Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb/82fd5f1e-5970-3e0e-a860-0ff654c5ac86.roa
File:                     82fd5f1e-5970-3e0e-a860-0ff654c5ac86.roa (raw, json)
Hash identifier:          N2AznlmylcDvi+9yyaliZGur0cSZiK0kH2Wc96+Zfvk=
Subject key identifier:   37:14:06:03:0A:78:48:B5:B9:FF:7F:1D:DA:74:5B:24:BF:35:1C:88
Certificate issuer:       /CN=6ec5d668-721f-4186-82e6-1391fb7784bb
Certificate serial:       010D0C9F4328584EAFE6F4971E2A33A91E5C5D80
Authority key identifier: 7D:2B:C5:E6:4E:A4:7A:30:F2:01:F7:37:47:FB:D3:47:B7:14:63:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb/82fd5f1e-5970-3e0e-a860-0ff654c5ac86.roa
Signing time:             Sat 01 Aug 2026 01:00:12 +0000
ROA not before:           Sat 01 Aug 2026 01:00:12 +0000
ROA not after:            Fri 30 Oct 2026 01:00:12 +0000
asID:                     212238
IP address blocks:        172.81.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb/6ec5d668-721f-4186-82e6-1391fb7784bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb/6ec5d668-721f-4186-82e6-1391fb7784bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:e6:f4:97:1e:2a:33:a9:1e:5c:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ec5d668-721f-4186-82e6-1391fb7784bb
        Validity
            Not Before: Aug  1 01:00:12 2026 GMT
            Not After : Oct 30 01:00:12 2026 GMT
        Subject: CN=dd91ca20-046d-4c79-98be-24561fb2db6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:aa:6c:f6:63:c0:e3:81:36:4f:fa:b2:57:29:
                    36:35:72:90:f0:14:97:a9:fc:3c:5e:a7:97:d8:2c:
                    b5:25:88:60:90:fb:02:02:24:35:42:04:ed:f7:f9:
                    0b:97:25:b5:dd:7d:85:8d:08:33:d1:ae:b0:ea:0f:
                    20:ab:66:00:80:1e:28:45:f1:54:f3:da:44:d7:54:
                    ac:59:7d:a3:4f:0b:85:49:17:03:d6:40:f9:55:6c:
                    e5:49:44:07:b2:2b:c5:57:65:2d:b1:64:28:11:36:
                    c9:bf:a4:67:10:57:bc:5a:c7:4e:9d:8f:39:23:2d:
                    82:79:e3:71:19:e2:ba:7b:98:a2:83:74:40:d0:8b:
                    18:30:d8:05:2c:9a:90:df:34:4d:1c:5a:56:29:7f:
                    91:47:b0:18:4f:c8:85:2f:2d:66:8a:8e:9a:af:64:
                    c4:a1:40:bb:d6:36:f7:7d:81:52:43:ad:53:ef:9b:
                    a8:2f:ab:d6:80:67:15:62:fa:6e:72:30:e7:29:1a:
                    1c:e1:e3:27:50:b3:24:0b:65:0e:61:c2:42:d3:5d:
                    d2:a5:3b:97:b1:11:65:bf:43:36:65:b5:70:62:23:
                    1b:33:5a:6f:fc:01:c1:bc:94:10:32:27:1b:21:41:
                    72:13:4b:84:2d:58:99:cd:13:82:6b:4e:bf:a9:97:
                    90:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:14:06:03:0A:78:48:B5:B9:FF:7F:1D:DA:74:5B:24:BF:35:1C:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb/82fd5f1e-5970-3e0e-a860-0ff654c5ac86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb/6ec5d668-721f-4186-82e6-1391fb7784bb.crl

            X509v3 Authority Key Identifier:
                keyid:7D:2B:C5:E6:4E:A4:7A:30:F2:01:F7:37:47:FB:D3:47:B7:14:63:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:85:c8:6d:77:87:af:1d:51:26:16:20:d8:c4:1b:78:85:ab:
         56:d6:fa:53:f1:1a:9d:51:aa:c9:96:6b:11:de:c1:ee:42:14:
         11:78:74:a7:ce:64:8f:dc:74:c5:89:84:58:2d:ef:06:f8:18:
         9d:12:2d:d0:e0:d7:d3:44:22:62:44:e0:32:81:2d:9c:36:58:
         92:7a:56:ae:4a:6e:5f:b4:28:b9:d1:e6:0a:5d:1f:a9:eb:70:
         30:43:7e:dc:71:d9:74:29:16:2c:5f:66:eb:ac:ca:e9:f4:2d:
         2a:9f:11:ab:f5:e6:5d:d7:1d:e8:aa:ac:c6:72:ee:5a:65:99:
         5e:ee:7a:39:fc:c4:15:6d:42:8b:55:d6:6d:45:3f:2a:70:12:
         7e:e4:12:6e:65:34:77:1d:5b:1a:45:fb:eb:30:a3:a5:70:70:
         5c:37:5e:c8:f7:5e:7c:5d:5e:01:98:9c:3b:41:39:05:e2:e7:
         78:01:e6:a0:53:d2:2a:37:af:e5:5b:f9:f8:76:37:c9:a9:92:
         bf:52:49:e4:f0:b4:94:a3:a3:15:68:b6:0f:32:53:ff:91:61:
         7f:91:ab:a6:4e:66:30:2e:30:5c:c7:6a:17:97:f1:3a:4a:bf:
         e1:bd:57:4d:f6:27:b5:d6:9a:35:0f:8a:d0:61:df:9f:9b:b6:
         ce:74:d4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 07:45:49 2026 by rpki-client