Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/68365f48-7c66-3b0a-9514-08444a5b126b.roa
File:                     68365f48-7c66-3b0a-9514-08444a5b126b.roa (raw, json)
Hash identifier:          bPeH2Hrd/eHHIir3hH5AsxicqRIqwpUgKTuB6n4MTkk=
Subject key identifier:   01:CA:0C:58:54:49:4F:18:3A:66:28:A5:33:21:80:18:60:6F:A0:AD
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F4328584F189791AACFB565B1023CF200
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/68365f48-7c66-3b0a-9514-08444a5b126b.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     33208
IP address blocks:        208.56.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:91:aa:cf:b5:65:b1:02:3c:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=82a5939b-5569-496b-9363-c085b6dd08b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4f:97:4a:68:e8:6a:27:4b:6a:95:b2:64:3f:
                    28:c3:33:29:b1:26:01:7a:1c:f4:68:a6:2a:d7:db:
                    c1:f4:fc:e3:5a:69:46:81:ca:8e:28:94:06:d3:ff:
                    ff:c6:1b:88:5e:d9:77:cc:75:24:40:a0:75:79:55:
                    26:6f:5b:c2:a2:10:58:74:b8:d8:2f:cc:eb:ae:7b:
                    f2:15:d4:df:44:39:0f:9a:78:88:16:27:15:b3:0d:
                    89:f4:ba:dd:fc:00:05:cb:00:bd:fd:ba:03:5b:34:
                    f6:f3:fe:18:69:6e:31:91:b1:07:51:bc:ed:30:fb:
                    67:91:a2:10:78:05:23:86:78:36:de:97:5b:a5:94:
                    b7:35:43:ee:77:59:23:3a:b4:73:bc:e7:c9:aa:00:
                    4d:da:58:f4:5d:a8:5c:fb:ec:b7:31:dd:83:9d:bb:
                    5d:77:38:92:8f:d9:19:26:57:53:36:14:b2:7e:67:
                    f0:cb:f3:04:f2:6a:73:17:2a:cb:96:2f:8b:f1:e5:
                    c0:43:41:bb:91:18:72:7c:e9:77:91:28:14:bf:b4:
                    8c:3f:62:45:d8:21:17:8a:ef:20:88:11:55:66:2b:
                    19:67:af:8f:2f:80:a5:c0:f5:b3:4d:5b:00:f6:c1:
                    3d:e7:4b:8b:0b:2a:63:1b:e9:e9:ca:58:75:70:b6:
                    34:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:CA:0C:58:54:49:4F:18:3A:66:28:A5:33:21:80:18:60:6F:A0:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/68365f48-7c66-3b0a-9514-08444a5b126b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.56.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:d2:61:40:e3:f1:2c:c7:01:de:d1:39:a6:96:66:9d:a4:55:
         9a:34:f8:52:18:82:21:48:7d:93:81:fe:88:c1:97:ba:a1:9f:
         f5:50:c2:92:23:7d:85:06:2e:a7:23:4b:5d:56:ee:d5:26:10:
         d3:b1:b9:b6:88:0e:d0:a1:4a:d8:33:30:a5:7f:d3:85:2b:bf:
         41:f3:e8:b4:c1:05:8f:0b:00:7f:ac:0b:88:d8:28:69:b1:04:
         43:be:12:fc:91:48:cc:90:01:d2:48:52:9e:aa:35:19:88:62:
         25:c9:c0:d4:88:53:a5:55:a5:94:b2:b5:8a:fb:20:3f:ec:fc:
         ff:0d:43:42:87:31:5b:03:ea:a6:22:07:9e:95:f7:d7:c3:48:
         be:bf:b0:be:b9:1f:ba:08:61:3a:be:7d:c3:6b:64:75:0f:fe:
         b0:91:ef:47:37:15:b4:54:82:a0:68:8b:2d:61:1f:db:7a:de:
         65:92:e5:4e:8e:9b:6f:06:f1:3d:28:b3:ca:cc:2d:22:fe:3c:
         85:2a:42:f2:52:62:d7:12:85:7b:18:23:e1:70:31:3e:1f:33:
         87:bb:67:9d:5a:a4:a0:dd:d8:9c:b9:e0:cd:03:85:37:93:50:
         c0:95:ff:31:5b:61:fb:81:5a:07:66:f6:1b:42:be:e3:7c:14:
         62:09:36:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:23:47 2026 by rpki-client