Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c87c2d54-4e0e-39e2-8289-63cb664073d6.roa
File:                     c87c2d54-4e0e-39e2-8289-63cb664073d6.roa (raw, json)
Hash identifier:          xqi5FoBj+MXmdSauBJ702H0Pqj/Q1g3EJKGZX9ij1Is=
Subject key identifier:   83:4B:05:7E:DE:7A:7C:79:B4:E9:52:F2:C6:67:10:74:37:F5:7C:A4
Certificate issuer:       /CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
Certificate serial:       010D0C9F4328584EEBEC9C6DA203EC0E69570480
Authority key identifier: 02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c87c2d54-4e0e-39e2-8289-63cb664073d6.roa
Signing time:             Sat 22 Aug 2026 13:00:12 +0000
ROA not before:           Sat 22 Aug 2026 13:00:12 +0000
ROA not after:            Fri 20 Nov 2026 14:00:12 +0000
asID:                     55118
IP address blocks:        209.203.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:eb:ec:9c:6d:a2:03:ec:0e:69:57:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
        Validity
            Not Before: Aug 22 13:00:12 2026 GMT
            Not After : Nov 20 14:00:12 2026 GMT
        Subject: CN=24c0db8e-4c8d-4fee-b67b-e697fe73e56f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:31:75:d3:ad:75:55:50:ac:ca:a3:37:d0:71:
                    70:b5:43:5a:15:65:21:c6:e4:fc:98:91:c0:da:ae:
                    75:7b:97:0a:29:1e:b6:fc:29:84:64:33:d6:00:89:
                    dd:f8:91:33:30:5b:41:72:3c:37:0a:48:32:29:59:
                    75:cd:2a:18:83:44:3c:35:68:3c:d0:66:18:f1:6b:
                    6c:25:07:1d:75:dd:f0:8d:bc:f6:1b:b8:46:02:28:
                    8f:e2:3a:af:a7:30:92:77:0f:3f:f4:31:8f:88:0d:
                    2a:8b:50:ee:6d:92:10:ac:fa:66:40:1b:03:f2:31:
                    b8:9c:e1:a3:08:3c:39:25:90:8a:fe:81:3b:24:33:
                    ff:91:a7:e5:5d:93:d7:fe:6e:21:dd:dc:28:ef:f5:
                    91:5b:fe:f4:59:20:c9:07:90:a8:59:45:2a:6d:8d:
                    90:23:05:a2:61:2c:2f:be:c7:a9:59:c2:92:43:a5:
                    65:3e:90:a2:66:2b:f5:02:f6:47:45:b2:6b:83:bb:
                    5f:7b:2f:f6:f8:04:3c:b6:91:9b:d1:0e:12:0c:2e:
                    46:17:bb:c3:4b:63:c5:c7:c9:0c:b6:e3:c7:30:34:
                    47:3a:f9:13:a4:91:6e:23:14:e3:48:50:3a:2d:18:
                    db:6e:47:a8:33:67:06:0c:2e:17:c2:2a:d3:03:51:
                    0d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:4B:05:7E:DE:7A:7C:79:B4:E9:52:F2:C6:67:10:74:37:F5:7C:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c87c2d54-4e0e-39e2-8289-63cb664073d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl

            X509v3 Authority Key Identifier:
                keyid:02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.203.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:2c:a5:d2:eb:92:81:5d:59:e9:43:3d:29:66:f7:aa:91:60:
         e6:d0:ee:df:23:2b:f8:f2:be:9d:4a:bd:a5:e5:15:f9:b9:60:
         b9:f0:79:72:e0:3a:23:44:2a:4b:a5:b7:42:ee:73:11:08:0e:
         d1:2b:71:87:96:57:53:09:09:aa:2a:b0:05:cd:81:fe:d1:81:
         6c:8f:d7:e4:8c:44:e6:a2:87:39:89:df:b0:4e:47:c6:64:51:
         dd:d5:f3:9e:ab:cf:d4:39:0e:95:5f:d6:69:14:78:27:2f:b6:
         c6:c8:a5:2f:bc:40:a8:fe:da:30:a8:79:83:89:7d:3b:94:34:
         54:0d:04:5d:9e:ca:e1:7a:9a:94:0a:61:09:ee:4d:5b:8b:d6:
         54:26:68:85:5b:10:66:2d:59:8b:f1:1b:b4:38:a4:5b:23:44:
         59:3c:69:23:9a:68:5b:05:ff:6e:8a:31:a8:eb:6f:48:15:68:
         ed:92:29:14:c3:66:b5:22:48:92:d5:b4:ba:8d:63:c4:a9:27:
         02:d2:33:0c:7b:2d:f1:2e:88:c5:0c:82:d7:f0:b2:0c:54:c8:
         b3:4b:f6:01:cd:28:db:8f:14:7b:93:43:10:14:db:f3:bf:21:
         49:ff:dd:e8:04:bb:20:13:61:37:39:62:45:c1:f1:ef:c9:1e:
         a4:cd:b8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:23:55 2026 by rpki-client