Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a8f7721c-c3da-35ff-aeaf-0713728b19b1.roa
File:                     a8f7721c-c3da-35ff-aeaf-0713728b19b1.roa (raw, json)
Hash identifier:          wg5g5T6pilFrTHA0HczNoD+XZBOz4CGOjXCYhDV3ikY=
Subject key identifier:   49:B0:B1:4F:92:EA:5D:DE:6F:35:B7:4B:AE:37:7F:20:AE:7C:87:51
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584EA788C2879ABD565B4BBE45E0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a8f7721c-c3da-35ff-aeaf-0713728b19b1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     400427
IP address blocks:        204.1.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:c2:87:9a:bd:56:5b:4b:be:45:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=69b95cac-6ad3-4203-96a4-14b28b680070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cd:44:c6:bf:8a:ee:14:75:e3:b2:ff:df:f2:
                    f1:b2:9b:a8:9f:c9:8f:a9:29:ab:37:e7:0a:54:9f:
                    51:d1:fd:80:de:16:38:22:5c:2c:1d:e9:5a:98:ac:
                    c3:d0:a3:f9:48:64:40:51:7b:b7:35:dd:a8:e7:b2:
                    41:53:43:2a:19:06:db:b1:af:e8:11:14:02:db:da:
                    2b:be:44:1e:70:60:4f:4d:c0:69:4d:e7:49:45:f1:
                    aa:5a:f9:d4:b8:92:5e:3f:87:97:59:db:81:a8:79:
                    f6:6f:84:82:4c:d8:36:a7:b8:5e:cb:92:f1:0e:02:
                    23:94:82:2e:ac:93:7a:06:e3:73:d3:42:70:41:d5:
                    01:4d:e9:b8:ef:c2:a9:69:90:4e:74:88:be:15:ce:
                    a4:5e:fa:1a:1f:1d:d0:3d:fa:fc:ac:28:b1:04:7f:
                    e7:34:83:eb:29:e4:c8:31:3b:44:dc:7c:c6:da:7d:
                    f9:b1:03:95:8c:94:6b:f4:f5:40:09:95:12:b7:d4:
                    06:3b:c5:16:09:a3:ff:25:09:b8:45:6f:d6:13:40:
                    2d:27:be:ca:76:0e:02:ff:fc:56:d7:ee:ba:04:8c:
                    33:01:4c:dc:60:d7:3c:1a:80:49:ac:60:09:9e:4a:
                    c9:bd:e9:4c:a9:10:b6:b0:94:36:df:b4:93:48:0e:
                    f0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B0:B1:4F:92:EA:5D:DE:6F:35:B7:4B:AE:37:7F:20:AE:7C:87:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a8f7721c-c3da-35ff-aeaf-0713728b19b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.1.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:69:a0:d1:52:30:9c:4b:ee:a0:c5:b7:14:4e:92:01:e9:6e:
         ab:0d:31:bd:f2:3c:60:e3:d0:31:7d:0c:80:89:80:30:68:72:
         56:cf:16:19:33:a9:a9:6a:32:5f:cd:f8:d1:cf:b3:31:78:08:
         ae:8a:5e:f8:eb:af:8e:c6:de:19:ed:40:ac:be:89:0a:41:5d:
         30:a7:17:60:6c:5a:78:34:4b:5f:cd:c4:b3:6c:ac:45:4c:bf:
         79:37:f7:de:c5:d3:6f:5a:22:33:ae:8d:7f:62:c1:f5:ba:e9:
         56:fd:93:bd:40:49:68:ed:0c:c8:80:02:29:b1:86:fc:51:63:
         5b:c4:8a:df:2d:f8:fa:a5:28:ba:f5:f5:61:85:f3:23:1d:97:
         80:62:6c:de:82:d7:18:9d:dd:ab:30:60:7d:4a:ff:07:ac:ae:
         28:bf:b3:0f:c5:8e:ef:19:2f:f6:7a:b9:d3:cc:6c:07:da:5b:
         ea:93:b4:13:f0:d4:15:a9:62:42:33:f2:e1:9e:fb:cf:1f:ad:
         4d:d9:4c:3f:1c:f5:cf:d3:c8:e0:eb:7a:bd:6e:db:65:65:0d:
         55:e4:8b:49:df:92:1b:45:35:7c:f9:6a:3c:fc:08:e4:ee:5c:
         08:17:01:88:fd:1b:29:f1:f1:d7:f7:ee:6c:d3:19:d6:14:0d:
         32:31:f2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:34:03 2026 by rpki-client