Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eb8f6180-4d3c-363c-8cf7-e1236e77a06f.roa
File:                     eb8f6180-4d3c-363c-8cf7-e1236e77a06f.roa (raw, json)
Hash identifier:          6TzhpMoc5OasAsVDwDTxPitNlnifdMTwjDzb0BRGYrg=
Subject key identifier:   4E:41:BE:5A:43:3F:55:53:ED:DD:CE:DA:30:7E:C3:50:45:73:02:23
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584E74CF75DD45E3D1B49A7A6280
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eb8f6180-4d3c-363c-8cf7-e1236e77a06f.roa
Signing time:             Fri 10 Jul 2026 21:00:12 +0000
ROA not before:           Fri 10 Jul 2026 21:00:12 +0000
ROA not after:            Thu 08 Oct 2026 21:00:12 +0000
asID:                     396604
IP address blocks:        216.87.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:74:cf:75:dd:45:e3:d1:b4:9a:7a:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 10 21:00:12 2026 GMT
            Not After : Oct  8 21:00:12 2026 GMT
        Subject: CN=aee39495-a815-467b-ba54-9c2f156fd070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:15:47:78:58:1c:96:db:a1:74:6a:7b:63:8e:
                    6c:ea:7f:5b:24:e3:84:e6:8e:85:85:e6:3f:51:85:
                    62:8d:6e:8a:37:45:b2:38:73:ab:40:cb:c8:31:e2:
                    ee:4c:2c:c0:ff:12:51:d5:bb:74:a5:bd:8d:61:c8:
                    8c:b4:12:08:45:07:f4:05:6c:11:b8:73:70:2a:fe:
                    d0:90:c8:ad:e5:ba:81:41:6b:c0:d9:ef:55:c0:e7:
                    17:3f:bd:ff:ed:6a:20:a7:b2:33:50:4c:a2:d8:31:
                    1e:f9:d1:4a:74:b4:44:8a:8d:f9:c3:46:54:7a:a5:
                    ae:4e:1a:15:b7:c5:ea:e3:4f:67:60:dd:a1:ed:0f:
                    1a:4b:2f:dd:cb:db:2d:03:39:80:b4:ee:b1:97:f3:
                    b1:be:dd:92:5f:9c:01:7a:03:0c:e5:45:1d:57:fa:
                    14:d6:79:d0:7b:a6:cb:bb:8a:80:7e:1e:c2:26:a1:
                    a0:f3:e3:83:dd:f7:9f:19:90:4d:bc:84:c3:ed:5d:
                    39:37:be:4e:81:39:a4:52:c1:f0:64:d0:24:e2:f1:
                    52:69:2e:7a:72:9c:ed:c0:0a:7a:f1:a3:77:41:13:
                    29:81:5e:b7:a2:1e:59:5b:e8:da:a8:59:f0:1f:2b:
                    2c:9f:7b:be:9c:c2:b9:87:ee:db:09:9a:58:f5:87:
                    32:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:41:BE:5A:43:3F:55:53:ED:DD:CE:DA:30:7E:C3:50:45:73:02:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/eb8f6180-4d3c-363c-8cf7-e1236e77a06f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:01:a0:54:63:74:08:88:d9:53:50:cd:40:55:11:9f:33:80:
         a4:56:23:9f:4e:a3:b1:f3:78:48:3b:be:c3:c9:98:ec:42:80:
         63:08:55:53:99:b5:4f:4b:ed:38:b9:bf:25:59:cb:a8:b7:8f:
         82:c6:a1:9b:f1:61:e1:30:bf:5b:e6:fc:be:ea:cc:9c:78:df:
         22:cf:5d:86:43:77:ea:2b:ca:1f:dd:4b:46:ab:86:6b:ad:a0:
         e9:6e:ed:0c:52:36:00:9f:6e:a0:c1:38:12:92:5c:db:e0:02:
         ac:6a:94:e2:ed:f2:32:98:5e:9e:ed:10:0f:07:0e:8a:af:ff:
         7b:ce:2b:ca:d6:03:ae:3f:12:c8:d7:57:07:47:72:0d:93:6c:
         03:2a:12:ec:5c:2d:ed:f5:72:bb:9d:88:ad:64:68:a2:ef:b0:
         09:04:fc:c1:39:fd:c0:24:6d:fa:87:b3:07:3a:4f:5c:1b:95:
         f0:d7:55:61:af:13:cd:d4:85:4f:ac:a2:bb:3d:b2:01:89:ce:
         3a:8d:a2:1e:77:88:4a:34:3e:72:49:ad:41:b7:9b:bb:ff:52:
         0f:c9:99:e1:e8:33:fa:74:2d:b3:d2:a2:3c:4c:20:e0:32:00:
         b7:78:c9:40:0f:f0:30:cb:7e:97:e6:67:78:5c:c0:dd:a3:8a:
         b2:8f:70:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:45:07 2026 by rpki-client