bdb88796a9.crl

            X509v3 Authority Key Identifier:
                keyid:C4:A2:9F:A5:63:02:53:CD:87:5E:AF:A2:1A:8E:35:EC:94:73:A1:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.196.6.0/24
                  208.64.200.0/22
                  208.78.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:29:fe:0c:ea:7c:67:39:6e:83:98:33:77:cf:ef:1d:4a:5d:
         c7:43:bc:1d:5a:92:eb:d1:9e:60:4e:83:81:a7:0b:bc:50:42:
         0d:39:9e:fa:36:84:6d:bd:07:f7:ac:75:af:65:0a:8d:e2:9f:
         e1:06:1a:bd:3f:ef:6b:03:9f:68:61:5c:6d:cf:62:38:15:04:
         19:f4:f5:3b:9a:27:bf:ee:a9:6f:8c:fc:77:73:99:ed:89:28:
         17:88:89:3f:28:24:9d:32:5b:e7:e1:fd:0e:ed:b4:cc:7c:71:
         bb:f0:f1:1c:64:7a:7e:96:cc:e6:74:78:09:37:5a:05:04:39:
         60:fe:da:a9:83:1f:d5:22:1b:c1:68:68:02:8d:fc:12:88:93:
         83:2c:00:38:cc:71:51:62:6f:fd:28:17:8e:94:db:a7:1b:89:
         2e:bb:0c:cf:c7:f0:ab:ad:3c:bb:3d:6c:ba:70:f8:2d:97:59:
         d1:fe:d2:14:d1:c1:03:d0:aa:47:56:1f:6a:75:7e:2e:23:f8:
         fc:5f:cf:e1:f7:cb:ee:fd:d7:58:c1:b0:c1:0b:f0:b0:6b:a9:
         a8:1d:a3:49:2b:13:a8:aa:1a:55:63:e0:68:0d:bf:e0:45:c7:
         fe:ff:23:13:c7:66:e1:b7:b6:36:ac:1c:0c:2c:3a:fe:d8:25:
         72:02:bb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 12:46:39 2026 by rpki-client