Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6dac7c36-b5fa-3a4f-87ac-6aa59f544f8a.roa
File:                     6dac7c36-b5fa-3a4f-87ac-6aa59f544f8a.roa (raw, json)
Hash identifier:          N1ISvJwttvTHxH8EHVNHcEtqnKsmj2f/gK4ec6EJDVE=
Subject key identifier:   27:B6:89:58:0A:A5:FB:28:40:A6:C2:83:A2:89:15:29:16:DD:77:DC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E9D4A7365C570AB61401F0400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6dac7c36-b5fa-3a4f-87ac-6aa59f544f8a.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     393567
IP address blocks:        208.36.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:73:65:c5:70:ab:61:40:1f:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=ce4bdec2-a372-4c61-bbb7-a85d6fd55983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e2:ad:ba:e8:15:14:2a:b7:4e:20:a4:3b:b7:
                    03:4e:30:73:31:f8:51:26:87:b7:46:e1:a8:00:78:
                    ad:c0:0c:92:8d:d7:b7:88:38:54:c0:ab:00:80:d3:
                    20:9a:5b:f5:16:8c:57:8b:cd:2d:00:ef:65:54:23:
                    10:ab:bd:25:9a:e0:21:df:6c:5a:1b:7c:e2:a4:34:
                    33:2d:43:06:51:49:d6:cb:63:60:43:a8:e8:76:c4:
                    af:de:05:70:cc:d1:6c:6f:d3:12:fb:ce:f5:dd:cf:
                    aa:63:72:f1:78:3f:19:3d:db:75:da:26:39:15:1f:
                    23:db:cd:fa:a9:e7:56:a2:20:a8:9d:cd:7e:99:33:
                    ec:db:e2:5e:45:16:f0:a2:c4:19:22:6e:f3:06:f0:
                    80:ad:fb:70:32:36:fb:15:3b:75:5a:bd:6d:51:a2:
                    f8:72:0a:60:a9:0f:f1:d8:d5:8a:78:cd:6d:71:0d:
                    7d:d0:fa:54:76:a0:18:6b:08:e1:cc:7c:b8:68:e0:
                    9d:09:e0:ab:ea:51:4d:39:e5:07:ba:33:ac:47:d6:
                    28:d6:1e:3e:b2:5f:52:63:5a:b8:9a:66:66:11:97:
                    c6:6d:03:a5:0b:5c:8e:26:6c:f6:81:7c:40:48:92:
                    ac:61:d6:51:45:cb:dc:c4:53:57:40:5e:46:1d:22:
                    cd:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B6:89:58:0A:A5:FB:28:40:A6:C2:83:A2:89:15:29:16:DD:77:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6dac7c36-b5fa-3a4f-87ac-6aa59f544f8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.36.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:d7:f6:78:1e:ba:af:c3:31:19:41:be:1f:ca:13:be:d8:73:
         e3:63:0b:04:8c:db:26:2c:d7:be:3a:aa:ed:4c:8e:03:3f:63:
         a5:16:ec:ba:1b:21:fa:8a:6a:fc:fd:65:e3:cf:62:89:16:66:
         21:83:89:a6:66:ec:9e:6b:d2:28:50:2d:b0:4a:b0:c1:01:43:
         b8:67:e4:61:eb:af:cc:f0:ce:02:ca:a7:14:6a:05:2b:8e:6c:
         5f:41:68:01:38:66:5b:94:40:f0:31:f1:3e:2d:67:24:47:e4:
         ac:3e:86:36:86:e3:19:5e:ed:65:b6:f8:69:e4:62:75:8a:a0:
         7a:4f:4d:da:a3:47:bd:a4:f2:43:d6:c2:f7:05:6a:45:0a:d3:
         9c:ff:8d:e3:7c:37:e6:77:a0:af:54:1c:e1:b6:f5:6c:fc:a6:
         44:16:79:b9:a4:90:15:d6:7f:db:fe:17:33:66:d3:ed:00:5a:
         d9:62:0f:72:f4:49:d9:8a:82:db:21:fb:25:39:42:14:d5:31:
         27:0f:21:eb:fa:64:45:1c:fb:80:59:3a:43:ea:17:2c:8d:2b:
         fa:84:da:b6:12:c5:40:60:55:1b:97:35:84:f9:43:db:b0:bb:
         e9:39:4a:ba:ff:ce:74:de:79:29:ce:27:f1:89:7e:2c:77:fd:
         dc:1b:53:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 22:48:02 2026 by rpki-client