Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda/4dd83c20-0952-3b58-b85c-b9a305656646.roa
File:                     4dd83c20-0952-3b58-b85c-b9a305656646.roa (raw, json)
Hash identifier:          lj5eXkl2Q35D3boFW4GvoX+oFLIR2hCrZBm3LXJDNtc=
Subject key identifier:   B6:7C:4F:FB:4B:6D:32:3B:B1:90:97:56:DE:FE:2E:06:94:2D:1A:97
Certificate issuer:       /CN=26f87379-b07b-41fb-8976-6fd9e7149fda
Certificate serial:       010D0C9F4328584EB2B1C2333F4E58D4AEB26380
Authority key identifier: B3:E3:8B:C0:B5:ED:73:06:2C:85:6C:E9:D3:69:C8:9E:A9:E3:DB:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda/4dd83c20-0952-3b58-b85c-b9a305656646.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     394081
IP address blocks:        216.38.232.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda/26f87379-b07b-41fb-8976-6fd9e7149fda.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda/26f87379-b07b-41fb-8976-6fd9e7149fda.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:c2:33:3f:4e:58:d4:ae:b2:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26f87379-b07b-41fb-8976-6fd9e7149fda
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=560de2cf-a1b2-4a92-ac2b-5bfb01fe6821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:0c:4e:7a:9d:4a:9b:80:3f:bc:61:f7:ab:4d:
                    8c:ca:57:77:30:34:53:de:90:13:50:e2:6a:bd:2a:
                    ff:eb:1a:9e:0b:9f:45:4c:d0:3c:a0:a5:b1:a8:28:
                    d2:ad:bf:23:46:66:db:0e:6e:ab:49:38:11:cf:2b:
                    40:71:aa:c6:22:87:76:ac:da:33:03:be:d3:89:44:
                    04:cb:80:36:2d:18:4b:78:94:6b:c9:99:a1:28:5e:
                    cf:68:09:22:4a:8b:86:d8:d5:b1:25:08:48:44:a2:
                    10:67:a8:80:64:74:5e:8c:2c:a6:41:1e:c7:de:e3:
                    d5:c1:8f:a7:82:97:4e:57:be:d5:8f:9b:04:73:68:
                    8a:f4:69:07:1a:a0:86:69:fc:98:a1:37:3b:b2:e2:
                    3a:99:2f:3d:6c:33:8e:5b:d9:38:60:19:75:0c:b7:
                    06:bc:76:3e:f2:75:83:b5:b0:b7:97:68:3b:73:ab:
                    65:03:6b:01:e9:5d:74:96:15:6f:41:0c:08:15:8d:
                    4e:d3:98:39:eb:99:9d:5d:e7:18:82:73:97:93:ff:
                    28:98:c3:bc:4c:f7:04:d4:46:35:0a:ff:98:3f:a3:
                    6c:93:80:da:23:21:ad:e8:8c:43:99:cb:bb:db:ab:
                    60:0c:a4:1c:b6:03:45:d1:a7:3b:e1:43:bf:22:52:
                    7e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:7C:4F:FB:4B:6D:32:3B:B1:90:97:56:DE:FE:2E:06:94:2D:1A:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda/4dd83c20-0952-3b58-b85c-b9a305656646.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda/26f87379-b07b-41fb-8976-6fd9e7149fda.crl

            X509v3 Authority Key Identifier:
                keyid:B3:E3:8B:C0:B5:ED:73:06:2C:85:6C:E9:D3:69:C8:9E:A9:E3:DB:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.38.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:38:15:9d:92:e2:ce:08:06:98:09:e0:60:ed:08:ca:89:e0:
         85:8a:b2:47:9e:56:e2:04:58:a1:cd:04:a5:ab:89:66:6c:ce:
         a2:1d:c6:55:4f:c7:01:c4:aa:1e:8a:71:13:b7:30:e0:c9:8b:
         5d:14:e6:3e:82:e0:f0:f3:cf:c7:27:ef:18:08:4f:be:8e:ac:
         0f:82:dd:b0:c1:ea:27:50:f4:ad:6b:c1:7d:90:8e:ad:61:49:
         af:0b:8a:5f:8e:2e:08:24:40:79:42:3c:d1:f8:ce:70:57:36:
         62:37:9a:2e:79:76:23:78:23:ba:05:6c:5c:f2:ae:d8:8a:6b:
         ac:df:15:ce:7f:d6:9f:78:a4:8e:27:c3:04:c1:f2:b6:cd:8e:
         15:f1:8d:79:54:b5:8b:1e:92:2e:d7:13:d5:20:d4:05:86:f8:
         26:32:aa:2d:df:28:e5:57:c0:34:61:df:e5:6f:b8:24:f2:29:
         85:23:46:68:9f:18:0a:b2:f1:f6:64:59:88:4b:11:fd:6f:f1:
         cf:6c:4c:1e:59:6c:3c:c4:e5:cf:8e:70:cb:bb:f1:0c:b2:45:
         50:c0:f2:22:48:19:71:0f:2a:1b:28:b2:d3:80:f3:6e:83:72:
         95:4b:c4:cd:78:c9:c7:49:0b:aa:64:97:52:b0:4d:7c:57:25:
         ff:39:d6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 15:42:15 2026 by rpki-client