Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/b3243da4-b847-3d20-a3a6-5e5899841270.roa
File:                     b3243da4-b847-3d20-a3a6-5e5899841270.roa (raw, json)
Hash identifier:          FlUuEMAON8ZhPAQCr3WjlSuENaWfmmioBWDDczHrL94=
Subject key identifier:   90:86:FE:08:33:72:AB:7D:4A:67:54:4D:2F:E6:B2:6A:3F:84:8B:E8
Certificate issuer:       /CN=46b96165-9c22-47d1-962f-486840cec7fa
Certificate serial:       010D0C9F4328584EBF41B0BCBDA065C266BE5900
Authority key identifier: 7E:68:D8:AA:EB:33:0A:33:7C:88:D9:3E:FA:7D:E1:FC:34:A1:2F:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/b3243da4-b847-3d20-a3a6-5e5899841270.roa
Signing time:             Thu 06 Aug 2026 13:00:12 +0000
ROA not before:           Thu 06 Aug 2026 13:00:12 +0000
ROA not after:            Wed 04 Nov 2026 14:00:12 +0000
asID:                     3320
IP address blocks:        209.205.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/46b96165-9c22-47d1-962f-486840cec7fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/46b96165-9c22-47d1-962f-486840cec7fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bf:41:b0:bc:bd:a0:65:c2:66:be:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46b96165-9c22-47d1-962f-486840cec7fa
        Validity
            Not Before: Aug  6 13:00:12 2026 GMT
            Not After : Nov  4 14:00:12 2026 GMT
        Subject: CN=f4c72d96-c63b-4542-8b72-5f168fcf40d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:86:35:e2:ad:56:72:26:bc:f3:c5:65:37:31:
                    eb:98:07:9e:69:d6:b4:c9:95:4c:39:41:94:f7:a8:
                    9c:0f:70:e8:b2:74:d4:3f:c3:fe:e3:f2:cb:e1:1a:
                    3f:5a:ca:50:dc:6c:91:5d:68:24:78:0f:16:6d:68:
                    79:8b:a3:48:c8:f8:9a:ee:ec:5d:af:d1:5e:d8:96:
                    d2:05:57:2f:e2:4a:fc:21:ad:aa:13:40:c4:14:1a:
                    28:90:2e:6d:a1:50:16:fd:d6:fe:b2:c2:9b:8c:19:
                    d1:99:5a:99:45:31:31:7e:84:93:77:ea:a3:0c:cf:
                    c1:9a:12:c0:c5:7f:94:ad:0b:4a:88:e0:51:3c:ee:
                    ab:2d:f6:50:49:71:d8:a2:9f:92:98:88:0e:cf:9a:
                    ca:49:fc:fe:50:a6:59:a5:0d:b8:93:c2:1d:d1:3e:
                    02:0a:62:57:98:5f:ea:28:7a:b8:7e:0b:61:7d:d7:
                    75:53:33:ea:02:8b:b1:e7:9d:1a:f8:38:26:49:75:
                    30:25:6c:c5:a9:df:00:ab:f1:03:79:5c:c1:c8:74:
                    4b:45:2b:c1:2c:74:db:ce:ad:05:11:f6:c7:a6:da:
                    47:b9:5e:a7:7e:3d:9b:fa:4a:67:0b:d6:31:71:4a:
                    7f:88:f8:9a:68:31:e6:a9:e0:4e:9f:6b:04:f5:1a:
                    7c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:86:FE:08:33:72:AB:7D:4A:67:54:4D:2F:E6:B2:6A:3F:84:8B:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/b3243da4-b847-3d20-a3a6-5e5899841270.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa/46b96165-9c22-47d1-962f-486840cec7fa.crl

            X509v3 Authority Key Identifier:
                keyid:7E:68:D8:AA:EB:33:0A:33:7C:88:D9:3E:FA:7D:E1:FC:34:A1:2F:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/46b96165-9c22-47d1-962f-486840cec7fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.205.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:a4:50:66:89:bb:1f:c6:52:16:75:fe:9a:a2:c0:43:6f:e7:
         9c:11:e0:46:d2:4c:9e:03:23:2c:57:cd:20:10:8f:35:3f:09:
         96:0c:90:4d:fe:c0:4e:28:0a:fa:07:bd:c8:8c:61:75:dc:e7:
         73:97:62:72:e2:2f:cd:38:d9:e2:34:fc:88:81:2c:b3:6d:8e:
         ef:59:ed:7c:8e:86:8c:01:13:c8:dc:36:47:00:74:ca:a1:ae:
         98:76:c2:b6:9b:db:e8:34:aa:50:cf:3b:06:50:55:e8:c3:b1:
         ab:14:73:c7:b6:99:64:34:af:38:09:fe:c0:ba:3a:cd:bc:24:
         3e:fd:6b:8e:b6:51:8e:e1:39:47:7c:b2:64:c1:d5:5a:66:ab:
         3b:ac:0a:79:ad:38:fe:e5:d2:bd:ba:3f:16:25:69:9f:41:de:
         ac:ce:31:cd:28:94:6d:95:2a:8f:61:61:6d:ba:1e:f1:d9:60:
         ab:50:6d:e3:b4:35:77:77:49:13:0c:d6:7d:53:32:68:6c:e7:
         6d:b1:50:c9:03:37:d6:16:50:cd:30:55:be:25:a9:c7:13:36:
         71:67:32:fe:a4:6e:72:1c:df:47:f1:9a:b7:2d:cf:6d:14:a9:
         68:aa:64:e9:62:12:92:74:3f:86:31:3b:03:1a:87:2a:8f:1f:
         e3:3e:4c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 13:29:37 2026 by rpki-client