Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/2084f899-7d01-37c6-a226-f5e6d53fcee9.roa
File:                     2084f899-7d01-37c6-a226-f5e6d53fcee9.roa (raw, json)
Hash identifier:          2Zv5UfmqkuLL9a8cevklXWJ6WKcsxEhkpojZVEvGF+o=
Subject key identifier:   2F:BA:B0:F9:BE:39:5A:98:7B:A5:48:C4:5F:F8:0E:28:F8:85:8D:6A
Certificate issuer:       /CN=1cef5c7c-f81f-4afe-a833-6ad9053c4074
Certificate serial:       010D0C9F4328584EA7940D02B92B83AC9DF24CC0
Authority key identifier: 31:71:4F:AA:2B:76:A2:15:A0:6C:E2:FB:75:AB:5A:57:73:73:3E:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/2084f899-7d01-37c6-a226-f5e6d53fcee9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396982
IP address blocks:        208.112.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/1cef5c7c-f81f-4afe-a833-6ad9053c4074.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/1cef5c7c-f81f-4afe-a833-6ad9053c4074.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:0d:02:b9:2b:83:ac:9d:f2:4c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cef5c7c-f81f-4afe-a833-6ad9053c4074
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=db8c2581-18ec-44bc-b7fa-7f4595745bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f8:4c:82:2c:dc:f9:e9:1d:a0:6c:42:37:e7:
                    f5:23:04:44:f3:a2:7a:fa:ad:fd:b3:33:59:37:7a:
                    90:8d:58:9d:57:b7:e0:92:aa:f0:5e:72:96:bd:01:
                    ff:db:e2:a9:cf:dd:83:b7:3e:55:13:15:4a:60:2b:
                    ae:2c:24:ed:6e:36:fc:07:59:06:3a:df:e6:05:bc:
                    d6:af:fe:be:55:09:31:97:ba:7e:86:06:a9:0d:5a:
                    a4:20:bc:be:67:17:af:b9:5f:e6:eb:25:da:3f:02:
                    53:ed:4d:80:6a:6e:be:88:42:41:3c:7c:72:11:bd:
                    6e:3d:47:47:09:90:ef:1b:14:1e:0b:00:40:83:94:
                    9e:20:ce:48:88:1a:dd:3f:0d:dc:2a:67:a8:84:d5:
                    c3:17:cc:cd:a8:57:41:bc:c1:8b:76:b7:b3:8b:89:
                    44:35:62:53:32:3d:d7:a6:32:fd:c5:f5:7c:e1:d2:
                    d0:e9:e4:e3:cf:06:58:ca:2e:7b:1b:fd:2e:0c:5f:
                    88:97:45:33:f8:98:ac:9e:d2:e3:88:c6:e3:ba:f3:
                    61:03:24:ed:3b:bd:15:39:ed:c3:f5:3a:5d:3c:08:
                    26:23:1a:eb:1f:20:b7:9f:5f:fc:d8:fd:bb:49:50:
                    53:69:40:4b:e5:da:c2:42:18:0c:3b:15:8d:bd:bd:
                    17:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:BA:B0:F9:BE:39:5A:98:7B:A5:48:C4:5F:F8:0E:28:F8:85:8D:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/2084f899-7d01-37c6-a226-f5e6d53fcee9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074/1cef5c7c-f81f-4afe-a833-6ad9053c4074.crl

            X509v3 Authority Key Identifier:
                keyid:31:71:4F:AA:2B:76:A2:15:A0:6C:E2:FB:75:AB:5A:57:73:73:3E:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cef5c7c-f81f-4afe-a833-6ad9053c4074.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.112.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:2e:08:c1:4a:f9:52:4c:d7:d6:06:c3:76:96:7e:ca:db:af:
         79:3a:9e:35:46:d7:df:16:c7:4a:5b:3c:2c:85:65:e9:9e:9b:
         ef:d2:00:8d:6c:12:46:39:54:a5:0e:00:c4:36:6c:7c:07:04:
         90:6a:aa:6a:2d:b1:19:7b:3d:ef:56:fd:6f:d2:12:45:14:b1:
         aa:b0:57:27:21:e6:e5:7d:aa:92:15:1d:ec:ce:ef:d8:97:f7:
         b9:de:ed:ef:36:1d:54:a9:37:d3:ac:ee:29:ae:a0:c4:c0:b6:
         48:39:c9:fd:68:48:40:16:b0:62:fc:14:d9:e3:b1:3b:ad:fe:
         db:03:53:e9:36:cd:5f:f5:1b:65:31:73:19:8b:6d:f2:69:db:
         f9:e6:8f:fa:ea:c2:8d:a4:e0:36:82:25:71:9a:4d:45:1a:70:
         1b:dc:ae:39:6e:0b:2d:d3:25:8f:91:3b:8c:ef:44:3a:fe:2f:
         11:b0:47:7f:88:30:ab:e7:41:5c:99:de:4a:9f:07:9d:d9:ee:
         71:7f:4c:68:c9:fc:1a:48:9f:43:eb:98:6e:2c:38:54:ee:06:
         83:5f:bf:21:57:5e:72:c5:39:bf:7b:c4:dd:5a:20:35:d0:c4:
         05:0f:70:d1:66:64:e7:6a:26:d7:0d:e1:53:82:a3:6c:fa:dc:
         e1:8b:71:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 07:11:37 2026 by rpki-client