Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/ea2e32e0-8b33-3c5d-b479-68b0a2ceec2d.roa
File:                     ea2e32e0-8b33-3c5d-b479-68b0a2ceec2d.roa (raw, json)
Hash identifier:          SiF5CIaD1cTu8ACDqtiSAzGLeiKqVKF+suIloHif7ms=
Subject key identifier:   86:9E:87:7D:2A:B6:40:11:A8:7B:68:1C:E6:9B:9C:19:28:4B:9D:BF
Certificate issuer:       /CN=41b3b885-79da-40ed-ab0b-ce4a30f770db
Certificate serial:       010D0C9F4328584E5A49F1D0E0DF8B5EBABFC020
Authority key identifier: D0:86:28:4A:65:DA:2D:21:42:61:27:16:EE:AE:44:F7:29:E6:DB:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/ea2e32e0-8b33-3c5d-b479-68b0a2ceec2d.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     3356
IP address blocks:        192.136.176.0/20 maxlen: 24
                          204.10.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:49:f1:d0:e0:df:8b:5e:ba:bf:c0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41b3b885-79da-40ed-ab0b-ce4a30f770db
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=f497efea-aaf1-4c86-8448-76d1976089d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0d:90:6a:58:99:68:2f:3e:45:61:c1:d3:07:
                    67:86:05:60:28:63:6b:0e:e0:85:75:4e:7c:72:2b:
                    bf:69:c3:59:4c:2b:59:5c:9e:2b:d5:0f:99:cd:15:
                    2f:52:ad:af:d2:77:e0:51:ad:e2:56:8d:1b:d8:77:
                    0c:f2:ab:ef:9c:86:76:b9:f5:2a:49:dc:f0:90:1f:
                    83:f5:7f:59:9c:d2:f8:28:63:b5:b1:0d:d0:54:a1:
                    30:c5:21:92:36:fc:60:41:7a:fe:cc:4e:6a:bc:79:
                    c5:e7:2c:ec:33:6d:7f:76:99:e0:b6:5e:1b:2a:60:
                    24:88:f1:cb:45:15:0e:06:eb:d7:f0:36:87:ce:29:
                    b5:da:cd:c2:8a:3e:8f:cb:f4:67:ad:c8:77:17:c5:
                    18:5d:8c:03:48:c1:39:32:42:9b:cf:b4:55:12:b0:
                    5a:6d:f8:e8:37:49:3c:f5:f1:ca:8a:0d:d7:08:50:
                    5d:d2:65:d0:19:84:45:ed:4e:cf:8e:02:89:8e:52:
                    62:aa:c5:93:14:45:7c:76:13:96:18:bc:f9:cf:62:
                    fa:3a:4e:74:aa:49:e3:67:bf:c9:59:45:2a:f7:c0:
                    af:af:93:6d:4c:32:fa:30:4b:16:35:c3:88:41:3f:
                    09:94:1e:b8:dd:98:03:40:c2:e0:50:5a:56:0b:09:
                    b9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:9E:87:7D:2A:B6:40:11:A8:7B:68:1C:E6:9B:9C:19:28:4B:9D:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/ea2e32e0-8b33-3c5d-b479-68b0a2ceec2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.crl

            X509v3 Authority Key Identifier:
                keyid:D0:86:28:4A:65:DA:2D:21:42:61:27:16:EE:AE:44:F7:29:E6:DB:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.136.176.0/20
                  204.10.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:2f:69:bf:e5:63:b8:86:b4:7a:97:78:7b:c8:9f:f3:e9:d2:
         41:33:0c:6b:58:33:fd:e9:fd:83:a1:09:08:e8:9f:9c:83:d0:
         65:12:52:f6:43:18:b4:9b:b7:1a:12:1d:b9:7b:86:f9:69:8e:
         e6:1e:4b:7a:26:a6:30:7a:21:fa:04:a9:8c:54:79:96:e8:ba:
         6a:0c:f0:e9:fd:23:9d:5a:6a:13:a8:df:01:06:6b:25:49:55:
         58:a0:3f:de:08:ff:f1:1c:58:46:be:b7:df:c1:a6:9d:79:d5:
         01:5a:c9:da:17:c1:fc:9f:72:63:e2:4f:ab:4b:20:2a:82:a7:
         c7:1a:d5:65:b9:92:73:f8:38:13:96:ad:a8:2a:87:a5:c7:d7:
         2e:7e:ab:65:22:f6:25:eb:fc:ae:66:ff:62:fe:14:1e:18:01:
         6f:7a:1e:b7:05:b6:c7:ff:84:63:d8:73:c6:0d:1c:a4:70:d0:
         1f:56:d6:17:b7:88:98:a9:f1:64:59:80:76:7c:55:de:f8:13:
         7b:3d:2c:e6:ef:ae:7c:b4:d5:79:db:90:f2:59:fb:e4:7d:f6:
         ac:31:1d:15:2a:c3:e0:3e:6d:87:4b:23:93:f6:a0:b4:63:93:
         e4:64:66:1e:0b:69:9a:0b:5f:ca:57:c6:30:60:ac:d7:17:68:
         06:5a:87:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 13:52:45 2026 by rpki-client