Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de/e5b1b1ae-4960-319f-8987-538a6f6980e0.roa
File:                     e5b1b1ae-4960-319f-8987-538a6f6980e0.roa (raw, json)
Hash identifier:          +z3m+iQQmnzDTO8xvN6eOp6650wkjPGqew5fOl3l0K0=
Subject key identifier:   E0:EC:F3:6E:30:B3:16:19:5A:32:45:DB:55:3A:64:A7:DA:EF:74:B8
Certificate issuer:       /CN=9b8e9198-44df-424d-bfd4-9a91c9fbc7de
Certificate serial:       010D0C9F4328584ECBD1D1C1F3A140A001C6DB00
Authority key identifier: 33:31:3E:A7:53:B7:F2:38:1E:E1:C7:1A:96:53:45:25:49:78:CF:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de/e5b1b1ae-4960-319f-8987-538a6f6980e0.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     394485
IP address blocks:        185.212.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de/9b8e9198-44df-424d-bfd4-9a91c9fbc7de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de/9b8e9198-44df-424d-bfd4-9a91c9fbc7de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:d1:c1:f3:a1:40:a0:01:c6:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b8e9198-44df-424d-bfd4-9a91c9fbc7de
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=8e790fbc-667a-4ad1-9daa-6467325ee71c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:10:50:7b:96:48:90:f5:b7:dd:b0:19:47:5e:
                    ed:a2:1b:26:a4:56:cf:ef:4b:d0:f3:48:40:e1:de:
                    48:58:81:0c:9e:b4:a2:53:86:46:be:d6:33:a1:0d:
                    f1:31:93:44:50:89:1d:fd:8f:d2:6e:65:26:85:01:
                    00:53:91:e6:5e:58:28:31:aa:92:06:63:3c:e6:bb:
                    77:a5:fd:8b:ee:8b:bb:2c:42:88:52:81:d0:f5:44:
                    84:71:7f:79:ca:6c:fa:f7:ed:9b:da:8d:ea:9d:ae:
                    a4:fa:03:2a:05:77:56:eb:bf:36:e8:f2:d5:61:f9:
                    bd:cd:37:c8:70:d3:e1:50:b2:54:73:03:71:c3:54:
                    40:51:a0:67:f9:94:ac:94:82:08:65:94:21:62:19:
                    b6:10:f3:a7:5d:2c:d9:05:54:fa:2c:35:30:eb:fe:
                    89:3d:de:c3:f4:64:11:e9:bd:f3:00:b0:e5:0d:d4:
                    4a:01:6a:ae:20:d7:56:2b:7e:6b:0a:c1:b4:1c:73:
                    8a:2a:4d:52:66:0d:3b:20:51:d0:55:6e:2c:4d:db:
                    32:24:1e:7a:16:31:f1:b6:9c:37:2b:cc:0b:c2:ff:
                    3f:7a:20:52:b4:96:eb:fa:b2:53:fe:d6:d4:38:17:
                    eb:2b:e9:d3:f1:25:ac:92:a4:bd:78:6d:60:70:2f:
                    b4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:EC:F3:6E:30:B3:16:19:5A:32:45:DB:55:3A:64:A7:DA:EF:74:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de/e5b1b1ae-4960-319f-8987-538a6f6980e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de/9b8e9198-44df-424d-bfd4-9a91c9fbc7de.crl

            X509v3 Authority Key Identifier:
                keyid:33:31:3E:A7:53:B7:F2:38:1E:E1:C7:1A:96:53:45:25:49:78:CF:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b8e9198-44df-424d-bfd4-9a91c9fbc7de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.212.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:72:84:be:03:c2:f3:dd:29:b9:42:8e:06:63:56:b9:d5:6d:
         de:32:46:63:59:98:91:4f:76:04:eb:3e:cd:b4:c6:ec:95:4d:
         ca:4e:23:a3:7b:ca:ef:ed:69:4c:53:2f:92:78:fa:cd:dc:30:
         5c:ff:75:40:e3:24:20:bc:a3:20:c8:be:3e:5c:e1:dd:b2:1c:
         5f:3c:fa:32:3f:74:04:f6:7d:72:21:0b:b1:1e:77:28:9a:67:
         f5:b8:ee:86:80:42:d0:05:17:d9:e9:9f:58:91:82:58:fc:ea:
         72:e0:9d:36:2e:fe:8a:3c:06:ef:3b:15:e6:29:0d:65:1f:e6:
         76:90:d8:2e:81:37:41:31:d6:60:c2:49:03:c1:09:e1:c5:a0:
         14:5c:76:92:f7:a9:b9:22:3a:ad:b9:a4:08:39:4e:72:d0:9a:
         4b:7f:97:84:c7:62:ee:05:75:4a:f4:5a:72:33:1d:0e:1f:17:
         60:ec:ca:c3:b9:bc:fb:a7:c9:9b:93:bf:60:ba:07:f8:33:59:
         eb:11:a9:be:de:35:ee:38:59:8a:2d:74:09:74:f8:b6:98:c9:
         4e:5b:ec:6b:3d:25:b2:30:8c:81:91:1a:a4:23:ea:35:2c:78:
         7f:2b:a3:0b:2b:ee:5c:c7:fd:6b:32:50:ad:43:5a:59:ea:7e:
         ac:98:4f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 21:18:26 2026 by rpki-client