Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/2dfa31b5-03c6-37f8-ac0e-2c030a540741.roa
File:                     2dfa31b5-03c6-37f8-ac0e-2c030a540741.roa (raw, json)
Hash identifier:          5XR49yvpoFkvjJlhWZ2QZypA4fjuRQDhbFcDlquxWK4=
Subject key identifier:   1A:6C:A6:09:5C:D6:B7:5F:F7:CA:EF:EE:FD:AE:BF:91:6B:82:2E:6A
Certificate issuer:       /CN=08d14a9b-0dce-4576-8d20-8da4bc15fb7a
Certificate serial:       010D0C9F4328584ED6FC7D0C5F448B0819947600
Authority key identifier: E7:5F:01:26:E5:6F:7A:55:FE:4C:1A:B7:AB:E7:BB:EF:A3:CE:DE:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/2dfa31b5-03c6-37f8-ac0e-2c030a540741.roa
Signing time:             Sat 15 Aug 2026 01:00:12 +0000
ROA not before:           Sat 15 Aug 2026 01:00:12 +0000
ROA not after:            Fri 13 Nov 2026 02:00:12 +0000
asID:                     3599
IP address blocks:        205.173.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d6:fc:7d:0c:5f:44:8b:08:19:94:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08d14a9b-0dce-4576-8d20-8da4bc15fb7a
        Validity
            Not Before: Aug 15 01:00:12 2026 GMT
            Not After : Nov 13 02:00:12 2026 GMT
        Subject: CN=150944bd-7cfa-497d-9531-30674d76ba4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:85:25:3b:27:34:26:43:7e:3f:a7:1b:d4:ab:
                    53:bc:ca:70:f3:e9:82:d4:c3:9b:79:e5:d4:f7:8c:
                    48:b2:37:b2:cf:92:7e:6b:28:82:29:77:ec:40:dd:
                    7b:99:a6:b9:fc:94:0d:ce:65:c8:0b:70:69:d8:a2:
                    64:6a:2c:5e:8c:6d:51:dd:f7:a4:0a:29:dd:1a:c8:
                    b8:53:d5:db:ee:74:25:bc:c1:04:6d:5d:ab:30:e7:
                    29:db:04:28:be:7b:ef:cb:4c:84:a5:a7:5d:02:85:
                    58:bf:4a:0b:2e:ea:bd:d5:fd:2b:88:97:6f:6d:de:
                    eb:83:3e:aa:45:51:49:cd:30:bd:ae:10:00:5b:7d:
                    56:69:86:2c:42:97:84:1a:2c:64:7b:b7:68:70:9c:
                    e7:da:0f:a3:49:b9:04:a8:34:d3:58:2d:4c:13:e4:
                    34:05:9c:67:c0:33:8b:9e:c4:f0:97:f2:83:e4:d9:
                    be:63:24:81:15:e1:47:f3:7c:3f:15:ed:95:6b:1e:
                    c7:ac:34:c1:65:bb:58:b0:9d:66:9a:b4:0f:f5:43:
                    dd:ec:ac:1a:3f:27:bb:30:42:cb:0b:49:22:33:ec:
                    bc:7c:ca:ee:8c:bb:be:36:fa:9e:24:2e:6d:93:19:
                    10:b5:96:ed:af:ea:a0:88:cd:bd:31:8b:91:5e:d4:
                    6d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:6C:A6:09:5C:D6:B7:5F:F7:CA:EF:EE:FD:AE:BF:91:6B:82:2E:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/2dfa31b5-03c6-37f8-ac0e-2c030a540741.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.crl

            X509v3 Authority Key Identifier:
                keyid:E7:5F:01:26:E5:6F:7A:55:FE:4C:1A:B7:AB:E7:BB:EF:A3:CE:DE:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.173.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:68:71:09:ce:f9:d2:3e:86:2a:ca:86:61:66:26:d0:4a:ac:
         f3:eb:4d:07:c8:8e:ba:52:aa:10:61:b6:14:f8:04:fa:ba:a5:
         f3:26:b1:1c:1a:e5:55:a5:05:08:ef:14:4e:f8:a3:e2:0b:2f:
         d5:23:a0:af:03:df:c2:9a:d0:da:d4:00:0f:f5:71:20:f1:a1:
         e9:3c:e3:ff:33:1e:99:f3:87:a7:51:a9:a2:63:5b:b4:f7:a8:
         c4:b5:9b:18:3f:c9:e2:91:c8:40:23:a1:d6:47:cd:2c:fd:0e:
         a5:fc:e9:ab:c8:c3:ce:6a:3f:27:63:40:c0:31:31:5f:0c:bc:
         a0:d8:b6:37:d6:15:4f:f0:45:e6:2b:a5:4d:6c:a9:08:90:7d:
         24:e3:f9:0f:05:27:54:61:36:e4:a8:bc:50:5a:dd:ee:37:06:
         21:52:7c:0d:88:eb:13:5d:ce:5b:2b:b2:d2:c5:c6:8b:ee:56:
         f7:44:fa:ac:71:17:3c:a3:39:4d:54:c7:dd:2d:19:88:9a:e5:
         69:e4:38:1a:10:7d:62:62:26:9b:1c:26:a3:8b:f9:49:36:75:
         fa:b1:7c:e2:3e:16:70:ec:15:78:e3:2d:f7:a0:6c:87:5d:fc:
         5c:16:35:99:8e:e2:f6:c8:4a:e7:a1:b9:e2:98:d9:b9:b2:34:
         b8:85:7b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:50:51 2026 by rpki-client