Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ea04ddc3-a272-344b-962e-875bc2ffc4f6.roa
File:                     ea04ddc3-a272-344b-962e-875bc2ffc4f6.roa (raw, json)
Hash identifier:          r2druqJH7P7mtycKnXhZuJxvYn1gjUBUXQbvpUHNAIc=
Subject key identifier:   EA:8D:A4:D2:AD:73:01:A7:6B:18:69:68:FA:13:BC:81:77:CF:17:A5
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584EE38C9385638AF60AFC90A400
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ea04ddc3-a272-344b-962e-875bc2ffc4f6.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     30036
IP address blocks:        192.119.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:93:85:63:8a:f6:0a:fc:90:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=bbb88278-3ae2-42c5-a329-6d545bcb06c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:66:44:5d:ed:51:b7:00:d8:e3:ad:a1:f0:43:
                    61:bf:c6:d1:90:53:17:2a:61:9d:5c:3a:ca:9f:60:
                    93:94:25:7d:ae:c3:5c:33:dc:50:53:23:ea:1e:bd:
                    29:53:56:81:a5:09:bb:80:6e:fa:14:3e:d8:0b:68:
                    81:a2:01:f3:73:f6:47:67:f1:08:98:42:25:6a:ab:
                    a3:cc:64:97:f9:0e:51:47:8b:45:bd:d4:59:6c:2a:
                    3b:30:5a:7e:b2:08:6f:4e:e7:e3:75:96:59:f0:01:
                    fb:8d:88:98:eb:eb:8d:3c:d9:e4:44:3c:39:88:ae:
                    f7:83:55:f7:a2:b1:d7:75:9b:6d:6f:2f:17:58:61:
                    4f:55:f6:4a:ea:37:ca:03:ca:4c:6c:da:a6:0c:67:
                    16:0a:d8:81:e6:e1:b0:d6:47:ba:1f:99:86:34:ba:
                    75:31:e1:a4:34:56:b7:e1:84:b1:f9:c4:86:f4:75:
                    3e:e2:2a:5f:f5:85:56:10:fd:44:e5:a3:81:f5:1a:
                    84:74:6c:6a:0b:09:6b:f0:e1:26:d6:97:1f:3d:34:
                    7b:d0:f5:15:49:97:b1:6b:8a:d1:80:88:85:d6:c1:
                    7f:dd:55:87:8d:60:e3:a5:28:b7:1f:f0:b5:99:47:
                    03:1f:db:73:df:91:43:12:75:73:40:6e:d9:0b:99:
                    e4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:8D:A4:D2:AD:73:01:A7:6B:18:69:68:FA:13:BC:81:77:CF:17:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ea04ddc3-a272-344b-962e-875bc2ffc4f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.119.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:1e:d8:5d:fe:fa:f3:1b:76:e6:7a:88:f1:f3:36:88:56:02:
         3a:29:65:7e:3a:bf:47:64:a0:ba:e9:71:08:e1:f7:08:91:9f:
         e8:83:fa:72:98:3d:07:ba:e5:82:db:e2:d1:58:d5:a6:7c:e4:
         0e:68:e8:e4:fb:50:3d:50:85:5a:64:48:ee:5f:90:f2:0e:ee:
         be:e6:b2:2d:2a:b8:4d:57:50:72:78:21:94:9c:69:91:f6:28:
         5e:71:9c:f4:f4:5c:38:93:80:21:6c:64:08:a2:12:79:73:45:
         1d:46:65:fa:d4:a4:b1:14:0f:be:10:b5:99:37:56:bb:78:95:
         5c:42:62:d4:c3:53:40:9b:49:98:94:d1:03:58:a3:2c:c7:e5:
         42:9d:5f:27:ef:d7:1e:37:b3:dd:ce:ec:6b:cc:33:ee:46:c7:
         2a:58:2c:dd:45:93:e8:8a:87:2a:c2:aa:97:8f:46:e4:03:64:
         37:0b:92:dc:aa:8b:c2:1a:f8:3f:bf:df:08:22:c7:3b:8e:f3:
         9c:94:1a:36:10:2a:39:a6:c7:61:38:64:48:e4:86:6e:21:a1:
         ef:8d:e7:21:f0:8f:6f:10:00:72:9d:09:03:b3:8d:43:ee:ad:
         2b:13:6c:f2:45:5b:8a:38:ce:84:58:d2:0b:ef:10:cb:cc:5f:
         35:54:ec:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:01:19 2026 by rpki-client