Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/eef0d8e7-c332-39e6-bb6c-8682d8c29635.roa
File:                     eef0d8e7-c332-39e6-bb6c-8682d8c29635.roa (raw, json)
Hash identifier:          nC7ZaKlJiI2vBBEmgNaEPRFQaTQacK5BQXwC98QFwBM=
Subject key identifier:   7C:49:56:06:EF:BF:36:2B:B4:42:3D:3D:F8:11:19:89:D5:E2:B2:BF
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F5560334852C03DB8A596CE80
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/eef0d8e7-c332-39e6-bb6c-8682d8c29635.roa
Signing time:             Tue 29 Sep 2026 07:32:59 +0000
ROA not before:           Tue 29 Sep 2026 07:32:59 +0000
ROA not after:            Mon 28 Dec 2026 08:32:59 +0000
asID:                     62904
IP address blocks:        173.232.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:55:60:33:48:52:c0:3d:b8:a5:96:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 29 07:32:59 2026 GMT
            Not After : Dec 28 08:32:59 2026 GMT
        Subject: CN=89e43f32-c11f-4dd7-9fdf-91f2fc3968e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:92:77:85:6d:87:3e:3a:71:6c:04:0e:84:b8:
                    1f:fc:80:7d:fc:9a:ee:4d:8a:b3:ab:36:fd:bd:f5:
                    2d:6f:8c:6c:6b:10:06:74:16:f6:47:d6:e9:e0:82:
                    7c:a7:e3:7f:0d:7e:ae:6a:2b:96:5a:9c:c9:7b:73:
                    cc:7c:ec:e2:6e:47:44:00:09:cf:a0:30:78:70:1a:
                    50:db:dd:ea:f7:7f:86:d3:b2:4c:ce:33:61:7d:3b:
                    7c:17:b2:c7:11:69:21:30:4f:b8:9e:2e:72:b9:ac:
                    c3:8d:cb:36:45:fb:39:35:16:5c:51:62:4a:71:10:
                    59:94:ec:e9:07:1d:ec:04:d6:ff:db:f9:60:2d:95:
                    88:c4:0a:c8:99:85:ed:57:e7:14:be:9d:f8:0a:ee:
                    9e:10:0c:d5:c0:65:01:db:36:c7:f0:ec:7c:02:79:
                    1c:9f:94:b4:59:f4:2a:eb:c5:d3:bc:e0:9a:0b:0a:
                    ba:0d:f7:02:1e:c1:37:af:bf:40:1c:09:dc:3a:c7:
                    3d:7a:22:56:6f:34:14:40:c8:91:49:b6:6e:45:bd:
                    37:d0:ae:2b:fa:ac:43:f3:1e:1c:d8:41:dc:22:ad:
                    12:b3:3e:a8:43:0e:ad:06:b0:9d:33:fc:0f:32:67:
                    3b:1b:7c:ed:d7:12:ed:25:33:7d:c5:0c:16:61:93:
                    5f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:49:56:06:EF:BF:36:2B:B4:42:3D:3D:F8:11:19:89:D5:E2:B2:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/eef0d8e7-c332-39e6-bb6c-8682d8c29635.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.232.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:00:d8:6e:85:df:b3:7a:11:e1:98:71:e7:91:33:f3:c9:60:
         ea:8b:c2:ca:02:cb:b2:de:ba:75:5f:bb:0a:10:52:74:de:b3:
         48:77:07:88:58:87:5a:24:96:1d:e6:89:8b:95:55:b4:2c:1b:
         23:26:0d:95:13:07:cb:a7:22:92:57:2f:7d:3e:d6:8c:fa:13:
         cc:34:c3:8c:6f:21:38:8b:87:5a:54:ed:cd:a3:cc:73:99:e6:
         02:2a:1d:e5:cb:3f:92:71:ac:de:2c:9d:94:ea:3c:d6:0c:38:
         11:0a:f7:6f:fe:91:40:78:9f:f0:93:b6:e5:f0:40:58:52:53:
         77:2e:e0:54:82:57:4c:25:73:13:0b:f8:e3:fa:7b:c1:ec:7a:
         99:56:4a:20:09:3a:88:fc:e6:30:ff:54:cb:9d:01:2e:7e:2d:
         ae:3c:67:96:a2:d7:52:24:0c:2b:d2:28:fd:70:a2:67:9d:7d:
         74:00:cc:44:d2:01:e6:5e:9b:06:1f:4a:c5:6f:7d:c2:16:c7:
         97:fc:e4:1b:e1:e4:6e:95:cb:bd:6d:18:02:34:4d:07:9c:5c:
         ca:ba:37:43:9a:28:cc:f9:4e:8c:0e:76:ba:8b:0d:c5:bc:51:
         6b:05:d7:ea:da:38:cf:f6:d7:70:45:95:7b:a1:0d:82:ea:2c:
         56:0f:56:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:30:52 2026 by rpki-client