Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/ff815538-39d0-348e-910a-f73be4832b91.roa
File:                     ff815538-39d0-348e-910a-f73be4832b91.roa (raw, json)
Hash identifier:          LlL0jfWqqTBD0phBjG3NREqL+OvKG9+6c7SZYadpPaE=
Subject key identifier:   88:25:E6:07:78:52:AE:BC:B3:81:2E:D8:2B:B2:77:49:A8:F9:5E:88
Certificate issuer:       /CN=2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7
Certificate serial:       010D0C9F4328584EC20C6BA47D8F7CBBE2618800
Authority key identifier: 8D:A5:73:99:67:37:74:5C:D4:FC:CC:EB:C0:C2:C5:E7:0C:54:49:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/ff815538-39d0-348e-910a-f73be4832b91.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     32334
IP address blocks:        192.30.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:6b:a4:7d:8f:7c:bb:e2:61:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=5d692480-76f7-4639-bbca-5634e2d801c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b7:c8:91:b8:72:f0:d2:be:36:3d:eb:e8:1a:
                    3f:2e:54:f4:c6:b7:6c:c8:35:24:01:61:42:09:18:
                    93:75:50:b1:e5:b4:32:9e:25:fa:6a:26:da:c3:48:
                    d3:1c:3b:05:d5:2c:43:d7:18:cb:48:d9:03:31:0c:
                    54:b7:f5:e6:da:20:29:dc:ae:84:43:fd:a9:a3:34:
                    01:c3:b7:df:66:f6:c3:73:97:ed:ef:67:99:08:3e:
                    0d:d9:9c:7e:ee:2c:c4:41:7d:91:d0:36:5a:10:14:
                    52:41:3a:e6:2b:c3:5a:8b:e1:37:e4:5a:eb:89:9a:
                    1b:6a:f7:b2:41:a4:19:87:51:18:85:88:e2:ff:2d:
                    e4:b3:e1:15:67:0b:5e:fc:a9:8b:b4:ef:5e:05:c8:
                    27:12:f5:5d:cb:82:85:25:e2:b9:cc:5a:5b:fb:9b:
                    16:ff:fe:20:48:e8:8c:63:84:74:ed:18:ca:ab:67:
                    b9:91:66:29:8f:1f:49:df:36:3b:b9:ec:0d:8c:d8:
                    df:db:93:bd:9b:0d:9b:97:40:0c:34:1b:4f:2d:29:
                    dc:71:a5:b0:6a:ea:a5:ae:b0:5f:30:58:ef:0f:7f:
                    44:64:82:3e:28:07:fb:4d:b2:55:2f:c3:36:96:64:
                    12:b0:c2:b5:24:23:24:46:4a:37:4c:9a:d2:e0:f0:
                    8c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:25:E6:07:78:52:AE:BC:B3:81:2E:D8:2B:B2:77:49:A8:F9:5E:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/ff815538-39d0-348e-910a-f73be4832b91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.crl

            X509v3 Authority Key Identifier:
                keyid:8D:A5:73:99:67:37:74:5C:D4:FC:CC:EB:C0:C2:C5:E7:0C:54:49:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2d4934c8-5b78-48d6-b261-b7a0d1bc4bb7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:eb:22:ed:9e:29:11:90:77:09:c7:0a:ad:52:ce:6c:48:f4:
         16:b4:a3:f7:bd:34:e6:c1:dd:38:d7:1c:07:ea:d4:80:6f:9c:
         36:fd:28:cd:c6:19:7a:28:30:ed:24:82:e1:f1:fe:76:d3:1b:
         bc:5c:d8:b0:13:02:ef:47:06:f2:d8:7e:81:98:4d:a8:b1:87:
         b1:2d:7d:86:74:b4:df:ad:c3:e4:3d:36:9d:4a:0f:00:b1:3e:
         dc:db:5a:be:2c:a5:d2:b0:b5:cd:0d:4a:50:e8:82:2b:79:f3:
         b1:06:55:12:9d:b6:df:fa:f1:f7:b3:e3:72:eb:a6:4f:19:69:
         6f:2e:2c:de:a9:dc:83:74:df:2e:d6:63:7b:32:f5:1b:4f:d6:
         2c:95:37:2f:f9:3c:5c:ef:08:f4:76:62:1b:83:f1:5b:4e:5c:
         e0:16:72:7c:8e:8e:00:46:01:f0:fe:6c:4d:d6:5d:bb:6d:59:
         dd:34:96:66:cf:38:24:68:c7:83:e9:43:19:90:39:d3:a0:12:
         cf:c9:74:50:e4:c3:95:19:ed:8d:b0:c2:e7:08:cc:aa:40:9b:
         84:53:b9:21:8e:c2:73:34:6f:6d:d4:f9:87:dc:fc:e2:6c:4c:
         ef:d0:06:16:f6:9c:a8:30:ee:8f:53:cb:6f:e9:d4:ae:dc:7e:
         34:33:a9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 22:44:54 2026 by rpki-client