Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/dcfcd0c5-ac2a-387d-953a-ec956d5c070b.roa
File:                     dcfcd0c5-ac2a-387d-953a-ec956d5c070b.roa (raw, json)
Hash identifier:          VdFWnF77qPw8jDLNIQ6nnmdwtJD/YveK/0WX+o9JI/w=
Subject key identifier:   D4:F7:B1:45:0C:9F:8A:AC:7C:C9:80:2C:88:49:EF:09:57:EA:D6:D7
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584EF9547D939A52252F6CA3D400
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/dcfcd0c5-ac2a-387d-953a-ec956d5c070b.roa
Signing time:             Thu 27 Aug 2026 08:15:02 +0000
ROA not before:           Thu 27 Aug 2026 08:15:02 +0000
ROA not after:            Wed 25 Nov 2026 09:15:02 +0000
asID:                     29802
IP address blocks:        173.213.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f9:54:7d:93:9a:52:25:2f:6c:a3:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Aug 27 08:15:02 2026 GMT
            Not After : Nov 25 09:15:02 2026 GMT
        Subject: CN=e517906c-7fac-4640-b14e-a5644f13ef16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b9:50:4f:cb:be:05:a7:25:0a:5f:d1:60:01:
                    d9:72:4e:bc:53:e4:42:9e:22:6e:36:27:b1:ed:9e:
                    98:91:be:65:dd:a4:28:1c:87:88:2a:ba:70:af:1e:
                    69:4f:e8:94:a7:36:df:86:2c:26:4f:dd:f5:7e:82:
                    37:80:b9:8f:3c:96:63:51:04:91:b5:2d:03:bf:d6:
                    4b:a4:e4:20:d8:6a:36:22:f3:06:53:f0:fb:fc:dd:
                    a4:37:67:4e:08:78:17:3d:72:09:20:3f:88:79:78:
                    d2:c5:08:6a:1e:95:de:02:5a:05:bb:70:1c:73:ff:
                    2e:a1:3e:7c:5a:7a:2b:c9:52:a7:a2:e6:1a:c4:7c:
                    49:08:6a:2f:a9:b9:32:ba:70:85:78:fd:25:cc:56:
                    ab:fb:b0:d8:40:8b:b7:be:11:71:20:b1:61:3b:a7:
                    19:5b:bd:ed:cb:cc:47:4d:82:e6:6b:69:39:1e:4e:
                    17:37:ee:3d:36:db:63:79:44:ed:0f:c2:06:57:7c:
                    00:5f:d0:75:6a:af:0d:6d:57:ef:cf:bb:6c:bc:e6:
                    40:7f:22:d1:e4:31:02:15:7c:7a:91:ea:80:f5:92:
                    08:94:1f:6c:2c:b4:a0:7c:22:b1:0b:3d:b5:58:1f:
                    4b:2e:00:28:0c:75:75:b5:40:a4:81:e6:e1:a9:7a:
                    04:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F7:B1:45:0C:9F:8A:AC:7C:C9:80:2C:88:49:EF:09:57:EA:D6:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/dcfcd0c5-ac2a-387d-953a-ec956d5c070b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.213.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:ef:96:e3:e0:eb:ca:36:f7:68:07:ed:8a:3c:cf:48:b3:ea:
         29:4e:91:a7:95:fe:32:aa:ed:17:2b:32:6b:05:a8:a2:3f:6c:
         72:2b:50:44:46:3e:3e:9b:9a:c5:cc:54:16:bc:5d:f1:a5:b9:
         61:6d:b9:f9:4b:6c:d4:d0:eb:05:c3:a6:c9:2c:01:a7:df:7d:
         87:e5:db:8a:83:53:f8:6e:36:67:7a:fb:9a:de:10:19:fc:49:
         da:bf:d0:e1:b4:dd:f2:0d:cb:1b:04:d7:5e:a9:9c:dd:d2:5b:
         09:dc:1f:20:32:43:31:ab:d8:e3:dc:b0:8a:b9:d2:e4:44:41:
         0e:d1:d1:f6:fe:45:8f:fd:49:86:c8:39:44:68:e4:e4:e3:39:
         7e:3d:33:bb:a0:dc:aa:37:8c:c7:5d:59:6a:aa:31:84:ca:ac:
         9e:58:a0:9a:58:74:1a:f0:09:36:cc:b9:39:a0:6f:93:76:33:
         42:e5:24:bc:51:e3:14:d8:b5:a9:a9:75:2c:4c:20:d8:e2:db:
         b0:61:2f:84:2b:33:b8:13:b9:06:e2:3d:44:fa:6c:24:28:06:
         3a:ab:e9:8c:72:20:7b:46:bc:7f:16:91:ca:27:d9:33:7c:ef:
         d8:99:e1:9a:fb:69:89:65:47:d3:04:c7:6b:c2:7f:21:97:b6:
         f2:bc:a0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 05:59:45 2026 by rpki-client