Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8b92d93-b32b-4aac-af77-5c47575a646e/112d0449-0634-3e9c-91c1-f6dc39b00980.roa
File:                     112d0449-0634-3e9c-91c1-f6dc39b00980.roa (raw, json)
Hash identifier:          xIfHYGqZtudGAvm5CN+5Ane6K84ENGmJz2MfZgfpsGo=
Subject key identifier:   EA:3D:17:3B:8C:52:75:51:79:DD:87:94:52:50:4E:0A:1C:8A:1C:95
Certificate issuer:       /CN=c8b92d93-b32b-4aac-af77-5c47575a646e
Certificate serial:       010D0C9F4328584EEEB77BF60C74F466239F2000
Authority key identifier: 85:C7:58:D9:20:52:A5:BA:CA:0E:6B:39:7F:31:F6:C5:3B:85:33:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8b92d93-b32b-4aac-af77-5c47575a646e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8b92d93-b32b-4aac-af77-5c47575a646e/112d0449-0634-3e9c-91c1-f6dc39b00980.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     32043
IP address blocks:        216.235.209.0/24 maxlen: 24
                          216.235.210.0/24 maxlen: 24
                          216.235.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8b92d93-b32b-4aac-af77-5c47575a646e/c8b92d93-b32b-4aac-af77-5c47575a646e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8b92d93-b32b-4aac-af77-5c47575a646e/c8b92d93-b32b-4aac-af77-5c47575a646e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8b92d93-b32b-4aac-af77-5c47575a646e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:7b:f6:0c:74:f4:66:23:9f:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8b92d93-b32b-4aac-af77-5c47575a646e
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=48fc4d34-1761-42e3-b300-27ff716277fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:18:e3:6e:52:76:ac:fe:a0:00:ed:f8:e4:47:
                    be:67:ba:0c:14:1a:93:c5:1e:18:44:c1:85:b4:32:
                    58:0f:90:b6:5e:e3:6e:ed:c6:71:c3:21:67:49:33:
                    0a:76:95:23:8b:05:25:bb:73:2f:70:d5:93:5d:7e:
                    d0:2f:56:06:30:4b:db:28:b4:df:f9:38:52:21:bc:
                    22:fc:0c:62:41:91:f8:7d:9d:64:29:38:87:d9:28:
                    2f:07:9d:43:b9:e8:c8:b5:f1:f0:b1:da:84:15:af:
                    90:43:cb:9d:82:c6:2a:b2:21:d7:cb:a7:16:c0:85:
                    30:0a:51:08:90:60:f4:09:a2:7a:52:af:c4:e0:54:
                    e2:4e:b9:bf:d5:c4:47:af:1e:e2:c1:99:9a:15:b2:
                    7d:4d:00:8b:8a:2e:4b:1d:fa:94:d1:f6:29:7f:cd:
                    a8:1b:60:67:e1:d6:aa:ea:39:91:56:84:46:63:c0:
                    21:c0:25:ab:59:1f:dd:9a:0a:cd:fa:82:e0:a7:e3:
                    9f:77:81:fe:8e:4e:86:7b:c8:28:83:48:e4:6c:a0:
                    0f:83:99:f9:c6:a5:cd:d8:63:ed:41:01:e5:1f:0d:
                    2b:a8:bb:e0:ef:23:92:0d:b6:0d:b9:68:51:74:04:
                    e4:3a:d3:d3:15:89:c4:5c:9c:24:d9:4e:9e:98:45:
                    68:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:3D:17:3B:8C:52:75:51:79:DD:87:94:52:50:4E:0A:1C:8A:1C:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8b92d93-b32b-4aac-af77-5c47575a646e/112d0449-0634-3e9c-91c1-f6dc39b00980.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8b92d93-b32b-4aac-af77-5c47575a646e/c8b92d93-b32b-4aac-af77-5c47575a646e.crl

            X509v3 Authority Key Identifier:
                keyid:85:C7:58:D9:20:52:A5:BA:CA:0E:6B:39:7F:31:F6:C5:3B:85:33:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8b92d93-b32b-4aac-af77-5c47575a646e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.235.209.0-216.235.211.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:d3:de:61:f6:00:d1:52:ce:78:31:8e:8b:ab:54:55:70:1e:
         3d:99:a5:d0:f6:b3:7d:93:75:a0:9f:73:f4:f6:37:1d:6c:76:
         fb:c4:89:f3:3d:4c:33:79:a2:4a:5d:24:87:ef:b5:05:48:9e:
         1c:92:6f:5f:da:fa:25:d9:df:40:5d:8a:f6:1c:ba:9a:9e:00:
         fb:ff:1d:37:1b:2b:08:49:52:c3:ab:9c:ae:7f:79:0f:36:22:
         9a:ae:42:d7:9f:1b:c6:15:e0:23:10:3c:df:79:81:23:8c:ff:
         a9:e8:68:f4:d6:b6:c4:f4:66:9f:f1:6d:d7:96:9b:76:1f:fe:
         71:bc:6f:6b:81:fa:a7:e4:df:50:50:fa:fd:41:0d:c5:29:ee:
         c0:fe:c9:8b:3a:5a:40:1e:d5:97:1d:c2:56:2b:57:3a:71:4f:
         dd:7b:81:c1:0c:36:80:b1:fe:b3:97:6e:e3:6a:54:16:d2:2d:
         87:66:0e:29:33:36:6a:05:6d:0b:2e:f6:2a:29:fd:5b:16:e3:
         30:2a:38:4c:bb:8b:bb:83:5f:68:49:fb:e8:8d:89:08:99:86:
         5f:a2:17:9a:cc:c8:f2:6e:ad:79:ef:f5:40:fc:c7:78:47:76:
         38:60:23:2f:87:69:90:65:63:6b:80:00:c4:a5:02:18:c0:30:
         d1:32:21:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 00:22:25 2026 by rpki-client