Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/c2ae75aa-22cd-3d5d-a94b-70ad9b53f6cb.roa
File:                     c2ae75aa-22cd-3d5d-a94b-70ad9b53f6cb.roa (raw, json)
Hash identifier:          U8z99/hVdvRAt97NrPCzx3q7C2OpouPbjPW4PS6cYck=
Subject key identifier:   74:11:A4:EB:89:9D:88:0C:D6:39:16:5B:65:6A:35:DD:4F:8B:E2:55
Certificate issuer:       /CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890
Certificate serial:       010D0C9F4328584E7FFA32190874F05CC0088180
Authority key identifier: CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/c2ae75aa-22cd-3d5d-a94b-70ad9b53f6cb.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     32482
IP address blocks:        216.82.233.0/24 maxlen: 24
                          216.82.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:32:19:08:74:f0:5c:c0:08:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=ff230086-cb5a-4226-87c6-7fccffa9399b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9d:1d:ca:d2:64:db:48:32:df:b3:c8:82:4e:
                    15:0c:9c:07:9a:38:df:3c:44:34:e4:69:a6:55:34:
                    31:5c:c2:57:c6:e3:b2:df:33:0f:79:13:7b:c7:06:
                    c2:21:12:ad:56:52:ad:ca:69:ef:2a:5a:10:b7:10:
                    fd:86:cf:c6:f9:b8:fa:84:00:76:bd:e7:d1:36:ef:
                    20:1f:15:13:00:b4:3a:ab:b3:70:7f:dd:da:62:6e:
                    ae:3a:f0:d8:dc:07:f0:45:9a:17:3e:40:c9:f5:c0:
                    0f:af:08:fa:65:f6:c2:85:6b:91:9c:86:4d:69:9e:
                    14:78:48:f4:0a:04:5f:14:98:b4:91:2b:b6:fa:f6:
                    6a:87:ff:11:82:f8:94:74:e6:d6:ec:a1:72:44:e1:
                    ec:61:47:d4:54:3c:39:a6:af:a1:da:20:9b:3d:e7:
                    50:82:cb:ef:4d:9d:d6:79:9f:0d:52:c2:2c:a4:27:
                    e4:be:01:5a:c5:24:2a:58:53:dd:78:63:9a:16:8f:
                    f0:ef:6d:09:df:a2:4e:75:c2:26:a5:34:e4:5d:66:
                    3a:7e:80:af:78:7f:a6:5c:5d:69:c4:4b:c5:73:ca:
                    35:3e:a4:0a:4e:43:55:9c:dc:c3:92:a2:cf:ea:d7:
                    be:64:a1:33:b3:31:e3:ce:02:9e:31:34:bf:ac:52:
                    20:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:11:A4:EB:89:9D:88:0C:D6:39:16:5B:65:6A:35:DD:4F:8B:E2:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/c2ae75aa-22cd-3d5d-a94b-70ad9b53f6cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.crl

            X509v3 Authority Key Identifier:
                keyid:CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.82.233.0/24
                  216.82.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:35:e6:73:6c:84:36:b7:fb:24:a8:dc:c0:9c:82:5a:32:6d:
         8c:a0:a3:36:a3:64:30:51:aa:7b:f6:ef:de:41:f1:62:b0:12:
         5c:53:7f:9e:7e:cf:b2:5b:63:67:b9:ec:96:bc:c7:39:13:06:
         5e:23:77:c1:61:df:c0:a6:24:dd:9e:90:c9:72:56:01:73:bb:
         9a:24:36:a3:4d:c1:8d:90:37:ec:48:0f:5f:3c:fa:6a:47:77:
         10:52:55:1a:16:4d:73:0e:01:17:35:e5:ac:a5:12:d3:81:75:
         fa:53:e1:44:46:70:0e:54:5c:e6:c8:1a:3f:e6:98:06:82:3c:
         12:1d:be:4c:22:5f:be:09:1d:a1:7f:0b:b5:ea:a9:c6:a8:d9:
         81:74:30:35:fc:f9:7f:ab:75:62:f4:9e:86:cf:ac:c0:ef:ca:
         5d:07:a0:e1:f1:7e:63:42:14:65:4a:eb:a5:07:82:f8:67:7d:
         ea:bf:90:06:98:43:94:a1:d3:df:b2:4f:73:e4:b9:fc:5b:f3:
         4c:9f:7a:7a:21:bd:1f:4d:1f:7e:15:53:f2:d0:73:47:d7:ff:
         61:a7:97:0c:14:1a:96:62:dc:af:34:cd:2a:a0:e1:ed:aa:08:
         66:b4:7d:f1:85:d0:0e:91:75:0a:64:14:9c:66:ba:08:46:08:
         72:0e:8e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:41:25 2026 by rpki-client