Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/de1805f0-f555-3235-b465-98495034ec53.roa
File:                     de1805f0-f555-3235-b465-98495034ec53.roa (raw, json)
Hash identifier:          cHQKUdlIzqat4zyRDC6CpRKi5NM2xBcNzqVNMcqmz/0=
Subject key identifier:   A3:25:47:8F:AC:E4:C7:69:CA:A5:36:8E:5B:97:94:F4:71:A3:35:E4
Certificate issuer:       /CN=adce5ac3-c559-48fc-8577-223c6ed88a3e
Certificate serial:       010D0C9F4328584EA788056DF84D39C78EE8CF18
Authority key identifier: 9A:19:DA:B0:79:60:5F:82:89:22:D1:C1:18:A1:EA:FB:D2:7F:66:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/de1805f0-f555-3235-b465-98495034ec53.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     21527
IP address blocks:        208.65.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/adce5ac3-c559-48fc-8577-223c6ed88a3e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/adce5ac3-c559-48fc-8577-223c6ed88a3e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:05:6d:f8:4d:39:c7:8e:e8:cf:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adce5ac3-c559-48fc-8577-223c6ed88a3e
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=24b4a999-ae9b-4aae-9421-36addcd5a820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a9:4d:f0:67:55:8f:ca:7a:fc:60:47:df:58:
                    ba:c6:22:46:d8:23:76:0e:61:e9:00:39:1f:d7:0f:
                    2d:bd:d7:86:ae:5c:35:49:60:41:dc:ea:2f:89:4f:
                    1d:68:f6:4e:c0:e3:04:ff:d0:d3:7a:1c:ee:b4:e3:
                    3c:82:a7:db:b6:3c:7f:f2:da:15:5c:6d:8e:2c:3b:
                    95:bc:95:21:85:9d:47:65:8e:b0:d1:3a:18:fb:90:
                    f5:05:b9:da:23:71:d0:b5:8b:9e:87:74:c3:0e:7e:
                    93:73:dd:c3:4f:56:ad:af:b9:09:2e:23:4a:ed:3b:
                    1a:ee:af:71:ed:44:18:6f:cb:4e:48:32:d2:9f:b4:
                    2f:3c:86:83:1e:8f:1e:ac:55:a7:eb:68:10:bb:4e:
                    83:44:be:f7:eb:79:83:41:2d:e7:8b:e3:7c:03:c1:
                    e5:65:ac:a2:ba:80:f1:e3:01:05:9f:82:52:5e:ca:
                    c0:81:e9:b8:a8:f9:de:61:ab:ae:83:82:d9:56:f1:
                    89:22:e1:1f:95:d6:91:0e:46:83:18:8f:93:c5:35:
                    37:1d:7d:b9:85:c8:ac:52:62:da:12:b3:e2:48:38:
                    e3:ae:5f:6e:26:59:bc:ec:a5:89:de:fa:72:11:98:
                    c4:3a:22:6e:d8:b4:fb:1f:72:dd:55:09:16:8f:cd:
                    7d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:25:47:8F:AC:E4:C7:69:CA:A5:36:8E:5B:97:94:F4:71:A3:35:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/de1805f0-f555-3235-b465-98495034ec53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e/adce5ac3-c559-48fc-8577-223c6ed88a3e.crl

            X509v3 Authority Key Identifier:
                keyid:9A:19:DA:B0:79:60:5F:82:89:22:D1:C1:18:A1:EA:FB:D2:7F:66:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/adce5ac3-c559-48fc-8577-223c6ed88a3e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.65.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:58:82:eb:46:1d:39:83:cb:ea:df:45:bb:b0:56:93:4e:12:
         3c:d0:03:6d:e4:1e:03:12:72:55:c1:fa:05:ad:bd:d6:da:02:
         1e:ce:73:70:32:a0:7c:f3:ac:15:0c:ed:ce:bf:34:ac:2d:04:
         02:7d:de:f8:73:91:10:77:f6:47:9a:2f:ff:5c:a6:99:27:cb:
         bb:bc:47:59:19:1e:c5:6a:d9:08:08:e5:c8:39:66:e5:b3:cb:
         6d:d4:8d:2d:5f:8d:03:e3:b4:92:e2:7d:98:2f:ec:a7:9e:83:
         fd:50:20:18:74:34:5b:b1:d5:1f:34:f1:b3:88:4c:82:a2:07:
         3f:bd:25:45:e1:a4:39:af:06:45:7c:7c:e3:d5:bb:ce:d1:c5:
         e8:17:55:d6:17:6a:e3:8c:24:54:de:69:76:43:f5:ee:da:da:
         bc:8d:38:18:2d:56:3f:e5:f1:ae:2c:8b:e2:b4:bc:5b:62:85:
         e4:a8:d9:3d:69:09:96:bd:71:de:62:b1:55:be:b0:80:8d:fe:
         9f:9e:b9:d2:11:7a:27:ed:61:9b:4c:37:dd:62:c7:36:31:77:
         ca:51:6f:43:88:30:62:10:77:4f:41:13:47:28:06:42:d9:f4:
         38:dc:cd:c7:52:61:03:f0:fa:2d:dd:5c:f0:98:ef:bb:37:4a:
         bf:16:25:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:22:19 2026 by rpki-client