Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ecaf3eac-d982-4ee8-b103-c57ce0ff9c81/ad734eb9-15e0-3a3e-bde3-ad72d0edff2b.roa
File:                     ad734eb9-15e0-3a3e-bde3-ad72d0edff2b.roa (raw, json)
Hash identifier:          mG1G97wRHXG+3f3yqAXYCACMHj7KAGKZny38QUGQ0gQ=
Subject key identifier:   EC:A4:66:64:36:C9:AA:64:F6:72:43:96:27:52:86:4F:D0:00:CA:B0
Certificate issuer:       /CN=ecaf3eac-d982-4ee8-b103-c57ce0ff9c81
Certificate serial:       010D0C9F4328584EC7A1C131915AE57338E75840
Authority key identifier: C9:DB:48:E3:6C:7D:18:7A:DB:3F:13:52:36:D0:61:8D:65:63:96:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ecaf3eac-d982-4ee8-b103-c57ce0ff9c81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ecaf3eac-d982-4ee8-b103-c57ce0ff9c81/ad734eb9-15e0-3a3e-bde3-ad72d0edff2b.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     401803
IP address blocks:        204.128.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ecaf3eac-d982-4ee8-b103-c57ce0ff9c81/ecaf3eac-d982-4ee8-b103-c57ce0ff9c81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ecaf3eac-d982-4ee8-b103-c57ce0ff9c81/ecaf3eac-d982-4ee8-b103-c57ce0ff9c81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ecaf3eac-d982-4ee8-b103-c57ce0ff9c81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:c1:31:91:5a:e5:73:38:e7:58:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecaf3eac-d982-4ee8-b103-c57ce0ff9c81
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=aab0d64e-6679-410c-b490-a293183c6676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:85:b4:50:42:26:a2:12:52:40:17:40:fc:85:
                    dc:65:9f:52:6a:1a:e4:d2:af:53:26:04:ea:af:87:
                    ac:a6:fb:9b:34:b7:02:4b:6e:39:d8:b8:73:a4:f2:
                    0a:08:13:cb:ca:2e:a4:ef:25:1b:23:2a:a2:5f:a9:
                    46:a1:4f:ff:d2:95:3f:cd:92:64:1a:aa:4b:24:03:
                    ea:c0:b2:9f:23:c7:ec:a0:89:67:9c:d6:9c:40:1e:
                    fc:2d:81:3e:43:c6:0e:41:22:fc:6f:94:da:8f:b0:
                    b2:2f:e4:22:66:11:24:1b:2c:25:d1:6b:5a:34:9b:
                    a8:ad:dd:54:05:21:d4:ee:d5:91:38:16:8e:71:c4:
                    83:9e:85:58:67:07:4e:58:9d:f9:72:41:4d:fd:87:
                    c3:4a:f6:9f:2d:e5:2d:86:ab:18:1f:46:64:af:bd:
                    da:81:11:1e:d5:7c:07:fe:58:81:1a:ab:89:2c:6a:
                    c5:61:ad:75:ba:70:7a:07:9a:3b:18:93:09:6a:8c:
                    20:b5:d9:c3:9f:f2:02:26:c6:e2:9e:83:d6:ee:90:
                    0a:dc:c7:b9:43:7f:1e:e0:cc:59:72:52:50:56:12:
                    be:16:49:ec:45:35:69:ad:80:c2:40:65:87:6f:f8:
                    da:2b:43:1e:b9:e6:da:43:9b:e5:26:6e:6b:5d:04:
                    14:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A4:66:64:36:C9:AA:64:F6:72:43:96:27:52:86:4F:D0:00:CA:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ecaf3eac-d982-4ee8-b103-c57ce0ff9c81/ad734eb9-15e0-3a3e-bde3-ad72d0edff2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ecaf3eac-d982-4ee8-b103-c57ce0ff9c81/ecaf3eac-d982-4ee8-b103-c57ce0ff9c81.crl

            X509v3 Authority Key Identifier:
                keyid:C9:DB:48:E3:6C:7D:18:7A:DB:3F:13:52:36:D0:61:8D:65:63:96:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ecaf3eac-d982-4ee8-b103-c57ce0ff9c81.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.128.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:9a:ff:1b:6d:f1:5e:1c:b3:b2:92:83:43:c3:49:cb:de:d0:
         e4:4d:69:b6:3c:7d:d8:b8:39:85:2f:2c:02:42:ba:30:4c:1b:
         a5:d1:fd:6d:42:58:0e:bf:b8:1d:b7:91:b7:f3:60:d5:a8:f0:
         97:51:b6:b9:b4:3a:74:75:80:50:d3:b8:f5:70:a1:87:3f:17:
         73:23:30:74:5e:19:65:da:d9:14:9e:19:41:2c:53:29:3f:71:
         1c:54:a1:b9:48:1b:6c:ed:21:b4:e6:00:18:da:f0:d2:56:db:
         39:4c:cd:10:01:81:d0:3d:fa:9a:05:50:2b:55:bb:c4:71:d9:
         e7:82:f0:2e:9d:1a:35:d6:12:5d:10:82:1c:1d:4d:d0:84:64:
         f8:70:de:7b:92:4c:bd:d6:22:8e:73:14:c5:56:a6:3f:5c:ad:
         79:a1:cc:8b:af:e8:5b:7c:72:7e:18:02:08:9d:4c:40:87:7e:
         ab:12:d9:b2:d2:31:4a:24:f8:0e:f9:90:4f:c9:be:29:56:15:
         80:a7:e2:0e:34:56:81:9b:1f:34:92:73:1d:fb:12:df:13:4f:
         c7:4a:d3:9d:3b:60:4c:f5:ca:e1:df:03:0f:05:75:ae:45:a5:
         c7:ed:a7:6c:02:5a:ce:54:44:86:68:9b:f3:d1:53:32:b6:4b:
         4a:ef:f4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:35:18 2026 by rpki-client