Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/ec98ccff-bac5-31aa-9357-e5318d0e3c73.roa
File:                     ec98ccff-bac5-31aa-9357-e5318d0e3c73.roa (raw, json)
Hash identifier:          Dibxviw39EJL+Q6haOiP3HcNSMo6xqMc5IOT9zdhCKI=
Subject key identifier:   26:70:B0:1B:9B:71:5D:CE:F6:3F:25:D3:F3:2F:A1:7A:DE:08:86:36
Certificate issuer:       /CN=b02b2a27-63d2-435f-8114-d98e289edc6c
Certificate serial:       010D0C9F4328584ED001E7723624D3262C1E83C0
Authority key identifier: 68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/ec98ccff-bac5-31aa-9357-e5318d0e3c73.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        204.110.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:e7:72:36:24:d3:26:2c:1e:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02b2a27-63d2-435f-8114-d98e289edc6c
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=8f87a1eb-7f1a-4adf-980b-1b6324ec9e88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6e:96:c1:c0:dd:7d:9b:05:06:9f:ae:db:05:
                    6f:35:88:5f:53:ee:70:45:fa:6d:5c:36:14:13:94:
                    c2:c5:ed:6f:73:87:6c:08:ee:24:53:65:1c:36:ed:
                    8c:49:a9:cb:a6:cf:6f:2a:dc:d8:2d:b0:2c:01:ba:
                    9e:ff:f7:4b:d7:55:70:65:d5:2d:b2:e1:08:f2:82:
                    02:3e:34:19:a7:90:62:39:47:30:cd:09:1c:cf:09:
                    d2:c3:50:65:00:0f:b1:05:94:c4:3c:e9:c0:d3:67:
                    bd:a7:66:cc:b0:b6:11:33:09:7e:df:c8:20:47:c2:
                    2c:45:c7:ba:b7:fa:20:04:20:9d:32:bc:2d:51:af:
                    46:da:72:3a:e3:06:34:a6:c4:85:1a:79:ae:c2:fd:
                    56:84:f2:ac:48:9f:4e:ad:34:d8:34:ee:d0:21:23:
                    60:b1:d5:c5:b9:5a:a0:1c:90:76:8c:22:09:c3:4c:
                    24:5b:5a:17:d0:c4:c5:f5:8c:bf:98:89:02:8d:0d:
                    32:38:93:4e:34:d4:02:78:5a:59:da:05:f1:e8:50:
                    e9:5a:b5:ed:19:11:ca:09:91:5b:76:6f:17:aa:e8:
                    25:01:a6:59:b5:00:8b:d5:c4:c7:0d:05:d1:26:0e:
                    14:44:a4:4e:a1:13:db:f6:0c:ce:ff:df:6a:df:0e:
                    41:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:70:B0:1B:9B:71:5D:CE:F6:3F:25:D3:F3:2F:A1:7A:DE:08:86:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/ec98ccff-bac5-31aa-9357-e5318d0e3c73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl

            X509v3 Authority Key Identifier:
                keyid:68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.110.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:ab:97:18:2a:73:42:81:a7:8b:16:f4:3a:e9:13:48:8d:37:
         d8:be:79:ea:4a:7f:35:7a:ed:08:9c:0e:5a:2a:2c:19:2e:6c:
         bc:53:bc:3c:4d:00:6c:a9:a7:e8:8b:6a:de:3c:7b:07:2c:b4:
         49:d6:6d:6d:e5:a0:d0:0a:61:50:43:97:0e:5a:4c:7a:7e:5c:
         80:ff:d3:73:bd:22:26:38:52:71:9b:d5:05:11:14:b9:ea:64:
         1c:4a:20:e4:c0:59:dc:4b:a2:1b:cd:f3:de:c4:89:52:86:45:
         fb:fd:26:6f:40:5f:d2:ac:d8:92:d3:d7:5e:38:62:61:f5:75:
         84:50:44:8e:55:22:71:ef:37:f8:b9:23:d8:66:4e:26:26:4d:
         c3:79:98:28:60:97:8f:e1:0a:29:c5:ed:d9:ba:c2:06:2b:fe:
         d4:bb:46:6e:80:45:f9:fb:c3:cf:f0:90:db:65:f1:a0:cd:28:
         a2:b1:78:fb:94:cc:9e:08:fd:aa:06:0f:24:a5:07:3d:a2:08:
         98:68:82:80:d5:5c:f8:0a:46:a6:53:9a:7c:73:10:ac:68:c1:
         df:3d:4e:dc:97:28:25:b8:2d:54:fa:29:60:5e:16:f5:1b:72:
         17:9d:15:b0:c0:ec:82:60:e3:04:94:22:fa:73:d1:64:a6:c4:
         5e:71:6d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 13:04:50 2026 by rpki-client