Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1436f20d-e017-341e-ae00-19213a044a07.roa
File:                     1436f20d-e017-341e-ae00-19213a044a07.roa (raw, json)
Hash identifier:          i7JxsVf9yRFXAbOUOBoZeohtw4Gj7qFizQppH4dD/Ic=
Subject key identifier:   F4:79:90:7C:CC:F5:98:92:3F:B3:6F:ED:43:CD:60:46:FA:81:10:8C
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584EB9CFA8A8C8E34DBA58A9D480
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1436f20d-e017-341e-ae00-19213a044a07.roa
Signing time:             Tue 04 Aug 2026 14:11:28 +0000
ROA not before:           Tue 04 Aug 2026 14:11:28 +0000
ROA not after:            Mon 02 Nov 2026 15:11:28 +0000
asID:                     30060
IP address blocks:        216.87.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b9:cf:a8:a8:c8:e3:4d:ba:58:a9:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Aug  4 14:11:28 2026 GMT
            Not After : Nov  2 15:11:28 2026 GMT
        Subject: CN=990166ad-787a-4355-ac9f-333b647def2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9b:45:6e:91:46:47:13:4a:d9:85:02:0e:10:
                    bb:d8:90:73:50:b0:04:51:49:8c:50:f1:9c:d3:f5:
                    d0:6a:37:0b:dd:ef:9e:ec:41:d5:25:04:72:20:70:
                    92:47:77:ff:c6:55:87:da:10:b1:3c:1c:d7:b8:99:
                    13:d9:0a:9e:90:62:34:9c:d3:23:44:60:c0:d4:b9:
                    7b:36:f2:f5:5a:e1:0a:e4:62:41:f3:1a:f6:73:82:
                    e8:dc:9d:ef:16:5c:85:a0:1e:14:ef:9c:0d:69:0c:
                    33:8a:5e:cc:7f:66:ca:b7:46:4a:81:b9:5f:2b:c3:
                    47:d8:90:91:82:5f:ca:f6:86:ea:95:00:5f:21:fd:
                    1c:1d:3a:69:c2:6b:3e:15:93:fb:d7:af:b5:16:0b:
                    31:b5:94:5d:f4:c5:fb:bc:cf:dd:b9:44:b1:dd:cf:
                    eb:5c:05:22:e5:76:49:fe:c0:b6:0a:a7:0e:d2:d9:
                    20:3c:33:35:03:c2:68:e1:17:d2:5e:66:13:3c:72:
                    1e:b2:b2:43:fd:e0:d4:f1:4c:2d:e1:04:06:1a:a4:
                    3a:0f:68:6a:c4:ad:82:fe:74:d4:a9:11:67:b2:6c:
                    a6:c9:8d:98:ef:15:ef:b4:15:43:cc:47:cd:0f:23:
                    56:75:39:e8:d3:36:5d:26:36:79:3c:19:05:8f:df:
                    e9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:79:90:7C:CC:F5:98:92:3F:B3:6F:ED:43:CD:60:46:FA:81:10:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/1436f20d-e017-341e-ae00-19213a044a07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:3d:e9:66:71:44:36:25:83:ba:fb:e0:f9:4f:37:56:aa:90:
         a5:14:3b:7c:af:a2:aa:cd:97:57:33:1f:8b:31:df:63:b0:f9:
         31:b9:55:3d:18:b9:5d:33:67:b7:61:6a:3f:d1:33:19:e9:50:
         ba:ad:87:c6:35:a1:f4:b1:65:53:41:56:73:2f:57:59:78:8a:
         ef:19:d6:66:c4:e9:80:76:ed:d6:f0:57:d4:da:67:66:52:75:
         24:e4:48:d9:f8:e9:db:0e:4d:a1:46:24:2a:89:c2:b0:2d:37:
         57:8b:39:fc:b2:fe:aa:2f:0a:86:9c:9f:85:80:c6:89:3b:53:
         60:3a:7f:89:fe:8f:65:82:4e:36:70:cb:41:93:1c:48:20:73:
         91:de:db:9d:62:71:03:80:45:15:7d:6c:2a:35:66:81:4e:15:
         cd:2c:98:d8:ea:a3:eb:cc:87:e1:26:2b:f8:01:45:c5:64:b4:
         f5:cc:0f:d2:21:37:1d:27:96:dc:dc:cd:bd:5b:0b:e2:70:51:
         f4:32:33:60:b8:78:6c:9e:49:c3:bf:a5:f6:83:87:08:42:71:
         c6:46:1f:4e:43:3b:04:ce:6e:20:76:48:13:ec:aa:d3:59:a8:
         17:6f:00:5a:d6:28:7a:cb:59:66:18:da:ff:e7:14:6d:ef:65:
         a9:4a:1b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:11:03 2026 by rpki-client