Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4eb3caac-468b-39c5-a892-1aa894fe408e.roa
File:                     4eb3caac-468b-39c5-a892-1aa894fe408e.roa (raw, json)
Hash identifier:          ktrpcCZHxOVSqvekv9QVviXj1QArOwgfa0KV9AROcTc=
Subject key identifier:   50:07:DB:AD:46:B8:98:E8:55:E3:B9:F5:B6:0D:1F:B3:72:EB:16:6B
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584EA78862F469D447F1565BDF20
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4eb3caac-468b-39c5-a892-1aa894fe408e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     22616
IP address blocks:        205.220.110.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:62:f4:69:d4:47:f1:56:5b:df:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=17e52ff8-2bb2-4c09-83f6-d628cfea8477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:97:3b:09:02:74:e1:9a:4d:27:12:48:37:63:
                    f0:86:73:99:3e:c4:69:d1:43:86:a6:d6:bd:e7:5a:
                    48:40:84:01:ba:e9:2c:38:e8:59:4d:30:41:58:1e:
                    05:2b:fc:6d:6f:18:63:03:f6:65:10:5b:b7:51:bb:
                    b9:b8:8f:fc:70:32:e5:ca:58:ac:35:c8:5d:29:b9:
                    f4:94:d7:32:c7:62:96:c1:d4:a8:74:38:9e:13:68:
                    1c:93:75:6f:ab:d3:2f:0c:d9:23:39:c5:71:27:37:
                    06:ba:16:50:5e:cd:8f:3f:51:02:83:33:36:0e:f4:
                    3e:66:a0:4d:15:84:40:ea:11:e8:49:aa:36:28:9c:
                    15:98:e8:22:c2:9e:49:09:7a:db:fc:31:8e:20:a0:
                    49:1d:5e:6f:9f:b5:9b:64:a4:0e:18:42:42:44:c7:
                    73:1b:08:9e:73:db:7a:14:05:d4:31:76:57:9d:4d:
                    3c:a5:97:28:54:d2:55:34:5b:98:18:e5:3e:bf:94:
                    1b:d9:9b:3e:89:4c:1b:d7:0d:6f:72:ba:93:7c:2c:
                    81:84:b6:ce:80:fa:92:ba:ab:41:b6:cd:de:9b:b1:
                    0b:8c:a5:c2:06:84:c3:8e:c5:80:f8:e5:a6:11:b4:
                    87:c7:e7:13:fc:c7:b8:79:8f:54:27:de:8a:3a:09:
                    37:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:07:DB:AD:46:B8:98:E8:55:E3:B9:F5:B6:0D:1F:B3:72:EB:16:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4eb3caac-468b-39c5-a892-1aa894fe408e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.220.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:71:5b:ea:92:cb:90:15:08:f6:3a:78:c9:04:f6:b6:c7:8c:
         ad:ed:23:16:f2:a5:f1:ce:13:fb:0a:38:2b:aa:83:38:b3:e0:
         e2:6c:4c:c5:3b:13:72:c9:f2:86:a8:3e:16:39:4e:84:c5:67:
         b0:b6:35:a6:fb:a0:a9:e6:27:3f:c6:be:34:cd:04:0e:f1:46:
         cf:45:4e:13:35:46:d4:76:62:6a:bb:0b:82:f3:26:cf:ab:8d:
         59:59:1d:92:a1:b2:6e:0c:4d:b7:8e:b7:b5:1d:13:92:fc:2d:
         1a:60:0b:e0:1e:58:eb:15:09:45:03:4f:5d:7b:2b:b8:ce:b9:
         9b:6c:79:4e:ce:eb:39:d4:f6:eb:78:8b:87:be:56:6b:74:bc:
         5f:20:eb:e1:93:03:ff:08:28:0e:eb:9e:3b:31:c2:e8:c9:40:
         64:19:fe:ea:9f:e8:1b:02:b3:1c:59:a0:73:b2:92:1b:b6:99:
         f1:e0:85:42:da:97:c9:1d:e5:c1:80:58:b2:3f:ab:21:30:8b:
         c4:10:33:34:20:13:8a:6d:67:f3:0a:c7:eb:f3:64:16:b4:f2:
         11:24:5c:92:7b:66:21:b8:16:9b:50:fe:a5:d1:4f:bb:f3:9e:
         55:85:c1:7c:af:19:71:56:3e:d8:dc:2b:dc:c3:1e:bd:1c:fa:
         c0:34:36:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 01:11:23 2026 by rpki-client