Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a/ab71a37a-b8cf-3906-9b7c-2e450ae93e8a.roa
File:                     ab71a37a-b8cf-3906-9b7c-2e450ae93e8a.roa (raw, json)
Hash identifier:          wQ0dpenZ4nDGtRr+ICMwicvplCyUKtQ8mVLRupCbi+M=
Subject key identifier:   24:E9:1E:BB:17:A9:3B:98:89:FF:4C:C5:D1:F4:9B:21:F6:C1:3A:A3
Certificate issuer:       /CN=2af9df74-e88e-4433-b765-051efef6177a
Certificate serial:       010D0C9F4328584EB57C60FFA9C5D7D89C39F600
Authority key identifier: 8B:26:5A:51:23:75:D8:53:0B:3B:F1:97:63:92:96:17:B0:22:10:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a/ab71a37a-b8cf-3906-9b7c-2e450ae93e8a.roa
Signing time:             Mon 03 Aug 2026 01:00:11 +0000
ROA not before:           Mon 03 Aug 2026 01:00:11 +0000
ROA not after:            Sun 01 Nov 2026 01:00:11 +0000
asID:                     1035
IP address blocks:        205.203.72.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a/2af9df74-e88e-4433-b765-051efef6177a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a/2af9df74-e88e-4433-b765-051efef6177a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b5:7c:60:ff:a9:c5:d7:d8:9c:39:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2af9df74-e88e-4433-b765-051efef6177a
        Validity
            Not Before: Aug  3 01:00:11 2026 GMT
            Not After : Nov  1 01:00:11 2026 GMT
        Subject: CN=acc8927d-45aa-487f-a72e-1174c315acf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ec:f2:b4:82:59:78:fe:85:e8:af:aa:82:be:
                    7d:d6:70:4a:0c:aa:f6:35:43:64:d4:b2:b5:a5:57:
                    9c:47:d3:8f:e0:70:92:67:74:cd:98:85:5a:b4:65:
                    58:0d:0f:61:91:9b:63:a3:00:f0:a6:6d:ba:2d:a3:
                    d8:7d:d0:7d:32:7f:b1:d5:e1:8e:9b:4b:04:b3:be:
                    75:f7:5b:6a:53:c9:75:a5:1d:11:47:94:19:a7:70:
                    12:5e:a7:19:39:c3:da:a4:a5:cd:da:57:de:82:7c:
                    cd:52:b0:18:bf:b3:32:f3:45:ea:c9:21:bc:e5:18:
                    87:c8:bd:29:01:d9:2b:e6:2f:98:aa:69:8e:45:f1:
                    09:c5:a0:72:19:f9:74:56:b6:ca:c5:8c:c1:85:09:
                    84:f1:c7:e5:76:18:fe:c2:25:2d:54:3b:3a:e0:ef:
                    78:00:87:98:b2:9b:73:a7:48:da:bd:30:ae:5e:78:
                    e3:00:f8:e7:5c:f4:d8:a4:3d:d9:44:c2:3a:ce:14:
                    e1:db:2f:ca:91:6e:a9:de:6f:d0:15:5a:3d:de:7e:
                    60:ab:e2:e9:27:d3:f0:9a:cd:eb:99:ee:39:e6:3b:
                    48:00:24:ed:56:1b:ef:e0:43:dc:f8:e5:c7:57:3b:
                    fb:03:aa:51:ed:b6:24:57:1d:e0:79:5a:17:f7:41:
                    2c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E9:1E:BB:17:A9:3B:98:89:FF:4C:C5:D1:F4:9B:21:F6:C1:3A:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a/ab71a37a-b8cf-3906-9b7c-2e450ae93e8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a/2af9df74-e88e-4433-b765-051efef6177a.crl

            X509v3 Authority Key Identifier:
                keyid:8B:26:5A:51:23:75:D8:53:0B:3B:F1:97:63:92:96:17:B0:22:10:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.203.72.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:b9:4b:a8:f8:75:cd:20:08:38:72:95:29:2f:b4:80:14:3a:
         50:b4:54:c0:2e:f1:07:f3:a7:2c:67:31:e8:4f:5a:70:87:7c:
         b7:44:96:bc:05:6c:4d:9e:59:4e:3b:17:3d:32:14:a3:e4:6b:
         71:74:e7:53:4d:ee:6f:57:5c:66:d6:77:07:cc:c5:fa:a6:a6:
         9d:c7:08:52:fb:02:2f:95:21:ea:ad:09:65:1f:14:2e:76:4c:
         af:d5:21:03:f5:ce:cc:15:ec:64:a9:a0:e2:df:d9:70:77:c4:
         9c:a7:a8:6e:ef:30:b1:5f:42:bb:da:2c:ee:0f:51:33:e0:60:
         e2:0d:5a:bd:34:04:65:9c:75:09:d3:0e:1a:14:47:54:79:04:
         85:90:41:e9:59:56:4f:00:e1:c8:a9:7f:e4:d3:c4:70:25:53:
         b1:81:0d:1e:88:da:ae:10:3c:b7:13:78:a9:a0:f7:1f:f6:dc:
         8e:7f:c8:8a:20:b3:d1:3d:9d:e2:a7:26:34:38:42:88:7c:cc:
         c9:60:eb:be:24:16:a0:e0:3d:a5:3f:40:6f:f8:79:23:08:03:
         05:71:54:d1:c0:f3:32:34:d2:91:e3:65:09:4b:57:83:b0:c3:
         be:ba:99:6f:c1:7d:e4:4e:1c:aa:f5:a3:6d:69:c3:bb:25:41:
         2e:af:d6:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:10:16 2026 by rpki-client