Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/e3dc55cb-0879-31e8-a693-dfd120efdccb.roa
File:                     e3dc55cb-0879-31e8-a693-dfd120efdccb.roa (raw, json)
Hash identifier:          TmylhJqq+7NNYNhmDyFgThx4/QW1NUPvJvlNpkYDimU=
Subject key identifier:   85:48:51:A6:92:71:27:2B:9F:22:FF:AF:7C:50:D8:C0:00:BE:B9:4A
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584EA7874DFC4DAAD8A0C8E95580
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/e3dc55cb-0879-31e8-a693-dfd120efdccb.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     4922
IP address blocks:        70.32.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:4d:fc:4d:aa:d8:a0:c8:e9:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2f0ea961-9fc9-42f7-88c9-70280aafff8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fa:91:3f:39:60:dc:e7:d7:a2:83:fd:86:47:
                    50:15:76:c3:6e:bc:3d:d9:b9:fb:93:e5:0a:ed:f4:
                    83:ea:9f:25:cc:4c:82:c3:89:11:31:ec:e5:f0:ea:
                    cd:59:0f:7c:7d:a4:f5:52:a5:cb:25:34:16:63:ba:
                    10:97:d0:91:c0:7e:7f:66:d2:72:c2:48:96:66:3c:
                    66:02:73:a7:01:e8:fd:8b:fc:7b:87:05:81:15:35:
                    76:97:23:47:8f:8e:8d:af:0e:91:92:04:5f:33:6c:
                    8c:cc:4d:66:da:ef:60:f4:1c:ee:d5:15:98:bd:cb:
                    a2:bb:2a:8d:0e:e6:a0:b2:af:a0:0c:b9:f8:77:c5:
                    7f:4f:89:4d:f3:bf:4b:b7:e9:a1:f0:d1:9d:f0:81:
                    bf:15:74:46:a5:25:e5:16:b9:f7:c3:5d:b2:21:35:
                    d1:37:15:04:30:68:f3:02:0a:6b:49:13:1f:77:c6:
                    70:c1:51:ee:47:d1:22:3b:f5:24:83:f1:72:52:70:
                    43:4b:eb:de:39:d8:d1:81:2e:03:46:73:97:93:52:
                    ab:91:0a:66:81:63:6f:e6:12:d4:06:d1:85:b2:24:
                    59:1e:ab:f9:98:6e:db:5c:d6:8a:5f:e3:ea:0c:4c:
                    3c:1a:61:70:13:70:c1:dc:e7:f9:8d:3b:ba:71:d1:
                    b3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:48:51:A6:92:71:27:2B:9F:22:FF:AF:7C:50:D8:C0:00:BE:B9:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/e3dc55cb-0879-31e8-a693-dfd120efdccb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:2d:73:98:4d:80:ae:e6:1c:14:e1:e7:43:96:4a:38:1a:20:
         de:48:90:a1:cf:17:d6:75:af:e2:7c:6e:4c:ae:3c:36:32:54:
         6d:e9:97:ad:15:23:8b:99:de:9e:c9:22:39:b6:66:a7:8a:14:
         93:b0:c7:c1:87:66:22:9d:eb:03:d6:25:4d:f8:57:95:54:77:
         14:45:1e:7f:63:db:90:70:24:2d:16:47:3a:fd:aa:03:5b:e4:
         b3:a1:7c:bb:f5:56:38:bb:30:3c:64:9f:3d:ac:3a:a9:c7:9e:
         ce:0f:be:5e:81:13:84:d6:3b:5a:0e:cb:55:f7:a3:38:86:51:
         0e:02:62:2d:7f:0a:0d:8b:b8:b3:ad:ce:dd:db:04:cc:e3:ee:
         94:8b:02:18:42:33:46:e2:82:77:04:36:82:67:e9:20:21:5d:
         9b:3b:69:e2:56:5e:28:b9:94:ce:9e:3a:af:67:be:ea:69:4e:
         04:1c:f9:f9:fc:16:2c:5a:91:0f:98:74:54:97:c4:ec:29:8b:
         de:a9:a5:f7:96:32:21:86:5c:e4:f1:4a:0e:b2:1c:42:9c:88:
         f5:06:ae:0a:e7:54:02:c5:5c:62:73:4e:e2:c4:e7:4a:5a:97:
         62:fe:bc:94:93:e8:1a:96:c2:d3:63:e7:c7:c2:42:08:bc:b6:
         3c:6f:29:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 20:35:23 2026 by rpki-client