Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9bd201b-ca94-46d6-909a-8b5b404b5361/8e59df19-4b17-39e9-a2fd-5ff836dcaefa.roa
File:                     8e59df19-4b17-39e9-a2fd-5ff836dcaefa.roa (raw, json)
Hash identifier:          Ge9BIut9MusJaY1Km72qadpjBMLQ3cI24cSAA5VAbr4=
Subject key identifier:   CE:9F:ED:CF:3B:DA:F7:CB:A7:D9:35:4C:B8:B7:8E:ED:53:48:4C:60
Certificate issuer:       /CN=c9bd201b-ca94-46d6-909a-8b5b404b5361
Certificate serial:       010D0C9F4328584EA787D534BFEDA0EEC5CF4880
Authority key identifier: C1:37:E1:2C:4B:93:7F:A6:0B:9F:11:5A:AF:E9:9D:62:F4:85:22:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9bd201b-ca94-46d6-909a-8b5b404b5361.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9bd201b-ca94-46d6-909a-8b5b404b5361/8e59df19-4b17-39e9-a2fd-5ff836dcaefa.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14618
IP address blocks:        167.234.36.0/24 maxlen: 24
                          203.2.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9bd201b-ca94-46d6-909a-8b5b404b5361/c9bd201b-ca94-46d6-909a-8b5b404b5361.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9bd201b-ca94-46d6-909a-8b5b404b5361/c9bd201b-ca94-46d6-909a-8b5b404b5361.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9bd201b-ca94-46d6-909a-8b5b404b5361.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:d5:34:bf:ed:a0:ee:c5:cf:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9bd201b-ca94-46d6-909a-8b5b404b5361
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b91fd73b-82eb-440e-b65f-3ab13477ab1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5c:a6:48:8f:09:4a:99:4e:76:a5:9c:4e:d1:
                    96:a2:ff:4d:03:11:29:42:5d:62:35:68:be:70:34:
                    35:d5:c8:4b:73:00:2b:15:6f:2c:d1:7f:e3:1d:14:
                    0a:ae:6a:aa:6d:2d:e4:f7:94:b2:85:a5:04:27:44:
                    43:08:36:b8:fb:7e:84:4a:f5:9e:46:25:39:e7:c4:
                    96:0f:6c:51:c2:5e:e9:72:a0:11:d1:b9:c3:20:84:
                    9c:3e:ba:7a:c7:aa:06:b6:d4:96:3a:05:6d:33:cd:
                    20:59:61:ff:8b:66:3c:63:44:d3:85:b8:a3:51:73:
                    2a:cb:1b:60:5c:21:3c:db:03:a3:4c:7a:ef:1d:35:
                    1e:71:fd:00:7c:0d:a2:48:b2:10:c3:3f:bd:54:c8:
                    d1:70:54:04:99:fa:7e:91:a4:7a:91:2d:c4:f2:17:
                    bb:cf:90:bc:d2:e4:75:f6:71:95:43:68:04:ef:46:
                    c9:54:4d:89:03:53:4c:14:30:de:ae:37:cb:19:d7:
                    21:ea:5c:51:5a:ec:a7:12:cd:9b:70:27:f1:ad:36:
                    93:c7:c0:11:b9:af:d2:8f:a9:52:69:2f:39:fa:88:
                    33:fd:d9:f8:3e:23:b0:47:e0:5a:a8:0a:2e:1d:4d:
                    cb:73:3a:7a:35:12:2c:90:71:ce:1a:c5:2a:cb:24:
                    54:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:9F:ED:CF:3B:DA:F7:CB:A7:D9:35:4C:B8:B7:8E:ED:53:48:4C:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9bd201b-ca94-46d6-909a-8b5b404b5361/8e59df19-4b17-39e9-a2fd-5ff836dcaefa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9bd201b-ca94-46d6-909a-8b5b404b5361/c9bd201b-ca94-46d6-909a-8b5b404b5361.crl

            X509v3 Authority Key Identifier:
                keyid:C1:37:E1:2C:4B:93:7F:A6:0B:9F:11:5A:AF:E9:9D:62:F4:85:22:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9bd201b-ca94-46d6-909a-8b5b404b5361.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.234.36.0/24
                  203.2.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:05:43:e1:85:1e:33:88:be:cc:bf:7f:4b:c1:f0:a2:7c:a6:
         d1:76:20:65:46:cb:e1:71:5e:b2:43:8d:1b:b1:92:ca:e1:df:
         d0:7c:82:62:76:01:21:78:84:8d:c2:4a:bd:8c:2b:f2:8d:c3:
         19:e7:65:c8:70:19:81:d4:a7:56:70:46:d6:09:d4:dc:1e:10:
         f4:d6:af:55:3a:5c:43:59:1b:8d:59:d7:69:28:93:39:7d:bb:
         70:af:e7:9b:26:69:9a:58:36:3c:cf:87:06:29:4f:08:1c:c0:
         78:2e:de:48:84:90:59:b5:44:de:d0:39:b4:e8:9e:44:e1:3b:
         57:ee:9c:3e:0d:18:b5:ec:4b:65:26:23:16:f8:5d:1d:06:cb:
         ad:cd:fc:b2:b1:dc:e9:d1:81:6b:2b:c0:0c:17:e5:78:2d:dd:
         63:02:7a:0a:9f:b1:6c:65:53:12:b6:2a:5a:ce:e5:09:59:42:
         2b:12:d9:19:f8:f4:85:27:56:0e:ed:78:f0:07:2b:68:a7:09:
         db:86:09:d1:6f:08:de:b8:27:db:3a:a3:c5:1e:73:ad:ec:63:
         82:b5:09:16:2c:da:59:2c:db:9d:87:6d:61:d4:3f:e6:49:81:
         a2:f1:1c:dc:13:e1:c6:19:77:ba:5f:de:62:0a:7b:23:1b:be:
         f5:5f:04:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 00:05:29 2026 by rpki-client