Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/e860c320-fbd6-3362-8198-d35cd75bcd53.roa
File:                     e860c320-fbd6-3362-8198-d35cd75bcd53.roa (raw, json)
Hash identifier:          YSU2BOVpnj2VSVI8ktOD2/UkB1K/Dv1Nyljyh8POs8c=
Subject key identifier:   17:6A:B4:AC:85:33:4D:37:9B:A1:07:80:C2:1E:38:84:3C:E8:E5:CF
Certificate issuer:       /CN=d001dd1f-946b-457b-98d8-41701665309e
Certificate serial:       010D0C9F4328584E9BE51025EBCC386C6DD74B40
Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/e860c320-fbd6-3362-8198-d35cd75bcd53.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     23465
IP address blocks:        208.187.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:10:25:eb:cc:38:6c:6d:d7:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=dd6f3f8c-f1cc-4f3d-a5b1-cf424769c81a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:30:45:30:b3:97:0c:1c:9a:3d:0c:cd:e2:fd:
                    b7:1d:09:25:77:33:ad:c1:d5:fa:ab:b7:b6:42:e3:
                    7f:23:d4:0a:ff:83:ce:74:4a:15:ed:ef:e8:98:3f:
                    5a:8d:73:68:0a:a7:1f:43:91:b0:52:69:6d:bd:44:
                    c1:9c:8f:51:7b:fc:8d:5d:44:e4:18:2e:1a:a8:ae:
                    cc:f8:f9:26:60:ee:1f:7f:59:91:66:96:21:96:6b:
                    bd:4a:79:cb:92:7e:a4:76:7c:6f:1f:8d:ca:09:3a:
                    a9:fa:36:fc:72:fa:21:ac:3f:d8:44:11:64:7c:d6:
                    36:78:84:b1:3f:e8:8b:a3:81:38:67:c6:dd:22:08:
                    ee:17:4f:2d:c2:fb:cc:ab:de:cd:70:7d:36:7c:7a:
                    81:77:bc:de:1d:a8:c8:fb:de:9d:6f:3d:73:ed:f0:
                    2b:f7:c4:e0:5a:d5:2a:49:3e:3e:31:1f:b8:e6:80:
                    48:7e:f7:de:51:b6:fe:fe:80:ea:22:f7:1b:31:e9:
                    dc:88:fc:08:27:07:2c:8e:5b:e3:ff:ef:f3:8d:09:
                    c2:fb:3a:de:f6:ea:d9:55:70:23:82:05:0d:c0:44:
                    72:4b:c5:08:c3:5e:40:cc:63:53:21:6a:cb:3f:60:
                    21:ff:19:80:e1:85:f2:07:ad:34:22:4b:89:38:eb:
                    bf:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:6A:B4:AC:85:33:4D:37:9B:A1:07:80:C2:1E:38:84:3C:E8:E5:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/e860c320-fbd6-3362-8198-d35cd75bcd53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl

            X509v3 Authority Key Identifier:
                keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.187.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:20:1f:13:9a:2d:31:34:27:6a:74:1a:f5:66:2f:94:7b:42:
         aa:22:85:32:4a:40:6e:79:a3:95:e1:95:54:a9:c9:48:f2:dc:
         42:e9:eb:f6:a7:2d:25:bd:36:31:84:e6:76:db:15:f2:1a:c1:
         0e:57:0f:b7:8b:ab:fa:9e:a8:22:a7:fa:09:5f:7a:8f:95:e6:
         d5:09:1b:78:ed:b4:bd:b6:79:e6:da:1b:df:57:fd:ad:8b:ee:
         28:91:e9:83:ac:43:42:fe:54:94:d0:d3:eb:c0:35:01:80:9b:
         d6:ad:8c:5e:94:83:83:3a:c2:63:25:9a:8b:2d:be:98:d6:cb:
         4e:4f:30:12:2d:af:d4:3f:69:b4:39:cc:d3:d2:b8:17:9b:d0:
         c7:ef:23:d8:37:7a:dd:fc:5f:75:db:04:54:31:05:c7:e8:07:
         1b:10:d1:47:dd:71:83:2a:89:c7:db:04:af:24:dd:bd:7d:d4:
         43:ef:cd:53:61:3a:88:d6:c2:bb:d1:ca:f2:c7:3d:e7:82:09:
         2c:3f:73:95:95:27:1d:79:61:a3:fc:92:5f:18:7f:06:5a:58:
         b1:eb:7f:d7:6e:7a:57:cd:aa:03:dd:d0:2d:3e:12:37:0c:c0:
         dc:e3:95:42:cd:01:2c:9f:f0:0f:d8:6b:3d:ec:14:f5:ca:07:
         74:21:17:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:08:29 2026 by rpki-client