Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8b92d93-b32b-4aac-af77-5c47575a646e/e0fdeeae-cbe5-3fc6-8b72-3ac7e822a228.roa
File:                     e0fdeeae-cbe5-3fc6-8b72-3ac7e822a228.roa (raw, json)
Hash identifier:          uGWoYbeY0UYzFj4yaqkrXs+5xhpxRfr5Du/uOUnq4OQ=
Subject key identifier:   06:DD:14:75:4A:49:0D:03:71:B4:4E:59:31:F3:C7:CD:61:BC:5A:84
Certificate issuer:       /CN=c8b92d93-b32b-4aac-af77-5c47575a646e
Certificate serial:       010D0C9F4328584E2C39A4B14AD56265857EE6C0
Authority key identifier: 85:C7:58:D9:20:52:A5:BA:CA:0E:6B:39:7F:31:F6:C5:3B:85:33:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8b92d93-b32b-4aac-af77-5c47575a646e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8b92d93-b32b-4aac-af77-5c47575a646e/e0fdeeae-cbe5-3fc6-8b72-3ac7e822a228.roa
Signing time:             Sun 14 Jun 2026 21:00:12 +0000
ROA not before:           Sun 14 Jun 2026 21:00:12 +0000
ROA not after:            Sat 12 Sep 2026 21:00:12 +0000
asID:                     402087
IP address blocks:        216.235.208.0/24 maxlen: 24
                          2602:f51f::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8b92d93-b32b-4aac-af77-5c47575a646e/c8b92d93-b32b-4aac-af77-5c47575a646e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8b92d93-b32b-4aac-af77-5c47575a646e/c8b92d93-b32b-4aac-af77-5c47575a646e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8b92d93-b32b-4aac-af77-5c47575a646e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2c:39:a4:b1:4a:d5:62:65:85:7e:e6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8b92d93-b32b-4aac-af77-5c47575a646e
        Validity
            Not Before: Jun 14 21:00:12 2026 GMT
            Not After : Sep 12 21:00:12 2026 GMT
        Subject: CN=703b2b62-e6fc-4b95-866a-6462385d5855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8d:e2:e5:ea:fa:79:d8:5c:e1:6a:3e:07:5e:
                    97:5e:0b:9d:8b:af:69:11:e2:43:de:e9:4b:f3:e2:
                    43:39:29:73:76:6b:c3:b7:dc:94:cf:d3:97:ed:5e:
                    ae:fe:51:72:99:ba:1d:b0:f9:de:a6:e9:fd:98:22:
                    59:4b:ea:1a:3f:de:d2:6e:d6:ba:51:08:27:83:f3:
                    90:01:d7:d6:a9:a4:57:ce:60:f3:f4:15:0d:fa:54:
                    a1:8a:3b:cd:d2:a7:0a:b2:cc:f6:06:30:e6:66:94:
                    12:12:93:75:61:99:56:26:c4:cf:6b:7c:61:b6:6c:
                    8d:ab:4f:4f:3e:2c:96:e7:5b:e0:5c:6b:5e:04:34:
                    4c:7a:27:79:de:c1:3a:19:d6:4f:9b:66:f9:2f:ae:
                    40:a6:8e:89:81:4f:b5:55:a7:18:2b:ca:73:96:c5:
                    a2:4d:9b:b6:c2:9d:2c:1a:49:37:3a:46:47:f8:cd:
                    dc:e2:9f:40:9d:0c:4a:0d:5c:3c:40:86:35:70:a7:
                    46:57:4e:88:e4:aa:3a:ed:4d:32:7f:71:98:10:8e:
                    1c:4a:70:b5:e8:25:1e:98:5a:fb:51:ac:30:f6:be:
                    19:c0:62:e2:2f:56:01:0c:fe:ae:5b:ef:95:cc:4b:
                    41:fe:7d:56:5b:96:12:7d:46:a8:dc:7e:81:ed:ba:
                    a9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:DD:14:75:4A:49:0D:03:71:B4:4E:59:31:F3:C7:CD:61:BC:5A:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8b92d93-b32b-4aac-af77-5c47575a646e/e0fdeeae-cbe5-3fc6-8b72-3ac7e822a228.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8b92d93-b32b-4aac-af77-5c47575a646e/c8b92d93-b32b-4aac-af77-5c47575a646e.crl

            X509v3 Authority Key Identifier:
                keyid:85:C7:58:D9:20:52:A5:BA:CA:0E:6B:39:7F:31:F6:C5:3B:85:33:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8b92d93-b32b-4aac-af77-5c47575a646e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.235.208.0/24
                IPv6:
                  2602:f51f::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:57:df:31:31:a1:f1:8e:df:fa:76:5f:74:82:d1:61:49:e7:
         c8:64:8b:13:b6:33:9f:2b:a8:74:ce:d7:8f:be:fe:74:a8:9e:
         8f:47:cc:2b:da:05:79:3f:e8:31:9e:83:0e:7d:1e:7d:07:0f:
         d0:f3:5f:d0:ba:5a:50:b9:70:4d:72:a4:8c:f9:2d:35:03:e0:
         47:09:e7:8e:bc:78:79:0a:47:7a:f9:8d:e3:f6:40:9c:74:3e:
         96:1d:d4:93:08:74:3a:81:45:39:63:e5:18:72:9b:99:41:c6:
         81:52:71:98:59:ef:08:cb:c5:06:e8:f7:8e:b6:c8:51:90:50:
         3c:bf:ed:45:25:2c:36:d7:08:4b:a4:59:e8:3c:c2:9b:94:6c:
         ee:e2:de:e6:90:3b:06:4a:2d:91:9a:fb:02:45:8e:d6:3e:4e:
         b0:3b:16:94:23:ee:95:bb:23:2b:05:08:be:0d:db:26:f1:77:
         31:d1:44:a2:0b:eb:a5:0a:42:40:0f:81:b3:c3:74:99:4d:81:
         49:f3:50:77:66:47:40:73:0d:43:84:60:ba:d9:07:b2:f4:ac:
         6a:4b:f0:d0:a7:e0:b8:02:14:31:f6:2c:af:26:95:65:e9:f7:
         a1:49:f6:32:a4:2b:ac:88:f8:eb:e2:18:1c:c1:34:45:39:47:
         d5:10:7a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 01:48:23 2026 by rpki-client