Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/8a407edf-e961-352a-b484-8fca569064e4.roa
File:                     8a407edf-e961-352a-b484-8fca569064e4.roa (raw, json)
Hash identifier:          tchedxNrGJVMAcvNZQOp6KaFCr/PXRc3wk1JF8WJIME=
Subject key identifier:   D1:53:4D:9C:7F:78:65:FA:21:BB:7B:97:F4:BA:25:45:F6:8B:59:C7
Certificate issuer:       /CN=69686900-f201-4b2c-a1c7-afb725abe47f
Certificate serial:       010D0C9F4328584EA788A9C9B28292EBA41A1D80
Authority key identifier: 46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/8a407edf-e961-352a-b484-8fca569064e4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     32016
IP address blocks:        204.11.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:a9:c9:b2:82:92:eb:a4:1a:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69686900-f201-4b2c-a1c7-afb725abe47f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=482e44ed-83da-448e-bc06-c39a95489193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:da:d0:8b:74:59:ee:7e:34:ba:0a:d3:b5:c0:
                    ad:a3:d5:0b:ec:77:d6:71:4e:e5:f3:c1:3c:9e:ea:
                    d2:74:f1:42:49:56:92:01:4c:56:aa:19:79:de:ae:
                    92:9b:4a:6f:36:11:1a:bf:1e:5b:25:a2:40:18:c8:
                    de:e1:8b:fb:aa:ba:0e:df:75:b4:43:5d:a3:6b:34:
                    20:d4:6c:c0:30:3c:5c:9e:dc:67:eb:34:1e:36:8f:
                    c8:06:5d:65:8f:92:d2:8b:33:2f:86:72:90:c1:72:
                    c1:cd:53:50:a0:3c:6b:0e:29:38:fc:70:de:8b:ca:
                    8e:11:dd:ac:66:ed:3b:28:31:11:5e:d9:42:71:9c:
                    f6:35:2a:5d:e8:0f:34:3b:13:88:57:9f:6e:b5:10:
                    89:25:25:df:70:59:6d:92:ec:26:79:22:f6:a7:ff:
                    2e:4c:37:0e:5a:d4:b8:4a:40:a9:85:51:47:81:1e:
                    b2:53:e6:1a:aa:00:55:11:49:d4:72:10:d0:2d:ce:
                    33:63:c0:fd:99:61:7b:c8:02:94:83:f9:49:85:ef:
                    70:11:7d:9e:b7:6e:76:4c:c6:01:7a:85:cf:ff:ae:
                    23:fb:c8:66:9d:76:96:04:5f:6a:5d:c5:ce:54:96:
                    2a:0a:09:72:72:8d:b6:2a:a3:59:41:25:70:3b:2d:
                    74:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:53:4D:9C:7F:78:65:FA:21:BB:7B:97:F4:BA:25:45:F6:8B:59:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/8a407edf-e961-352a-b484-8fca569064e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl

            X509v3 Authority Key Identifier:
                keyid:46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.11.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:90:cf:be:47:2e:9f:e5:c6:6e:ac:dd:ab:00:51:52:a9:a7:
         22:04:79:aa:54:5c:08:84:b0:32:93:e8:b9:c4:22:a4:c4:03:
         9d:41:53:a5:b0:1c:15:62:7c:ac:1b:4e:35:cd:0b:2e:2d:92:
         41:a5:7b:8c:fd:d4:2c:4b:a5:68:95:ca:41:fd:6c:cf:cb:b3:
         ee:fb:99:82:a3:a8:15:56:62:f6:7b:ec:5b:bc:41:c0:65:55:
         d9:1d:0e:e5:a8:d2:5b:6e:3c:e9:b7:34:99:ef:c7:0c:b7:09:
         80:1c:6e:da:20:91:05:0f:da:70:d5:23:68:4f:8f:d6:09:68:
         39:33:8a:db:92:bd:56:4d:5d:c5:8e:bd:f6:2b:e8:3d:a4:9f:
         e0:24:4b:e9:e2:6a:d0:e3:9a:94:09:09:eb:da:10:e4:58:95:
         ce:14:05:8a:a6:1a:f8:65:44:52:10:34:fa:80:1e:d2:32:e2:
         f2:c7:07:3f:93:eb:6f:b3:3b:a1:14:b3:7c:c7:31:9b:b7:d9:
         70:b2:35:98:35:d3:0c:9e:e1:c3:36:29:51:af:be:c8:f1:0d:
         60:3f:2e:af:05:04:91:20:51:c7:eb:72:a5:4d:ee:6d:e4:c1:
         0a:bc:ff:4c:ac:f5:36:22:38:35:15:31:b7:47:dc:77:8c:6c:
         b8:75:9c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:00:57 2026 by rpki-client