Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/ee97e258-8632-3ff0-ab06-d0fec008173c.roa
File:                     ee97e258-8632-3ff0-ab06-d0fec008173c.roa (raw, json)
Hash identifier:          FLYFhvY5O24BvEdDE1YvoY9q2CiReH0CdSHi549RWYs=
Subject key identifier:   62:0E:C6:98:24:06:2B:60:D2:B2:EA:29:AA:77:2B:48:60:7A:5A:F0
Certificate issuer:       /CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
Certificate serial:       010D0C9F4328584EA788047986E58EF74510BC80
Authority key identifier: 5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/ee97e258-8632-3ff0-ab06-d0fec008173c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     35950
IP address blocks:        204.235.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:04:79:86:e5:8e:f7:45:10:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1b623c66-abe8-47e1-a334-5481157e1a6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:bc:e7:74:08:3b:8c:09:61:06:3d:4b:3e:e5:
                    e8:3c:67:a2:14:c0:a8:84:4b:f0:94:e2:05:4b:c3:
                    c8:16:33:d3:43:dd:af:98:26:4d:f1:5b:70:56:85:
                    26:78:b1:30:86:0c:87:da:1a:ec:19:10:1d:79:56:
                    8e:93:c6:b3:ce:82:ef:e1:1f:0e:79:f0:c7:cb:da:
                    79:ee:e9:29:50:79:87:5f:57:c2:53:d1:f6:c3:a7:
                    8d:cb:55:76:e5:b6:80:59:65:ff:ba:11:3b:80:53:
                    af:13:c9:d0:12:b5:01:d5:7f:42:fc:8a:c1:13:8f:
                    a7:55:a5:fc:fc:28:ba:8e:ac:69:1b:f1:0c:42:98:
                    10:6c:c9:8f:64:3e:9d:8f:5f:fd:4e:61:ed:25:e8:
                    d4:28:b9:a5:1d:f2:b0:08:7d:b9:1c:ab:94:2b:7b:
                    c7:ff:d1:fb:b0:f4:6d:18:0a:7a:a8:b0:bc:b7:ec:
                    8f:14:64:81:46:0e:35:d7:35:6a:88:32:19:b6:07:
                    33:7c:15:5b:14:47:a7:be:35:0e:9e:7e:8a:94:54:
                    71:fd:de:fc:9c:13:8e:85:b0:48:d8:09:16:36:1e:
                    48:e0:9e:a0:d5:ea:3f:e4:21:20:58:f2:43:7d:0d:
                    41:3a:3d:08:ed:d4:2d:b0:ba:00:fc:b0:1b:0e:f8:
                    87:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:0E:C6:98:24:06:2B:60:D2:B2:EA:29:AA:77:2B:48:60:7A:5A:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/ee97e258-8632-3ff0-ab06-d0fec008173c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl

            X509v3 Authority Key Identifier:
                keyid:5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.235.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:b2:fc:f6:8d:ee:46:62:49:45:6f:75:42:79:ed:61:5c:35:
         59:fe:d9:68:9e:a9:c2:23:c7:f8:5a:33:e2:a2:5f:67:b9:83:
         40:51:52:d8:33:47:1b:2b:8c:f4:df:d0:b4:77:24:cb:f0:6a:
         d0:09:5c:f7:8f:e1:eb:c5:1a:83:bc:2b:9d:9d:33:31:5c:21:
         e3:68:45:54:29:c8:18:78:b7:ff:8a:86:4f:60:bb:78:16:d9:
         5d:3a:22:6e:e2:85:6d:da:33:67:98:16:27:25:71:6f:a9:cf:
         b4:80:f6:b9:9c:e6:e4:39:71:5d:b8:51:3d:fb:d4:59:49:4b:
         4b:ae:2c:d6:7e:1a:bd:1d:42:9d:34:52:f5:e0:47:0d:f1:a1:
         e3:09:d1:34:d0:e7:15:14:7a:d5:f0:82:8c:d8:c5:97:2d:ac:
         76:2b:b6:d0:f1:fb:5b:ae:c1:00:5a:19:1c:f7:3f:8f:05:e8:
         c1:93:16:8a:19:88:e2:96:e5:6b:b5:72:a6:18:de:eb:06:5a:
         46:d5:ea:f6:ed:d7:be:64:18:98:7a:32:a0:64:44:d8:90:de:
         8e:f9:7b:60:e3:22:70:f7:6f:83:48:b4:2f:0f:74:3a:37:52:
         f2:f1:07:d2:bc:10:01:a3:c7:78:81:2d:99:37:00:f5:a6:07:
         b3:8f:7d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 00:35:08 2026 by rpki-client