Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e1b78817-04d7-32d9-b76a-2aa083be3d99.roa
File:                     e1b78817-04d7-32d9-b76a-2aa083be3d99.roa (raw, json)
Hash identifier:          CpzqzAN0uMEx6/uGEuybPwjZwj4I5h7gi5lRFqI4/Zs=
Subject key identifier:   34:6F:63:29:E7:C3:1F:F0:5D:56:D1:7C:DF:67:E6:74:9F:87:64:90
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584EE4233F0F3800FC8987288900
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e1b78817-04d7-32d9-b76a-2aa083be3d99.roa
Signing time:             Wed 19 Aug 2026 18:03:50 +0000
ROA not before:           Wed 19 Aug 2026 18:03:50 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     2914
IP address blocks:        204.75.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:3f:0f:38:00:fc:89:87:28:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 19 18:03:50 2026 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=4825a5a6-15b5-413c-ad12-76b33fe7fb01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c5:30:a8:5c:95:2d:4e:dd:d5:ed:f9:75:d4:
                    66:fc:cd:ab:71:9c:b4:05:c4:7a:59:be:af:a5:1e:
                    02:f8:61:d4:70:6d:e6:cf:57:59:63:f3:99:97:7f:
                    b5:6f:61:98:0d:51:90:45:15:c6:5a:16:39:5d:f5:
                    d4:c0:1b:41:7d:80:e5:40:7a:76:ca:1b:8b:38:27:
                    59:39:dd:07:f6:ea:7f:25:10:ef:5f:7e:cc:d6:fd:
                    22:73:c7:1d:a1:99:ed:dd:a0:d1:81:e8:7c:a4:6b:
                    b5:5a:1d:a9:88:d3:51:47:1d:1b:ae:ff:b5:6e:8d:
                    42:ba:74:08:e9:09:37:82:5a:ae:9e:a3:a5:e6:58:
                    f1:11:9d:5f:53:64:f3:6b:27:03:48:95:5c:6c:2a:
                    3c:f6:41:1a:2e:ec:d1:6a:36:80:6f:47:c8:7c:50:
                    6b:f1:83:e3:78:8f:7d:e9:01:df:5b:69:a7:6b:f2:
                    64:0d:90:c1:5e:e8:e1:38:08:90:06:81:cf:cc:f2:
                    c5:1b:2c:e2:24:5d:1a:53:96:1f:48:75:38:89:61:
                    df:75:77:94:c9:04:24:3f:d4:bb:09:70:30:bb:9b:
                    d6:f8:6b:a1:f4:da:05:83:7d:bd:e1:52:da:65:a5:
                    f4:fe:96:9a:55:95:a5:98:c5:7d:68:3c:77:d4:c6:
                    3f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6F:63:29:E7:C3:1F:F0:5D:56:D1:7C:DF:67:E6:74:9F:87:64:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e1b78817-04d7-32d9-b76a-2aa083be3d99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.75.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:2a:c7:eb:67:78:6d:b3:fe:52:dc:a2:6e:f3:4b:af:8e:f8:
         bd:8e:98:87:c5:55:40:29:37:00:7e:f6:ba:01:9a:ac:57:85:
         fc:df:52:78:49:98:df:bd:a2:e3:5e:35:8f:3d:0d:80:53:7c:
         96:64:6a:48:70:42:80:24:46:41:2b:23:f8:5f:b2:44:3d:04:
         85:58:b4:21:5c:a9:b7:36:70:f9:9b:a5:46:48:13:6d:16:a0:
         90:69:be:cd:d4:6c:e7:67:d3:f0:6c:29:c7:61:1e:85:a6:3b:
         25:08:2f:58:5d:83:21:46:94:fb:af:ba:51:47:e0:33:f0:a9:
         e1:3e:99:34:52:1b:84:33:62:ba:27:b8:df:de:e2:8f:ad:d3:
         98:b6:b0:67:b4:5c:02:81:a4:cb:33:6f:1f:cb:2f:1d:e9:93:
         58:b1:6e:19:8a:44:3b:6d:91:07:a4:21:25:c3:bf:a4:20:a6:
         63:d0:c5:5a:8b:77:2d:e7:e9:f0:31:bd:d9:c5:86:af:99:af:
         53:66:b9:e0:08:9c:1f:72:0f:54:6e:77:5e:9b:dc:de:7e:ee:
         53:7e:20:42:da:3b:94:e3:8d:ca:09:19:e7:1b:3e:46:e6:85:
         3d:93:47:ac:43:a9:ea:21:be:03:e3:ba:17:4c:a1:25:ec:c8:
         b8:47:06:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:05:05 2026 by rpki-client