Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/5f3dcef5-0406-33ce-8673-8f04413c8cba.roa
File:                     5f3dcef5-0406-33ce-8673-8f04413c8cba.roa (raw, json)
Hash identifier:          2bVqGKLxCxJMn2bjBlMVBVfC/UO9X3Lq9PUVACQ/LMw=
Subject key identifier:   88:E2:23:3F:AD:31:9B:1C:B4:DE:BD:36:73:C3:A0:67:DF:B5:16:ED
Certificate issuer:       /CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5
Certificate serial:       010D0C9F4328584E6F3EC080E1BF0E4A31421D80
Authority key identifier: 1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/5f3dcef5-0406-33ce-8673-8f04413c8cba.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     209
IP address blocks:        192.88.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3e:c0:80:e1:bf:0e:4a:31:42:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3689b9ce-089d-4137-b14d-7e4cd15e53a5
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=fb067c4a-3b37-4704-a78b-bb5cb3c020d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:94:50:5b:5a:45:43:5f:28:7a:c7:0d:ea:d8:
                    7f:0b:fb:b6:17:56:05:1c:fc:1f:a6:c8:6a:78:22:
                    84:db:c2:e4:73:78:8f:35:4a:2d:5a:59:b6:e0:16:
                    23:29:9d:58:bb:5f:2a:a1:16:96:b8:6f:af:40:df:
                    9e:6f:13:a3:45:01:af:15:cd:1c:3d:1c:09:19:1f:
                    53:53:2b:f3:e2:74:66:82:3f:52:6d:b4:8c:9f:9b:
                    15:01:a3:77:f5:e3:e1:34:c2:dd:3a:4f:31:ce:0f:
                    9a:a0:ea:ef:12:d6:a4:37:bb:1f:05:5c:45:67:e0:
                    97:37:55:95:cb:8f:ac:b3:17:21:d7:fb:88:05:07:
                    fd:25:98:67:46:72:46:14:35:ba:9e:1a:4d:11:7f:
                    bf:9b:5a:85:5b:34:5f:8e:9a:45:9c:65:98:ff:ae:
                    f7:e3:08:fb:67:69:7a:b0:d1:74:85:19:78:e0:5c:
                    16:8e:22:a4:ce:d1:97:2a:56:de:88:d2:e4:47:84:
                    4c:b8:ce:b5:ed:65:9b:32:32:a8:68:e8:db:7e:bb:
                    ca:fc:8e:48:da:28:96:2f:ab:7a:d5:b6:5d:2b:c8:
                    1d:bc:13:92:18:62:88:3a:1b:f0:d5:1a:04:52:ef:
                    9b:2d:5d:0b:f3:32:a6:0e:f1:9f:1a:16:b7:37:b2:
                    9f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E2:23:3F:AD:31:9B:1C:B4:DE:BD:36:73:C3:A0:67:DF:B5:16:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/5f3dcef5-0406-33ce-8673-8f04413c8cba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5/3689b9ce-089d-4137-b14d-7e4cd15e53a5.crl

            X509v3 Authority Key Identifier:
                keyid:1D:1E:37:FA:79:26:6D:13:76:4D:B9:09:BD:A7:4B:B3:21:FA:8A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3689b9ce-089d-4137-b14d-7e4cd15e53a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.88.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:4b:d8:20:2a:a4:a0:4b:d3:69:a7:af:df:df:4a:3b:d5:f5:
         8e:ef:aa:97:ce:c9:d6:76:30:f5:7c:3d:f6:f2:5e:ce:fa:62:
         6b:65:cd:37:75:ce:d6:1f:21:ee:30:f9:00:b6:3a:d4:84:42:
         0f:f7:8c:f4:c3:66:06:42:80:80:2b:6e:f1:50:1e:ea:40:c1:
         5d:26:72:86:a9:20:68:10:36:4d:a4:8f:1e:f2:b7:0f:d4:f3:
         79:ac:67:d8:51:15:81:65:a9:b4:0e:05:2f:59:64:6b:e8:d8:
         46:10:e8:83:55:5b:53:fe:4f:28:cd:bc:30:41:8c:22:ef:bc:
         cf:4a:52:25:c5:47:84:91:5e:03:36:35:e5:30:1f:50:77:6c:
         97:7c:e1:e2:33:43:e2:3a:88:5d:76:17:c6:1a:b1:bf:99:bc:
         d7:81:c7:39:22:8f:9b:3b:49:6e:91:f4:7e:55:0d:dc:ff:52:
         56:54:76:04:ec:cf:4e:39:3c:19:c1:d0:73:3d:c1:48:30:2b:
         22:6b:a9:fd:f4:2e:b4:d3:42:0d:88:ad:4f:94:23:ea:ea:6d:
         8e:1c:ac:35:aa:2a:a2:b8:03:11:d2:ee:2a:e0:14:4c:a6:46:
         09:d0:86:bb:8b:87:09:5b:4f:44:ed:46:ad:17:5e:c1:6e:fa:
         da:cd:c8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:56:48 2026 by rpki-client