Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/ec9b8dd1-0fcf-3701-8960-025422e94c7b.roa
File:                     ec9b8dd1-0fcf-3701-8960-025422e94c7b.roa (raw, json)
Hash identifier:          mBDAz91ID652i9DJfQ6pPs/K5Pj+u5etqnVuDYt/oYc=
Subject key identifier:   0C:8A:A7:2D:09:9D:72:5F:48:86:37:1A:F5:2D:15:01:EB:6D:E1:3B
Certificate issuer:       /CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b
Certificate serial:       010D0C9F4328584DB1DAD388116C71D9EAFC3730
Authority key identifier: 6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/ec9b8dd1-0fcf-3701-8960-025422e94c7b.roa
Signing time:             Sat 02 May 2026 01:00:24 +0000
ROA not before:           Sat 02 May 2026 01:00:24 +0000
ROA not after:            Fri 31 Jul 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        208.88.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b1:da:d3:88:11:6c:71:d9:ea:fc:37:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b86db4eb-4041-4af8-b64d-f2e8b7bc048b
        Validity
            Not Before: May  2 01:00:24 2026 GMT
            Not After : Jul 31 01:00:24 2026 GMT
        Subject: CN=21b59842-5687-4ed6-ba3e-58b3411e8fc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5a:2f:7b:1c:42:8c:83:71:0b:34:a0:57:b7:
                    da:15:ad:9a:eb:02:04:1b:68:ce:de:94:72:a0:81:
                    67:fd:1a:64:42:9a:61:39:1f:a8:8a:fc:e4:77:ff:
                    38:d6:0b:2e:20:38:53:5a:ab:6b:c5:07:86:ac:95:
                    7b:97:4c:ce:ce:38:1a:8f:5a:56:9c:4a:22:b1:a7:
                    ad:2e:c9:25:84:01:c4:06:da:d6:2a:7e:83:7f:80:
                    81:2c:82:ab:ad:d4:9e:c9:18:dd:ac:ea:6d:2e:d3:
                    e4:b0:54:f7:a6:00:2b:08:da:40:20:71:e6:3a:e7:
                    d7:45:bd:c4:16:26:37:1c:20:2d:69:ee:26:31:e1:
                    bd:96:0e:dc:43:14:c5:a9:52:64:b9:87:0d:80:01:
                    db:00:b9:32:04:90:3c:d4:8a:97:cd:c6:16:d2:39:
                    a9:60:8f:b1:d7:ee:81:28:e6:68:de:a8:92:bf:7f:
                    5b:6b:14:96:0f:88:5c:d0:07:5a:63:a4:b1:df:0c:
                    64:06:39:46:3c:12:3f:ec:70:4f:a4:2e:d5:c7:79:
                    59:1d:d5:11:14:2b:81:b5:2f:f8:1c:87:56:1e:60:
                    68:1d:aa:dd:62:93:c2:f9:e3:cf:c2:df:c2:86:2a:
                    0a:e4:38:dc:7b:8f:3d:6a:12:e7:b5:38:76:f7:e7:
                    fa:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:8A:A7:2D:09:9D:72:5F:48:86:37:1A:F5:2D:15:01:EB:6D:E1:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/ec9b8dd1-0fcf-3701-8960-025422e94c7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.crl

            X509v3 Authority Key Identifier:
                keyid:6B:C2:13:50:EA:74:E5:66:96:4C:D4:4C:82:3C:A4:97:3E:A6:D5:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b86db4eb-4041-4af8-b64d-f2e8b7bc048b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.88.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:b7:d6:75:f4:b1:52:43:02:9e:07:07:59:bd:37:a0:c5:b8:
         22:bd:ee:d5:78:9a:45:0f:0b:b8:29:1b:8b:64:59:bb:94:d1:
         93:79:60:e5:81:f3:09:b3:17:36:cd:63:2a:a9:75:79:4f:96:
         f0:86:4f:a3:ed:4a:05:72:0b:b3:f1:bf:54:56:be:30:6b:4b:
         84:7a:9c:ca:24:4c:e4:7f:41:ae:38:25:a9:0a:f3:91:df:ae:
         5c:06:54:d6:6a:b5:b7:03:16:0a:44:72:ec:05:b5:db:39:05:
         8e:4a:aa:75:b6:0c:b1:25:d4:eb:fc:8e:5c:62:f2:08:2f:fb:
         fe:c6:e2:90:2d:8b:47:58:c8:b7:f7:6f:70:c9:8c:94:c1:cc:
         68:25:fa:01:21:d1:62:71:4a:bf:a7:4c:a1:76:44:f0:d5:9c:
         88:02:5a:ec:0f:5a:03:3f:79:09:2a:3e:0f:7e:5e:f5:e6:2f:
         fc:1c:37:88:3f:c1:8c:94:b7:13:52:96:04:e1:81:7c:99:89:
         2b:75:58:4d:b6:78:4f:ef:27:a4:35:4e:eb:d5:20:56:46:47:
         c4:8c:28:b3:f6:c7:cd:75:dd:81:cd:7c:a0:3a:29:cc:09:f4:
         cd:f4:84:7e:b1:1c:07:26:99:48:78:a0:d4:95:3e:df:b5:07:
         59:38:4c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:02:10 2026 by rpki-client