Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/ec9b8dd1-0fcf-3701-8960-025422e94c7b.roa
File:                     ec9b8dd1-0fcf-3701-8960-025422e94c7b.roa (raw, json)
Hash identifier:          EmB/bSkFY+5x3/xWFCp1xogZce0wLjdhd9nyaYLHLAE=
Subject key identifier:   27:6C:04:6C:4A:A2:AC:82:33:D8:0B:C6:A8:D8:12:F2:6F:45:66:6F
Certificate issuer:       /CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b
Certificate serial:       010D0C9F4328584E921FABBF888E192433764900
Authority key identifier: 6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/ec9b8dd1-0fcf-3701-8960-025422e94c7b.roa
Signing time:             Tue 21 Jul 2026 09:00:12 +0000
ROA not before:           Tue 21 Jul 2026 09:00:12 +0000
ROA not after:            Mon 19 Oct 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        208.88.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:92:1f:ab:bf:88:8e:19:24:33:76:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b
        Validity
            Not Before: Jul 21 09:00:12 2026 GMT
            Not After : Oct 19 09:00:12 2026 GMT
        Subject: CN=b711984b-128c-4040-8d9a-580c2f97bd35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:fc:e2:fa:0c:5b:60:2c:c0:e5:b1:f6:90:56:
                    a2:2e:c3:1d:4a:c1:2f:63:50:43:5c:64:0b:7d:f4:
                    a6:08:f9:82:f7:b6:8e:66:de:98:2c:cc:20:07:4c:
                    ca:f3:f4:45:1a:2c:3b:de:83:27:73:45:dd:28:3a:
                    1c:a6:1e:5f:62:3b:3a:fe:4e:0d:39:bb:05:7e:58:
                    80:10:a8:8e:ed:6e:91:a7:a7:83:77:5d:a6:80:1d:
                    c3:da:53:27:7c:03:26:74:aa:79:3c:5b:68:04:e6:
                    6f:95:e9:e8:fb:1c:6a:3b:58:9e:32:7e:f4:69:31:
                    38:fa:42:3e:7c:2a:eb:74:3f:ca:4e:3e:ac:ac:58:
                    92:b7:9f:e4:fb:91:4e:4d:26:55:9b:8a:7b:59:93:
                    d9:c3:bb:fb:e6:e0:85:49:b7:ba:00:87:b4:9f:32:
                    f1:93:52:a5:11:bf:a2:67:60:18:d2:3f:02:ba:33:
                    25:97:04:42:b4:0f:4b:e6:1a:a3:7d:d1:a8:66:d5:
                    90:4f:2a:4d:c4:c6:75:e9:c9:99:c3:b5:d0:4a:62:
                    51:7e:4c:c5:37:ff:67:ba:2a:7d:42:2a:80:e0:db:
                    f1:5d:55:05:cc:8b:ab:b7:69:db:46:a9:36:df:fb:
                    82:61:3d:dc:07:12:65:c2:eb:c7:48:2f:63:42:9b:
                    c5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:6C:04:6C:4A:A2:AC:82:33:D8:0B:C6:A8:D8:12:F2:6F:45:66:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/ec9b8dd1-0fcf-3701-8960-025422e94c7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl

            X509v3 Authority Key Identifier:
                keyid:6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.88.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:9a:14:81:1c:dc:3b:72:6b:21:de:31:c8:2d:2a:5a:51:ae:
         41:fb:96:22:2d:07:98:d9:d1:49:9b:06:ee:c0:88:9c:8e:7e:
         91:cf:fb:20:f1:71:81:99:da:b1:91:4c:13:2b:74:73:a2:04:
         63:46:43:0f:4c:e4:d7:77:01:9f:2b:c9:c3:d1:8f:69:dc:ba:
         72:02:09:1e:c2:7f:4a:7c:6c:09:67:f2:2c:22:2a:c0:d0:93:
         5d:01:be:ff:13:cf:3d:d7:87:7f:c9:40:b6:ea:1a:eb:dd:5c:
         71:a6:86:86:0f:26:fa:6f:12:17:7e:94:ef:c7:e3:10:db:d2:
         ef:75:60:bf:29:1f:ca:b5:65:13:25:d8:2a:49:21:e7:bd:1f:
         1c:0e:31:17:29:ea:90:65:b4:65:2b:62:16:92:29:6f:97:97:
         59:39:41:a4:f4:93:b6:75:a0:d8:52:6e:ed:68:f3:8f:d0:78:
         af:e8:ea:9f:1a:78:4f:fd:ca:1a:dc:f5:97:90:04:0b:35:e7:
         48:68:3d:ed:a7:69:31:2e:c3:75:18:2d:df:2a:cd:59:ba:4a:
         2c:e2:79:22:a9:c3:80:c6:8c:fd:8c:dd:ec:f5:48:7f:46:a7:
         a8:75:f0:14:e5:c5:9c:02:21:a5:46:1f:47:7e:e0:05:91:f2:
         6c:f8:0c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:01:39 2026 by rpki-client