Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/e53cba2f-02be-3018-bda4-87682927db2a.roa
File:                     e53cba2f-02be-3018-bda4-87682927db2a.roa (raw, json)
Hash identifier:          Odoa3xdfDjsev+gulXAgHSxdzEnQ1Zz7spiXPnA4QgQ=
Subject key identifier:   E1:6A:A4:9E:C8:47:23:BC:35:BF:FB:B8:84:A3:35:6C:CE:70:36:21
Certificate issuer:       /CN=2c480684-ece9-4dd6-8ec6-0437d826102d
Certificate serial:       010D0C9F4328584ECD3725176A7D87BFD77D5F00
Authority key identifier: DB:6F:31:8B:7D:79:70:F6:0C:C2:07:20:D2:13:6F:F4:FC:36:55:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/e53cba2f-02be-3018-bda4-87682927db2a.roa
Signing time:             Tue 11 Aug 2026 13:00:11 +0000
ROA not before:           Tue 11 Aug 2026 13:00:11 +0000
ROA not after:            Mon 09 Nov 2026 14:00:11 +0000
asID:                     46616
IP address blocks:        208.114.48.0/20 maxlen: 20
                          208.114.48.0/22 maxlen: 22
                          208.114.48.0/24 maxlen: 24
                          208.114.49.0/24 maxlen: 24
                          208.114.50.0/24 maxlen: 24
                          208.114.51.0/24 maxlen: 24
                          208.114.52.0/24 maxlen: 24
                          208.114.53.0/24 maxlen: 24
                          208.114.54.0/24 maxlen: 24
                          208.114.55.0/24 maxlen: 24
                          208.114.56.0/23 maxlen: 23
                          208.114.56.0/24 maxlen: 24
                          208.114.57.0/24 maxlen: 24
                          208.114.58.0/24 maxlen: 24
                          208.114.59.0/24 maxlen: 24
                          208.114.60.0/24 maxlen: 24
                          208.114.61.0/24 maxlen: 24
                          208.114.62.0/24 maxlen: 24
                          208.114.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/2c480684-ece9-4dd6-8ec6-0437d826102d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/2c480684-ece9-4dd6-8ec6-0437d826102d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cd:37:25:17:6a:7d:87:bf:d7:7d:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c480684-ece9-4dd6-8ec6-0437d826102d
        Validity
            Not Before: Aug 11 13:00:11 2026 GMT
            Not After : Nov  9 14:00:11 2026 GMT
        Subject: CN=554b7c7c-4290-4c19-a48c-4b54957e1d8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e0:63:47:54:fb:42:5c:f1:bf:68:2a:15:5d:
                    1a:64:5d:0e:b0:62:08:39:94:b8:d0:a3:8e:b0:b3:
                    88:0a:2a:dd:c6:8f:4c:8d:23:36:07:43:55:6e:35:
                    6d:b3:bb:ab:e1:f5:30:17:51:31:31:3f:6c:54:d9:
                    d6:89:df:99:5f:6d:21:7b:3d:05:49:64:4d:64:25:
                    52:41:e2:84:0f:3f:5e:2f:01:cf:30:39:f2:e2:9d:
                    97:a2:32:bb:a3:f3:8b:2d:a7:b4:cd:dc:e3:68:de:
                    c0:18:d9:94:27:d8:b3:3f:ca:f3:71:2c:71:54:62:
                    83:b1:43:3b:ef:b7:be:93:34:65:2c:31:c5:5a:31:
                    54:64:e8:ad:83:c4:9f:d3:c7:9b:f2:d9:53:d1:36:
                    76:32:ff:e8:1d:da:28:06:2f:d9:1f:99:2e:95:14:
                    28:28:99:f6:71:9b:d5:56:ad:28:f6:22:e0:ff:4e:
                    e4:b0:32:20:36:21:78:8a:68:08:84:7e:7a:3b:0b:
                    89:b9:d8:cb:1b:ae:df:7b:67:ed:54:8c:dc:d8:ad:
                    bd:42:bd:d8:c1:6b:a4:f3:3e:a1:4b:cc:b5:47:a9:
                    15:6e:f4:51:aa:84:0c:7e:78:83:8a:cb:3f:d1:5b:
                    62:94:5c:04:cd:05:55:64:ef:88:62:e6:6e:23:47:
                    ed:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:6A:A4:9E:C8:47:23:BC:35:BF:FB:B8:84:A3:35:6C:CE:70:36:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/e53cba2f-02be-3018-bda4-87682927db2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/2c480684-ece9-4dd6-8ec6-0437d826102d.crl

            X509v3 Authority Key Identifier:
                keyid:DB:6F:31:8B:7D:79:70:F6:0C:C2:07:20:D2:13:6F:F4:FC:36:55:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.114.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:2b:fc:ed:16:e6:ea:30:1d:fb:e8:73:aa:28:ed:c5:90:f0:
         0c:9c:53:da:eb:e5:14:14:98:31:59:ae:91:02:88:f4:cd:45:
         30:b2:81:8b:fe:61:aa:8d:ac:0e:8f:ee:82:9b:94:8d:76:55:
         45:bc:54:f1:78:6c:fe:ca:43:d2:9a:50:a5:6a:d1:43:f1:70:
         ab:7e:f7:1f:76:d0:a4:d0:94:01:d6:55:66:0b:b8:1f:5d:bf:
         a9:35:3f:cb:9a:e7:51:29:bf:1d:31:3e:5c:52:fc:4c:4b:0c:
         6e:3f:ee:a8:96:db:f4:71:e9:ae:cc:a3:6e:3b:59:d6:81:39:
         27:56:c7:1f:9d:61:52:09:3a:6c:aa:e6:05:5a:f5:c6:29:93:
         13:87:c4:7b:75:99:70:d1:70:7f:24:a0:4d:f5:b8:a9:e0:be:
         38:01:b6:da:bb:49:e2:bc:ea:3e:ee:32:89:9d:41:70:13:00:
         87:d0:45:76:38:62:8b:1a:9e:b2:ea:2f:a7:a5:d1:9c:88:33:
         99:97:09:a4:8d:38:14:26:01:42:96:e2:b7:ba:c7:5c:f9:e9:
         9b:34:98:30:a0:39:ba:98:87:d0:47:b1:8b:c8:df:42:fb:84:
         cc:58:40:74:df:7a:98:2b:8e:63:4e:68:3f:a2:78:64:b5:88:
         cf:79:15:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 13:00:13 2026 by rpki-client