Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b3d0c559-c12f-3925-8e00-d6fa11324d38.roa
File:                     b3d0c559-c12f-3925-8e00-d6fa11324d38.roa (raw, json)
Hash identifier:          0pqsEauf+7M6vptijOxCEFYXugCHTG851jh2xdCLBN4=
Subject key identifier:   BD:13:1B:35:75:4A:9B:80:82:50:36:04:00:3C:F5:1E:AA:2A:39:C3
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584EA78746EA3BD105D9C89EB240
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b3d0c559-c12f-3925-8e00-d6fa11324d38.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     212238
IP address blocks:        205.186.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:46:ea:3b:d1:05:d9:c8:9e:b2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ef299929-2d22-49d4-880a-dde44f2f4f58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ab:80:5d:d8:0d:b3:b0:20:b1:92:74:61:5d:
                    d6:d4:86:09:da:f1:c3:5e:bf:4e:33:98:46:14:23:
                    7a:eb:a9:57:9e:3d:72:20:cc:25:59:44:6e:19:1c:
                    14:04:04:e3:de:cc:6b:6a:e2:65:67:cd:76:e0:5b:
                    0e:4d:28:f8:52:ab:36:5a:4a:49:de:24:53:8b:4e:
                    ed:10:6b:4c:78:c3:41:e7:15:27:d3:b4:ef:96:a2:
                    0b:a9:f6:3a:98:19:97:06:24:2d:1c:f8:c9:a9:34:
                    b2:64:11:90:fe:e0:2d:4a:2c:03:3e:f0:12:38:5a:
                    cd:f2:c4:cc:99:24:b5:58:b8:c6:50:c1:09:3b:82:
                    f2:82:d1:69:84:8e:1a:70:11:a4:2e:a6:da:03:8f:
                    d8:c7:39:a9:e8:e0:f8:e8:1f:dc:96:13:b5:5e:d3:
                    fe:d5:d1:ea:08:c4:90:49:87:32:c3:29:c4:4a:64:
                    d1:48:f5:31:1d:e6:92:63:b0:ae:91:53:8a:61:a4:
                    3c:82:1f:87:90:f7:b7:b7:4a:3a:cc:6d:c8:cd:85:
                    2c:14:90:9e:22:84:3e:7c:63:32:e5:7a:80:3f:8c:
                    56:db:80:f9:76:4c:32:38:73:06:47:b8:bb:30:7e:
                    72:67:6b:27:1c:fc:a4:ff:a1:eb:77:83:47:fe:73:
                    91:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:13:1B:35:75:4A:9B:80:82:50:36:04:00:3C:F5:1E:AA:2A:39:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b3d0c559-c12f-3925-8e00-d6fa11324d38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.186.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:68:04:22:ff:ee:7d:0d:f5:f3:a8:c6:ce:97:e2:0e:ba:9d:
         8b:73:42:c0:7f:89:bf:56:49:3d:7c:6a:07:af:cd:87:8e:cf:
         ef:28:39:ce:86:d3:7e:b2:3c:f8:5e:db:a3:4c:25:d2:1e:fe:
         fe:3c:ab:8f:9d:ac:36:3d:50:74:fa:11:c0:17:22:eb:7c:f4:
         71:dc:2f:b8:c3:50:2a:97:d8:eb:33:b7:fa:b0:3b:c0:86:df:
         86:5d:3c:c0:c5:45:c7:f3:c1:a3:35:77:dd:df:dd:25:2d:24:
         07:d0:5c:c3:9d:09:f7:5f:2c:26:50:68:87:4b:5e:06:85:c7:
         8f:94:b4:e3:8d:79:c7:77:d2:29:e4:48:db:13:c9:ad:2c:fa:
         42:b3:33:6b:89:73:d4:e9:e4:65:1a:6b:0b:e0:57:a4:b0:44:
         0b:15:21:f4:03:89:a1:8c:02:f9:e9:51:04:69:e7:38:9c:53:
         9c:49:84:c6:09:cb:09:0a:bf:ba:7e:93:02:24:22:f5:76:31:
         b0:dc:25:1d:02:02:ba:df:0d:d2:09:89:1b:46:4f:74:8b:66:
         cf:d1:57:b3:9c:91:1c:5a:ab:e6:c3:d6:2a:db:b7:51:a4:be:
         79:59:da:1a:df:09:35:c7:9f:14:f8:4e:f8:ad:ab:3d:fe:df:
         b0:12:d3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:05:28 2026 by rpki-client