Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/432afd84-753d-46d9-b6a6-2bf399dcd25a/e1d9360c-6a2f-3e9c-b9ad-567587e88984.roa
File:                     e1d9360c-6a2f-3e9c-b9ad-567587e88984.roa (raw, json)
Hash identifier:          20OXVeLusAmwb0kz0yZdmznWnSCqDIUOn1VEGmC0Zg4=
Subject key identifier:   E2:D7:D0:71:A6:9B:9D:88:9F:7C:84:41:53:84:81:1B:84:5B:C7:9B
Certificate issuer:       /CN=432afd84-753d-46d9-b6a6-2bf399dcd25a
Certificate serial:       010D0C9F4328584E86F50AD5FA39851044296900
Authority key identifier: A4:2B:C4:1D:8C:07:AA:C1:65:C2:A4:21:2F:66:D0:07:E3:95:4B:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/432afd84-753d-46d9-b6a6-2bf399dcd25a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/432afd84-753d-46d9-b6a6-2bf399dcd25a/e1d9360c-6a2f-3e9c-b9ad-567587e88984.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     46746
IP address blocks:        206.208.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/432afd84-753d-46d9-b6a6-2bf399dcd25a/432afd84-753d-46d9-b6a6-2bf399dcd25a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/432afd84-753d-46d9-b6a6-2bf399dcd25a/432afd84-753d-46d9-b6a6-2bf399dcd25a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/432afd84-753d-46d9-b6a6-2bf399dcd25a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f5:0a:d5:fa:39:85:10:44:29:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=432afd84-753d-46d9-b6a6-2bf399dcd25a
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=c99b526e-46c0-42af-8df5-37b00730d66b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:30:8b:d1:cd:a3:f7:d2:87:33:a2:27:3c:25:
                    80:e0:dd:5e:b3:78:66:33:8b:f8:e1:30:43:db:42:
                    2b:9b:f3:22:1b:d2:b4:fb:a3:a2:cc:38:c8:34:8f:
                    f7:92:13:2b:7d:8f:c4:53:3e:ed:81:8b:09:4a:19:
                    af:bb:84:80:d3:a0:ad:53:24:1d:f5:f9:07:d4:d2:
                    eb:d2:5a:ff:59:7e:6b:91:3e:26:90:59:b7:ff:18:
                    d1:f8:77:13:2b:b2:45:11:7c:c1:9b:a7:f7:8e:c0:
                    ae:16:20:70:b3:6d:8f:53:57:70:3d:f4:ca:9b:c3:
                    4b:80:6e:4d:5e:f4:6a:8e:15:af:00:9a:ba:43:9f:
                    bb:aa:04:f8:e5:0d:6c:61:22:ac:33:cd:ae:f2:cb:
                    bd:cf:26:a8:0c:e0:67:f0:9b:fe:f6:f3:e7:95:07:
                    a9:5c:44:bb:39:29:ed:86:a7:04:f2:f7:d5:29:5f:
                    07:4a:47:c3:bb:ac:0c:68:9e:f3:cf:bd:ee:2b:8b:
                    9f:f9:3f:39:84:e7:af:e8:75:60:6c:eb:ba:4d:a8:
                    4f:25:9b:e3:c6:84:5e:e5:99:66:83:e3:f5:7e:de:
                    48:a3:fc:17:d9:0a:1c:71:61:0f:be:12:47:43:c5:
                    35:4d:4d:53:a4:e0:c7:c1:9f:cd:15:04:5a:34:15:
                    4a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D7:D0:71:A6:9B:9D:88:9F:7C:84:41:53:84:81:1B:84:5B:C7:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/432afd84-753d-46d9-b6a6-2bf399dcd25a/e1d9360c-6a2f-3e9c-b9ad-567587e88984.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/432afd84-753d-46d9-b6a6-2bf399dcd25a/432afd84-753d-46d9-b6a6-2bf399dcd25a.crl

            X509v3 Authority Key Identifier:
                keyid:A4:2B:C4:1D:8C:07:AA:C1:65:C2:A4:21:2F:66:D0:07:E3:95:4B:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/432afd84-753d-46d9-b6a6-2bf399dcd25a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.208.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:6c:ba:a6:04:54:8d:c4:db:59:8f:ec:cd:eb:8a:84:0e:af:
         47:22:d5:ed:b3:ab:31:4b:4c:90:57:c4:c7:b2:9f:be:4a:ea:
         01:19:7a:ab:bb:4d:38:56:eb:a1:ef:47:82:41:8b:0c:f2:cc:
         c5:b5:06:e3:95:83:c1:e0:bd:fc:84:a9:05:e0:e6:1a:1b:6e:
         b3:70:ae:a4:a8:9e:18:6e:f2:4e:36:44:fc:62:8d:30:3d:00:
         43:de:03:e7:3b:38:98:62:a5:50:0c:22:e6:6f:93:fc:e1:56:
         71:4e:95:d9:78:c3:0b:49:e7:c5:f8:ba:d4:de:03:87:71:f4:
         64:ee:b6:4e:06:ee:0c:97:88:d1:cb:53:a3:ad:d7:bd:da:05:
         5a:0a:31:d4:b7:d5:f3:f6:78:66:a2:a3:43:f6:fb:74:c6:69:
         a5:8c:b9:4d:42:ca:0f:03:e3:45:a6:78:ab:7f:d7:70:23:3b:
         be:a0:4c:61:b6:25:5d:56:d1:4b:07:ef:8e:56:6c:f2:90:d6:
         8f:f7:06:b5:78:c2:9e:7b:dc:b7:d6:ee:13:95:7a:56:a6:a5:
         5b:60:1c:04:e7:47:0e:65:66:58:24:2f:27:1e:a1:7f:f9:a8:
         a3:5d:c4:ef:5b:b3:01:8a:71:f9:3b:b1:cc:8f:5c:8b:ab:61:
         6a:79:a0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:55:23 2026 by rpki-client