Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8b92d93-b32b-4aac-af77-5c47575a646e/112d0449-0634-3e9c-91c1-f6dc39b00980.roa
File:                     112d0449-0634-3e9c-91c1-f6dc39b00980.roa (raw, json)
Hash identifier:          gb8oqyLlIe3G+78ZOZZPyQGwYjUautJY+a2NiRreC1U=
Subject key identifier:   58:01:88:6D:03:51:56:A3:A2:60:3C:77:0A:B2:78:8F:F1:05:4E:3A
Certificate issuer:       /CN=c8b92d93-b32b-4aac-af77-5c47575a646e
Certificate serial:       010D0C9F4328584E4C54B09CAEBB8BE8DA740738
Authority key identifier: 85:C7:58:D9:20:52:A5:BA:CA:0E:6B:39:7F:31:F6:C5:3B:85:33:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8b92d93-b32b-4aac-af77-5c47575a646e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8b92d93-b32b-4aac-af77-5c47575a646e/112d0449-0634-3e9c-91c1-f6dc39b00980.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     32043
IP address blocks:        216.235.209.0/24 maxlen: 24
                          216.235.210.0/24 maxlen: 24
                          216.235.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8b92d93-b32b-4aac-af77-5c47575a646e/c8b92d93-b32b-4aac-af77-5c47575a646e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8b92d93-b32b-4aac-af77-5c47575a646e/c8b92d93-b32b-4aac-af77-5c47575a646e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8b92d93-b32b-4aac-af77-5c47575a646e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:b0:9c:ae:bb:8b:e8:da:74:07:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8b92d93-b32b-4aac-af77-5c47575a646e
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=ca37a2cb-5846-40a2-b2fc-98196701b1d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:41:4c:fe:89:0b:e3:21:fd:f8:80:4f:9d:4f:
                    ca:73:3a:50:14:98:9e:6d:27:5f:48:bb:ab:41:0a:
                    78:7c:86:2a:1c:fd:ea:c4:85:4c:24:37:b9:f8:25:
                    0a:a8:26:c0:63:e8:85:90:5b:ea:7b:a8:e7:35:f9:
                    3e:e3:dc:38:64:47:a5:5f:da:a9:8f:bb:10:fb:c9:
                    b1:c8:60:fc:d4:49:64:b0:48:32:8c:93:4f:01:a1:
                    4c:21:e3:d2:47:2d:4a:06:1a:82:0a:6d:a5:89:c0:
                    8c:c1:22:89:60:16:55:51:09:f4:9d:5a:0a:fe:a4:
                    3f:c9:a2:4b:bf:b6:20:6d:87:46:a2:83:85:5b:c3:
                    7a:38:4c:e2:39:54:e8:74:3b:b9:e5:4e:b0:17:db:
                    c1:f0:39:37:32:e9:70:c7:5a:e5:a9:63:a3:46:e8:
                    a6:10:6d:88:4f:1c:e6:44:f6:e6:4f:4f:72:6c:a4:
                    0b:95:77:ef:ff:6d:e8:57:ce:0a:6b:b8:da:f4:fc:
                    8f:3b:13:6b:0b:e8:04:26:c0:84:9e:03:b9:f0:7b:
                    70:6e:07:d7:1d:aa:f4:b3:e0:7b:1e:e1:92:cb:8e:
                    fe:6f:24:46:9e:16:22:56:8b:75:24:5f:b0:eb:d6:
                    85:d0:54:83:5e:00:cc:82:53:e0:60:d3:e1:eb:17:
                    33:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:01:88:6D:03:51:56:A3:A2:60:3C:77:0A:B2:78:8F:F1:05:4E:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8b92d93-b32b-4aac-af77-5c47575a646e/112d0449-0634-3e9c-91c1-f6dc39b00980.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8b92d93-b32b-4aac-af77-5c47575a646e/c8b92d93-b32b-4aac-af77-5c47575a646e.crl

            X509v3 Authority Key Identifier:
                keyid:85:C7:58:D9:20:52:A5:BA:CA:0E:6B:39:7F:31:F6:C5:3B:85:33:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8b92d93-b32b-4aac-af77-5c47575a646e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.235.209.0-216.235.211.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:70:ba:7e:6c:5c:5f:db:d8:ff:b2:78:cd:07:f6:69:a7:80:
         0a:ab:86:f2:25:61:80:dd:3a:b2:3b:de:91:4b:d1:05:10:06:
         f7:b2:e9:1b:49:1e:47:1c:12:6d:2c:01:d0:e6:df:20:32:97:
         de:b6:15:e3:83:ce:b8:ab:63:e3:fb:e6:62:bc:2f:59:ea:a4:
         a4:bc:62:23:60:ec:5f:34:4a:e4:1e:95:23:e3:78:2e:c8:69:
         77:25:35:9e:90:b7:c1:1c:cc:bb:69:f4:28:67:c8:b1:9d:fa:
         f6:c8:46:04:f3:53:24:fb:31:72:24:9c:5a:83:9c:4e:bf:f4:
         b7:55:9a:0b:3c:14:51:f2:98:1e:a6:fa:a3:7b:7a:22:26:03:
         99:1b:cb:bd:a6:d4:fd:2a:7e:f9:d7:1b:92:dc:5b:71:9e:94:
         89:c9:37:3d:5e:1d:38:4f:e3:6c:d7:86:99:b4:4a:ec:5a:a5:
         fb:33:24:5e:a3:e2:2b:03:0e:24:96:9e:65:98:74:10:a6:35:
         0f:5a:e3:c8:7c:13:47:31:45:d5:04:25:41:57:c0:f0:22:75:
         06:3d:51:01:a5:bb:a4:e8:57:70:97:bb:a5:a3:2d:00:7e:c3:
         15:fa:ca:7c:68:2b:a4:28:a5:6f:24:67:20:a8:60:ba:5e:cf:
         c7:ee:20:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:17:47 2026 by rpki-client