Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/02e5f9ec-c046-35d8-b394-07d281392eec.roa
File:                     02e5f9ec-c046-35d8-b394-07d281392eec.roa (raw, json)
Hash identifier:          v1Zr7U+nqeiF0wVVx86Vou6BnqsuNUYwvCTYmWi4wsg=
Subject key identifier:   69:3C:74:18:B5:7B:D0:C0:2E:F3:5A:1B:E5:5F:18:23:26:F3:CE:FE
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EDC91E58DCED5207F65580640
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/02e5f9ec-c046-35d8-b394-07d281392eec.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     834
IP address blocks:        209.101.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:91:e5:8d:ce:d5:20:7f:65:58:06:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=5c3267a0-ac52-4405-9816-7f548bb31e62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4c:2a:b1:4f:e1:ae:00:d3:d7:44:c7:6c:a2:
                    45:c2:28:77:7b:41:61:c2:6e:5a:c2:0d:3d:38:a1:
                    3f:91:0f:a3:33:ef:59:a9:27:41:63:27:47:b9:c1:
                    ee:5d:ff:5c:21:38:07:82:ca:7f:91:f5:6e:98:07:
                    1e:fd:29:b4:09:c0:54:6c:3e:b6:f8:ee:8c:9f:97:
                    4c:08:78:28:82:59:e9:0e:3b:75:46:35:27:f1:24:
                    c2:66:95:5e:82:24:6c:dc:73:f9:bc:6e:f1:d0:1d:
                    3c:a4:14:9d:33:f0:67:0e:ed:ce:e1:a0:50:b6:22:
                    de:0c:bc:79:ba:03:9f:75:44:4b:ba:67:e5:63:dd:
                    5d:ed:32:0c:65:28:61:a7:61:f8:a7:df:f7:ca:b9:
                    3d:78:a2:db:46:aa:af:f0:50:c5:0a:a6:c4:c4:16:
                    54:9a:e8:6a:08:a9:5d:53:59:19:4e:b1:3d:65:c8:
                    47:13:fa:31:ba:cc:e0:f6:9a:3c:35:21:a3:e7:18:
                    c4:fb:0c:08:76:ad:68:2b:5f:a9:0e:28:34:c1:ce:
                    fe:52:a7:c7:4e:ae:b3:7e:c9:07:8d:ef:bb:ad:5d:
                    d4:1a:53:5a:fd:a2:4c:ad:ed:77:ad:ec:e8:ed:54:
                    62:0e:a6:1a:f2:5a:92:2c:33:b3:11:b1:2c:d0:94:
                    39:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:3C:74:18:B5:7B:D0:C0:2E:F3:5A:1B:E5:5F:18:23:26:F3:CE:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/02e5f9ec-c046-35d8-b394-07d281392eec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.101.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:ad:d0:1d:f8:6f:00:f7:ee:43:7d:d7:0d:d4:ad:36:b7:e9:
         8f:16:30:01:3a:bb:c4:eb:69:1a:91:9d:21:1e:db:eb:3b:bd:
         6d:0e:18:c2:22:d7:69:4c:d1:64:10:c1:ba:7d:3c:b5:1a:b4:
         15:e1:2e:47:3d:21:4b:b1:13:06:fb:74:cd:3c:8d:3e:d5:86:
         8b:4d:4b:2c:58:ab:bc:42:ee:02:e5:84:0f:24:10:f3:69:88:
         2c:2a:54:4f:84:e4:a5:e5:67:d7:b8:43:30:8a:ae:90:53:92:
         ae:1e:7a:a8:92:3b:50:83:e4:e6:28:9a:32:65:20:2c:32:7b:
         9a:6c:6c:52:63:30:66:9b:a5:b6:ee:92:53:80:82:52:13:58:
         d2:e7:96:a5:ea:72:77:28:eb:58:c1:09:38:13:b5:8e:88:e3:
         6d:f9:b7:44:55:3e:86:6e:20:80:d6:2c:f6:e6:cb:3a:16:e0:
         09:01:33:eb:c5:c1:6e:be:b3:dc:ae:38:0a:ea:96:77:f2:cb:
         15:56:b5:5e:27:60:84:1f:af:02:b2:61:f0:46:7f:a7:a8:2b:
         fb:73:63:28:72:bc:91:63:dc:44:c4:5b:ea:f6:c0:2e:dc:7e:
         f3:11:1e:4d:a5:c8:53:32:f3:c4:8b:dc:02:ad:94:8c:21:6a:
         16:3e:27:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 10:45:15 2026 by rpki-client