Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/dc68370b-afda-3ce5-a4bd-88cf782945a5.roa
File:                     dc68370b-afda-3ce5-a4bd-88cf782945a5.roa (raw, json)
Hash identifier:          XyVXoiPJrwqsB+WfWY7171gPLlx+UQbE/HEt+HeKHYw=
Subject key identifier:   5E:C3:B6:F8:B7:AD:17:71:D3:F9:D0:7D:33:D1:12:4D:EA:9E:0F:91
Certificate issuer:       /CN=8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0
Certificate serial:       010D0C9F4328584EAA51984EB25357C41ED2A180
Authority key identifier: FB:20:C3:D9:61:C3:DC:11:E9:5E:91:1C:01:24:34:2F:0B:47:95:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/dc68370b-afda-3ce5-a4bd-88cf782945a5.roa
Signing time:             Thu 30 Jul 2026 01:00:12 +0000
ROA not before:           Thu 30 Jul 2026 01:00:12 +0000
ROA not after:            Wed 28 Oct 2026 01:00:12 +0000
asID:                     19366
IP address blocks:        209.189.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:51:98:4e:b2:53:57:c4:1e:d2:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0
        Validity
            Not Before: Jul 30 01:00:12 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=48229705-df6c-4cec-b578-cee87ce42519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:44:02:c5:f6:d4:5e:09:1f:b9:43:06:62:28:
                    5f:7e:a0:a6:45:ed:e9:fd:8a:14:52:93:8f:03:b5:
                    c0:59:22:ae:e7:d7:98:0f:02:bc:58:6e:e6:81:10:
                    09:55:8d:35:17:ea:d1:f1:5f:68:18:22:3d:4e:64:
                    fb:9a:c5:60:a7:de:76:91:ea:a0:85:b6:e2:9c:b2:
                    aa:dd:f3:ad:35:62:e0:5c:5a:f8:c4:3a:e4:90:9f:
                    50:d8:3e:83:ef:ab:67:5f:5b:03:ab:e1:05:23:af:
                    6c:af:ca:fc:88:a1:f6:2c:67:df:0a:7e:b7:b8:87:
                    7c:27:b0:f4:87:c2:24:88:1b:9c:20:80:7d:2f:0d:
                    3f:fb:da:4b:d1:30:1b:5d:e9:52:88:f4:7e:ea:44:
                    98:a5:5b:76:7c:15:4d:65:5e:ef:09:94:ce:93:8a:
                    6a:8f:65:15:5b:51:65:69:75:0d:3c:b4:e1:60:32:
                    8f:e2:84:e8:2c:ff:40:89:d0:74:41:6c:31:4b:5e:
                    61:40:6f:8b:92:0e:4c:78:03:9f:4e:af:3f:d3:3c:
                    39:1b:d5:cb:5c:ee:9f:1e:05:fb:7a:bd:a4:b4:d6:
                    96:20:ca:d6:ff:c8:3a:da:78:46:cb:df:52:af:60:
                    22:bb:b4:57:d9:e1:7d:66:05:ee:a3:9c:dd:45:2f:
                    74:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:C3:B6:F8:B7:AD:17:71:D3:F9:D0:7D:33:D1:12:4D:EA:9E:0F:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/dc68370b-afda-3ce5-a4bd-88cf782945a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.crl

            X509v3 Authority Key Identifier:
                keyid:FB:20:C3:D9:61:C3:DC:11:E9:5E:91:1C:01:24:34:2F:0B:47:95:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c5f7e76-b2c5-4f20-b53e-2434cdedc2c0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.189.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:ec:b4:73:83:8d:b1:7c:0c:1b:c7:e5:eb:77:a0:74:08:d9:
         84:6a:80:1c:67:4f:54:0a:73:f0:39:28:37:c5:fb:9d:59:52:
         ea:4b:c0:02:bc:52:74:f4:72:ef:fa:e6:6f:97:bf:46:c5:79:
         c0:39:08:da:42:9e:da:08:34:d1:74:d1:cf:34:6c:54:4a:54:
         37:ea:e2:31:33:39:ea:b1:96:d3:d4:09:0f:f8:7b:13:a3:13:
         e6:61:46:97:dd:91:71:d2:2f:a6:01:1d:2f:68:2f:e7:36:1e:
         d9:60:57:99:bb:c6:f9:14:bf:8e:20:51:88:02:f0:f5:31:1c:
         f5:fc:31:66:71:4a:e6:ef:ea:2e:51:c4:c9:45:5e:92:8b:46:
         2f:f3:de:8d:5f:0c:39:b2:55:5c:b5:ae:94:e2:97:fd:5f:26:
         21:ec:78:94:39:c1:1d:9c:c5:fe:89:ae:0b:a5:0c:6f:e3:0b:
         ca:c4:c4:a6:3d:1d:52:f6:81:d9:82:65:1d:b8:12:a4:02:61:
         a7:d6:69:96:fc:ab:7b:3d:34:77:32:ec:30:ed:d6:d6:0b:01:
         3d:8e:60:42:33:5e:95:ab:eb:fe:bb:31:eb:4b:c2:4b:1b:c8:
         8f:f1:72:7a:13:f4:92:84:d2:48:12:8c:d0:60:08:d6:e7:08:
         cf:1c:1e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:37:02 2026 by rpki-client