Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/1eb6dd8c-d6d7-3967-983c-a2a1e85bd6e5.roa
File:                     1eb6dd8c-d6d7-3967-983c-a2a1e85bd6e5.roa (raw, json)
Hash identifier:          q2LMGw5Pygcld/0US7SGIbPMzX57T9aHM41hnnUqD9I=
Subject key identifier:   C7:E9:EF:FC:E1:EB:F5:9D:30:E8:1E:6E:BC:A5:6C:DF:2C:86:4E:50
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F4328584EE38CA49E4D292551578B5840
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/1eb6dd8c-d6d7-3967-983c-a2a1e85bd6e5.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     212238
IP address blocks:        172.102.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:a4:9e:4d:29:25:51:57:8b:58:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=a2faf0c2-7d23-47d4-9afe-a1214c451ed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d0:20:db:60:4d:be:cb:45:82:48:c8:a3:fa:
                    fa:a7:38:e1:a9:a6:e0:09:95:3d:2d:15:e5:86:ea:
                    03:2d:c7:37:d4:3b:bf:2f:76:a7:e8:79:87:f1:10:
                    4c:e1:0f:f0:de:e2:d6:e3:6d:87:11:65:21:bd:1a:
                    d5:64:11:91:ed:55:79:18:77:d3:6c:9a:1c:55:89:
                    94:fc:a0:26:52:4b:5a:9a:56:31:f4:25:b3:2d:db:
                    cb:4f:b2:fe:b1:e6:fe:ce:36:18:0e:33:ce:fd:34:
                    fa:2b:77:13:d5:2c:ae:03:05:b0:50:d8:a0:3e:a5:
                    de:a5:ce:44:53:95:87:ff:43:ce:36:49:b9:d0:ca:
                    f9:75:22:0c:33:ee:52:93:63:61:97:97:51:dc:31:
                    af:80:20:7d:39:c7:a5:40:e5:ca:08:af:7e:8e:d4:
                    22:61:1a:f8:91:51:bf:42:b9:f3:3d:9a:f5:a3:69:
                    a3:f7:ca:4e:8a:af:7f:9f:da:21:7d:5e:ab:9e:c6:
                    fb:c6:a5:85:35:32:5a:2e:42:aa:76:22:e4:b5:f9:
                    72:cf:24:ac:55:20:78:c7:52:6e:c1:b9:6d:24:83:
                    d2:ae:0b:f0:4f:c9:18:e0:98:38:03:ba:7c:aa:b5:
                    10:a8:61:a0:fe:5f:df:8b:b1:b5:5e:ba:80:01:ac:
                    a6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E9:EF:FC:E1:EB:F5:9D:30:E8:1E:6E:BC:A5:6C:DF:2C:86:4E:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/1eb6dd8c-d6d7-3967-983c-a2a1e85bd6e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.102.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:d9:04:1b:49:16:7b:d6:a7:5e:0f:78:73:70:90:8e:7c:41:
         2c:09:5b:88:85:06:b0:8d:4b:65:d0:58:d2:22:38:0f:1c:aa:
         2e:30:82:06:6f:6e:22:cf:fe:2b:28:fb:66:12:4e:30:97:f4:
         90:47:3e:f3:33:a8:5d:7a:20:13:6e:8e:7a:15:41:55:56:56:
         8b:1e:1b:c6:d1:c0:e3:67:20:b8:03:da:db:3a:80:ff:89:fe:
         a0:43:ca:88:f6:0e:c9:26:31:88:0f:6e:f1:80:59:84:ea:29:
         cc:2e:0b:9c:1c:21:4e:45:94:79:56:04:d7:ab:5a:c8:27:20:
         00:d1:52:ba:59:0d:3b:7b:cd:3f:96:31:3a:67:bf:7b:08:8c:
         41:b3:2e:9b:8c:47:9c:8d:8f:2c:58:1b:9d:a8:df:61:a8:15:
         a9:3b:c0:3c:d2:f9:8d:75:28:98:68:94:93:1b:50:95:24:03:
         ad:2d:e3:90:09:20:30:f3:b1:13:5e:d1:5a:d2:69:0f:ae:a0:
         2d:a6:aa:ce:00:f4:0e:1e:bb:28:97:a8:90:4c:51:90:a9:00:
         70:9d:39:5c:64:fe:0d:02:26:b2:e6:e9:5e:0e:c5:c8:67:da:
         b5:2a:b5:77:b9:eb:35:96:bb:fe:51:ab:cd:1d:ae:16:af:ad:
         8b:de:3c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:27:53 2026 by rpki-client