Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/d9f60bd9-dd49-3ce3-b66c-e354766281e1.roa
File:                     d9f60bd9-dd49-3ce3-b66c-e354766281e1.roa (raw, json)
Hash identifier:          3CexDCT0vk4vjYlsraob/FJNMifJbQh1yhXdLkC6qd8=
Subject key identifier:   E3:C0:EC:26:48:9E:A7:D8:8F:30:B5:50:4C:FF:DA:54:3F:6F:6B:3F
Certificate issuer:       /CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Certificate serial:       010D0C9F4328584EA79421F7EA8F7ABB5889CB80
Authority key identifier: E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/d9f60bd9-dd49-3ce3-b66c-e354766281e1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     3280
IP address blocks:        174.136.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:21:f7:ea:8f:7a:bb:58:89:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a4ed26ff-26f4-4dc5-a6ee-5efc816cd1bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:eb:6a:3d:32:38:7a:f2:31:2f:cc:9d:15:fa:
                    94:ba:1e:4b:1d:53:71:53:c5:bd:f7:86:0f:42:0f:
                    c8:67:02:c3:51:ad:8c:59:57:9a:96:28:f0:70:15:
                    8a:76:90:f6:bf:fd:6e:6b:85:75:cc:5e:ef:0b:42:
                    21:bf:01:1a:e7:57:87:0f:3c:f5:3a:a3:a9:c5:37:
                    3a:b0:c4:ea:c8:03:77:b7:ad:27:33:ad:98:b2:df:
                    25:cb:ff:18:58:98:eb:87:59:a7:b6:70:05:fc:c4:
                    ad:c3:3c:03:c0:89:ba:07:bb:09:99:80:e3:72:d1:
                    ab:16:83:23:54:33:1a:71:f5:9f:b0:23:90:64:a8:
                    87:c8:d1:5b:18:da:ef:f0:88:0a:73:0d:ad:81:b1:
                    8a:0c:47:5f:71:73:65:3f:4c:e7:97:11:de:7b:5c:
                    a3:4d:7b:a8:5e:a2:f5:c9:44:c2:7f:42:3c:9a:3c:
                    0b:2b:4b:ed:82:89:a7:30:d3:0e:a5:b2:ad:9f:82:
                    d8:90:66:97:b8:32:9b:9f:1f:51:a4:36:d9:27:44:
                    a1:50:c1:d5:6a:48:97:de:31:70:69:56:30:13:8c:
                    ce:7a:ea:72:63:63:84:ed:41:3b:9e:7b:f9:7a:cd:
                    7d:79:44:06:6c:66:b3:ed:7c:d8:16:74:97:be:86:
                    6d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C0:EC:26:48:9E:A7:D8:8F:30:B5:50:4C:FF:DA:54:3F:6F:6B:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/d9f60bd9-dd49-3ce3-b66c-e354766281e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl

            X509v3 Authority Key Identifier:
                keyid:E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.136.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:66:c5:64:e4:6d:f1:a4:81:55:4d:8b:dd:be:24:f4:86:02:
         ab:e6:12:17:a6:bf:30:f8:1a:87:3b:ec:44:c7:ad:dd:f2:d0:
         d6:ed:66:d2:e2:ab:95:13:2d:db:92:95:3f:71:26:d9:34:53:
         88:ca:93:49:c5:82:36:47:1d:1d:6f:86:08:33:81:3e:a6:31:
         df:32:c1:ea:d0:2c:38:18:67:0c:d6:c9:3c:03:c3:7b:12:d8:
         2d:1c:b5:d8:f0:65:6d:87:32:f5:5f:ec:e1:9e:b0:87:66:c4:
         ae:d3:15:cc:87:cc:f3:93:62:1b:62:d5:aa:36:05:f0:f1:d7:
         44:d6:ee:6b:c0:e9:31:b1:4f:11:f6:ae:f8:d4:c1:5c:d1:be:
         9b:a5:f3:f3:2d:d4:02:9f:8b:43:50:9d:fa:33:0d:08:5c:bc:
         04:a9:64:10:a7:a5:09:e1:ab:83:98:2d:55:bd:40:27:51:5e:
         eb:f4:dd:75:ae:1c:ce:1a:22:99:72:ec:75:cd:51:e3:96:d9:
         56:75:07:49:6a:c1:03:e5:8f:9c:21:15:d2:e4:16:63:21:9b:
         26:d4:61:1d:da:37:8c:0e:18:ec:80:34:eb:40:44:f3:bc:ce:
         3c:ee:e6:c5:5c:51:18:6c:cc:f2:4a:91:10:3d:e9:f5:c7:7c:
         03:d7:d9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:54:19 2026 by rpki-client