Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/32035ba1-39c0-323c-b360-f03724d268eb.roa
File:                     32035ba1-39c0-323c-b360-f03724d268eb.roa (raw, json)
Hash identifier:          Vdx7/lv7M1Wmkm8ybDOYlyljvEtINulD21XmUuvi5aA=
Subject key identifier:   C4:43:7B:59:26:02:0E:BB:E5:23:0C:F0:03:83:5B:96:F9:87:22:BC
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F4328584E7D3D8966BF074A58A195F480
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/32035ba1-39c0-323c-b360-f03724d268eb.roa
Signing time:             Mon 13 Jul 2026 21:28:33 +0000
ROA not before:           Mon 13 Jul 2026 21:28:33 +0000
ROA not after:            Sun 11 Oct 2026 21:28:33 +0000
asID:                     6079
IP address blocks:        144.208.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7d:3d:89:66:bf:07:4a:58:a1:95:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Jul 13 21:28:33 2026 GMT
            Not After : Oct 11 21:28:33 2026 GMT
        Subject: CN=20227be6-b7d4-42ef-9db9-8f7b9742ffa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:86:13:29:ef:a9:f9:42:e9:f9:61:33:2b:1e:
                    8f:e1:fa:33:a9:34:43:6a:93:62:06:c1:a0:0d:75:
                    44:8b:8c:50:90:42:d6:db:c3:39:bb:f4:3a:73:a8:
                    7f:77:1d:3e:e7:43:55:90:10:18:16:ac:0f:ad:13:
                    18:7f:52:99:28:23:72:ab:d6:88:33:e8:f5:80:f7:
                    45:5e:9f:08:7c:f5:79:3b:84:28:65:ed:0d:40:10:
                    6e:67:a3:29:db:50:d7:13:1d:3f:7b:dc:4c:98:89:
                    0f:aa:40:46:27:a7:dd:23:d3:b7:06:83:07:8e:ad:
                    46:7f:ab:1f:06:ad:84:c7:4c:7d:a3:6e:fc:1f:52:
                    b4:c0:76:05:bf:12:13:85:3c:46:10:db:b3:0a:cf:
                    f6:d7:5f:cf:09:b9:d1:16:6a:84:86:0b:57:b2:df:
                    87:1f:5f:6f:00:37:01:62:db:ba:41:18:97:44:cd:
                    c9:9c:d3:c4:f7:53:1b:4d:ad:37:58:2a:a3:e0:d2:
                    91:cb:1b:cc:8f:d2:15:31:32:45:43:6f:35:e2:4f:
                    c9:1a:2e:90:bb:72:8b:90:b2:45:39:83:93:26:2b:
                    fc:04:de:9d:79:23:40:96:3e:56:32:80:34:96:19:
                    e4:a1:46:e1:0a:af:99:7c:44:2a:fd:09:3a:62:dd:
                    24:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:43:7B:59:26:02:0E:BB:E5:23:0C:F0:03:83:5B:96:F9:87:22:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/32035ba1-39c0-323c-b360-f03724d268eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.208.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:6a:20:66:5b:40:e2:39:93:bb:30:67:f9:91:13:1f:77:7a:
         79:1a:ba:e4:58:5b:76:55:3d:b8:bc:dc:9b:da:8a:f5:a3:e6:
         94:de:c6:2a:d7:31:87:64:79:cd:72:65:55:49:95:b4:1f:f3:
         3c:ee:8b:54:b9:22:fc:d1:01:2f:9c:b5:57:da:83:ba:58:dc:
         11:87:1c:e8:3f:38:6a:de:11:8f:b1:f8:e7:1d:14:d6:17:76:
         3b:bb:cc:87:a6:37:41:24:f2:73:fd:6c:94:fe:47:f4:a2:ca:
         68:9e:f6:03:97:63:ff:e0:26:24:07:e2:fa:32:28:f9:bd:6a:
         9b:3f:a9:52:c0:00:e0:b0:39:7a:76:d9:20:fd:03:e1:fb:a5:
         ee:12:e7:0b:05:6c:21:dc:19:87:66:f3:cb:45:dd:82:e0:99:
         c3:75:57:50:ba:b0:9a:23:68:46:cb:6d:9d:b4:f1:0f:2d:00:
         04:19:2d:be:37:46:3d:e7:76:81:42:4c:0e:84:11:c1:9e:f1:
         14:d5:47:45:0f:c6:23:1d:1b:a3:87:65:0d:7c:34:d0:ec:0e:
         af:1e:db:7b:a2:30:9b:17:90:90:ef:f5:35:f0:c2:7b:f6:ed:
         cf:54:b6:eb:a7:60:49:57:a9:97:c4:5f:1a:e4:a3:77:84:ce:
         0b:05:2b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 10:54:35 2026 by rpki-client