Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365/2e721e51-249c-36f4-a8cc-4ec4a45e174e.roa
File:                     2e721e51-249c-36f4-a8cc-4ec4a45e174e.roa (raw, json)
Hash identifier:          FaDP0+MGY1hESHf+lLGcMU6mpl5qY8lSlLVe2JeJvUM=
Subject key identifier:   0D:2A:1D:CC:E4:AB:D3:FF:F0:6B:39:84:96:25:6B:1A:56:F0:18:16
Certificate issuer:       /CN=261c40d7-8712-472b-8c28-a09b3f549365
Certificate serial:       010D0C9F4328584F093CF0623EDE037BEDECF3F0
Authority key identifier: FA:F8:CB:26:B0:B0:5A:8F:DB:BF:42:DA:6A:30:00:DB:9D:1B:EE:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365/2e721e51-249c-36f4-a8cc-4ec4a45e174e.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     32564
IP address blocks:        142.216.174.0/24 maxlen: 24
                          205.210.132.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365/261c40d7-8712-472b-8c28-a09b3f549365.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365/261c40d7-8712-472b-8c28-a09b3f549365.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:f0:62:3e:de:03:7b:ed:ec:f3:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=261c40d7-8712-472b-8c28-a09b3f549365
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=ab01ec8a-3380-421e-b88c-763846772a83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4d:a6:76:f9:7a:a0:4d:28:bf:52:00:ad:52:
                    c7:a8:a4:10:55:d2:65:94:85:b7:6c:5f:6c:d9:e2:
                    24:61:a6:b8:69:1f:de:8d:a9:c7:a0:f4:32:0d:44:
                    bc:04:a9:c4:7a:2a:fb:bc:09:22:cf:78:ae:93:3f:
                    14:ca:8b:eb:b5:fa:b4:a3:b0:3b:eb:01:a5:9a:4a:
                    01:a6:c5:49:51:5a:37:39:9d:50:d7:6f:87:29:ae:
                    bd:8c:55:dd:f8:66:67:08:d0:b2:90:8b:99:e3:a8:
                    a3:be:5e:b6:d3:97:d9:e9:4c:6c:aa:df:4e:2c:c5:
                    98:58:c6:b9:ac:43:f1:dd:0d:de:80:bd:7e:00:dc:
                    3f:2a:a4:d8:66:d1:54:c2:41:96:24:f0:32:2d:f0:
                    fd:76:28:23:f7:17:20:b3:68:d0:a8:2d:af:b3:91:
                    c1:e6:34:b9:e7:bd:c9:d3:42:f3:47:46:92:1a:0a:
                    31:63:b1:f1:d8:4e:8b:46:b6:93:4c:e8:7b:5b:ee:
                    76:81:76:ae:0b:ba:46:8c:fa:25:e9:8d:bd:d5:d3:
                    74:50:df:db:63:b6:3e:4c:3b:b9:9f:a3:69:47:f5:
                    0c:49:57:0d:c8:8c:aa:3c:23:43:bb:52:c7:4b:fe:
                    3e:15:84:4d:e8:32:49:b2:5e:f0:51:17:5a:0c:71:
                    c4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:2A:1D:CC:E4:AB:D3:FF:F0:6B:39:84:96:25:6B:1A:56:F0:18:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365/2e721e51-249c-36f4-a8cc-4ec4a45e174e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365/261c40d7-8712-472b-8c28-a09b3f549365.crl

            X509v3 Authority Key Identifier:
                keyid:FA:F8:CB:26:B0:B0:5A:8F:DB:BF:42:DA:6A:30:00:DB:9D:1B:EE:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.216.174.0/24
                  205.210.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:84:8f:1b:14:0d:00:2b:09:b9:17:10:1c:29:32:d1:4a:ba:
         f0:9d:16:cb:79:c9:5a:51:f1:26:2e:4e:cb:05:ad:47:4a:4e:
         f8:7c:c7:0a:4e:a8:61:39:0c:24:e0:94:b3:c8:e4:96:dd:d8:
         bf:2f:67:15:d4:d1:0d:3f:2f:ea:2c:99:38:70:47:75:e2:07:
         3c:21:f5:cb:87:3c:93:30:f2:e5:a9:b3:b9:56:00:f4:f0:5d:
         67:40:54:30:ec:e3:cc:a0:8e:12:a3:0d:d8:45:97:e1:36:e5:
         8b:6f:24:29:8a:ae:7e:a3:1f:a6:69:82:c1:72:b3:04:cd:b1:
         7b:91:a0:67:45:b4:65:2b:af:aa:40:75:1d:45:dc:7d:43:d4:
         1a:fd:df:0e:68:b5:fc:21:2c:12:98:55:45:f2:6e:96:97:f7:
         6f:a1:99:5b:ab:8b:9e:dd:3b:71:69:c1:bb:f3:e9:d0:c9:62:
         4a:c1:3f:55:11:76:fc:f8:ca:3c:4e:87:43:a4:de:d6:f4:73:
         ce:ca:63:2f:28:b8:2d:bb:e5:ee:fd:6f:be:83:4b:24:c1:da:
         43:c7:34:d9:b5:ee:c5:c3:11:50:e7:9c:b7:d9:d5:a6:bd:17:
         28:71:b3:e4:0c:f6:ec:3d:90:92:ed:8a:11:db:65:6b:8f:1e:
         12:81:15:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 10:21:25 2026 by rpki-client