Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8/dd51c628-a0be-34a1-866d-ad0210fafe09.roa
File:                     dd51c628-a0be-34a1-866d-ad0210fafe09.roa (raw, json)
Hash identifier:          /eTbHF0CQVK/Z/e/6Br20C7go7NnamajbE59OzbPFiM=
Subject key identifier:   17:EE:EA:BC:81:54:97:D0:A3:6E:42:AE:95:6A:65:6B:4D:CD:20:4F
Certificate issuer:       /CN=e04c037d-f06d-4c01-9af5-ef0b2ad3ede8
Certificate serial:       010D0C9F4328584E97B500652DCEC4502C241B80
Authority key identifier: 83:5B:F9:D0:F2:7D:65:2D:96:86:2F:E8:56:AA:BA:1D:9F:C5:60:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8/dd51c628-a0be-34a1-866d-ad0210fafe09.roa
Signing time:             Thu 23 Jul 2026 09:00:11 +0000
ROA not before:           Thu 23 Jul 2026 09:00:11 +0000
ROA not after:            Wed 21 Oct 2026 09:00:11 +0000
asID:                     30967
IP address blocks:        146.88.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:97:b5:00:65:2d:ce:c4:50:2c:24:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e04c037d-f06d-4c01-9af5-ef0b2ad3ede8
        Validity
            Not Before: Jul 23 09:00:11 2026 GMT
            Not After : Oct 21 09:00:11 2026 GMT
        Subject: CN=3cae736a-c97f-40ed-a455-f7e082e9d85e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:12:93:66:94:93:fa:4a:3d:68:86:2f:27:37:
                    4e:85:af:86:71:ae:83:e0:cd:6c:20:91:be:78:bc:
                    2d:f5:8d:19:63:ff:bf:86:31:da:59:26:1f:de:70:
                    b6:46:9d:79:62:ed:ad:a6:9a:4c:30:53:d4:f1:ee:
                    66:60:62:d5:73:32:b1:2c:0f:ce:3b:cb:0c:bf:c9:
                    bd:13:de:5d:9a:57:c4:36:ec:4c:bd:93:4c:6a:0c:
                    b6:c9:b6:19:45:88:01:1f:1d:4f:2f:4a:f3:76:da:
                    92:ad:05:9d:fa:3a:a8:6d:7f:88:5d:48:e0:b7:13:
                    55:ca:15:ea:06:bc:7a:82:cb:6c:69:4b:c0:f8:c5:
                    d7:11:de:a5:5d:19:04:59:85:eb:08:58:7e:5b:2b:
                    44:df:bb:b7:0b:d9:6e:2f:a1:9a:a3:ce:a8:74:83:
                    04:31:98:f9:fc:3a:3e:fd:be:04:d8:61:df:6d:58:
                    ce:8c:62:0d:b4:24:a3:be:f3:f1:80:2e:2f:9c:df:
                    bd:be:3f:16:96:16:57:31:6c:b4:aa:0d:10:81:87:
                    a5:84:4a:02:ef:59:ce:12:eb:27:1f:8a:f1:1f:84:
                    90:5b:55:56:a2:31:56:f1:01:61:d0:75:89:20:ad:
                    57:7e:31:72:d5:87:75:2b:67:0e:e0:0c:34:c7:e9:
                    89:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:EE:EA:BC:81:54:97:D0:A3:6E:42:AE:95:6A:65:6B:4D:CD:20:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8/dd51c628-a0be-34a1-866d-ad0210fafe09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.crl

            X509v3 Authority Key Identifier:
                keyid:83:5B:F9:D0:F2:7D:65:2D:96:86:2F:E8:56:AA:BA:1D:9F:C5:60:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e04c037d-f06d-4c01-9af5-ef0b2ad3ede8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.88.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:de:3f:07:26:e6:c2:b4:41:e6:24:f9:1d:68:52:08:4a:90:
         15:81:ef:31:a0:60:f5:04:fc:d9:95:49:b5:de:1a:29:94:5a:
         73:ca:ca:c3:47:f0:43:da:52:1a:57:d6:9f:20:d2:1d:7c:fb:
         bb:81:af:ca:62:42:c5:03:44:6a:61:dc:32:16:1d:69:ce:2b:
         96:c9:e2:1c:ee:04:e9:d9:12:b8:b9:68:1b:73:37:c3:3c:71:
         45:b1:20:a8:03:9e:8c:07:25:33:02:e2:ea:6f:49:7d:55:79:
         ea:2d:45:bd:3b:1e:28:90:c0:65:1c:16:d3:e3:db:d0:0b:42:
         70:37:6e:be:e7:13:80:73:08:cd:c7:c8:85:76:e1:5f:4b:a7:
         56:e2:d0:bf:b4:f0:dd:c0:6b:66:ba:c2:24:e1:30:26:77:b0:
         78:7e:9a:57:4d:3c:6a:e5:be:cd:dd:32:26:33:bb:cf:27:c2:
         10:0a:d7:bc:07:be:5f:5d:6c:ab:2d:ab:17:1a:dc:dd:fe:f5:
         06:cf:c0:51:d9:a5:68:f8:c0:1e:cd:15:8b:d5:d8:79:a3:3d:
         57:33:bd:e7:72:8f:f6:12:f8:87:65:00:eb:bb:ec:a0:b7:7f:
         6a:3b:1e:18:73:0b:b8:18:ca:d6:47:ba:97:9f:74:11:a6:b6:
         20:ea:d9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:28:31 2026 by rpki-client