Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689/cf98207c-3224-3b8e-9ff5-0932467f4cb5.roa
File:                     cf98207c-3224-3b8e-9ff5-0932467f4cb5.roa (raw, json)
Hash identifier:          kaZ2Ry2/HEB09BBmwnY4wbIyh6gU0NZ4ff1musxC14g=
Subject key identifier:   A6:87:8A:F1:B7:E4:0B:B8:C5:33:0E:E6:FB:DD:8C:F8:C6:F5:9B:31
Certificate issuer:       /CN=ce6a531d-4e38-485d-9236-07a5daf2b689
Certificate serial:       010D0C9F4328584EA78757279EF6A3E6B8D8F780
Authority key identifier: D3:70:F0:32:C2:57:29:75:8C:88:0C:74:C6:54:99:05:AF:ED:13:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689/cf98207c-3224-3b8e-9ff5-0932467f4cb5.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14618
IP address blocks:        192.34.32.0/23 maxlen: 24
                          2620:11b:2000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689/ce6a531d-4e38-485d-9236-07a5daf2b689.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689/ce6a531d-4e38-485d-9236-07a5daf2b689.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:57:27:9e:f6:a3:e6:b8:d8:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce6a531d-4e38-485d-9236-07a5daf2b689
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=df21b957-1957-4b04-ad44-b089fa91392a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:31:2c:11:6e:f2:cc:fa:42:87:bd:f9:5c:49:
                    e0:58:de:4a:7c:21:cd:03:f4:32:9b:a5:d1:c4:81:
                    ab:01:fd:12:d4:36:c3:59:65:1a:50:8a:ff:27:5a:
                    49:60:3f:98:ac:fd:e0:93:a1:75:f2:6c:39:f2:7f:
                    3e:45:7d:27:9c:2d:8a:f0:a8:19:ba:1d:b6:34:50:
                    9f:d1:b4:a8:81:cd:e3:03:2c:a0:d2:71:42:a9:f0:
                    e7:75:27:5e:84:ba:cc:7f:56:6c:f3:ed:aa:15:c3:
                    01:ab:eb:06:2a:fe:4b:5c:dc:f0:49:78:97:6d:3b:
                    77:12:f2:56:4f:c4:47:04:72:6b:60:c7:d1:78:9e:
                    7b:83:b9:ba:75:2e:dc:d7:42:8e:db:c5:94:53:a0:
                    9d:09:d0:18:de:64:74:31:82:45:b0:58:e2:b7:03:
                    73:c5:0d:f1:ef:cf:a3:02:e0:7b:a5:12:a0:e5:44:
                    f8:2d:22:5a:3f:e6:96:e9:08:0b:9a:6c:10:62:cf:
                    88:21:1e:19:f1:20:af:94:c5:d9:91:c5:64:0d:8b:
                    05:d9:92:1c:43:bb:7c:85:95:bc:34:52:f6:a6:50:
                    d7:e1:e5:0c:16:c8:a7:55:86:30:df:b1:28:a0:af:
                    dc:cf:a8:ea:b9:d2:2c:f9:ea:93:d6:f1:54:b4:f9:
                    5e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:87:8A:F1:B7:E4:0B:B8:C5:33:0E:E6:FB:DD:8C:F8:C6:F5:9B:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689/cf98207c-3224-3b8e-9ff5-0932467f4cb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689/ce6a531d-4e38-485d-9236-07a5daf2b689.crl

            X509v3 Authority Key Identifier:
                keyid:D3:70:F0:32:C2:57:29:75:8C:88:0C:74:C6:54:99:05:AF:ED:13:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ce6a531d-4e38-485d-9236-07a5daf2b689.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.32.0/23
                IPv6:
                  2620:11b:2000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:f8:09:23:b4:b1:d0:b2:ac:3a:05:6b:0f:4f:f2:46:c8:e5:
         81:6a:b6:e5:27:68:bf:ab:1a:b6:9a:6e:77:aa:24:cc:67:0c:
         83:78:38:96:ce:f2:06:89:d3:fb:a9:94:2d:a6:eb:00:32:53:
         78:6b:1a:02:21:3f:f1:2d:40:62:02:5e:48:89:df:bd:b6:da:
         1b:9d:25:97:b9:c7:27:17:c2:8d:56:a2:44:5f:2f:50:6b:b3:
         9d:c9:01:38:ee:86:28:80:22:dd:d6:3f:74:74:3c:09:f5:1f:
         6a:0e:ce:fb:f7:60:f7:76:81:d7:a4:5a:9c:4c:40:e6:4d:28:
         89:f3:23:8e:01:06:8e:6c:a6:49:59:68:fd:b5:9d:59:86:b9:
         7b:13:da:ba:8f:46:d8:bf:5c:30:0d:fb:07:a5:84:de:dc:4a:
         a8:be:5b:99:14:ff:15:45:51:be:8f:80:79:94:e6:e3:f3:2f:
         89:4b:a9:37:c1:2b:44:1c:36:72:44:1e:de:4b:21:22:05:6f:
         b6:be:a9:b5:bf:92:ee:4f:4c:f2:4e:a1:38:9c:4a:37:a4:50:
         73:c9:fe:a7:69:60:41:ef:c0:ee:8b:f7:69:03:95:7b:3c:99:
         d8:07:0c:f6:3b:52:2a:fb:43:61:1c:c9:b8:ca:be:cc:f2:1f:
         c6:44:fd:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:55:41 2026 by rpki-client