Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8ef6ff1f-7cc1-3fea-96e3-87de93972b70.roa
File:                     8ef6ff1f-7cc1-3fea-96e3-87de93972b70.roa (raw, json)
Hash identifier:          8cIHFLkvAzNjk8l9mbYbFPZh0J1/0IiHxQaC7vkcv4E=
Subject key identifier:   68:DB:B5:81:B5:74:1F:09:2B:F6:C1:73:A0:44:EF:D1:ED:6D:50:94
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584EA79729BE18948255B2C71680
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8ef6ff1f-7cc1-3fea-96e3-87de93972b70.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     852
IP address blocks:        205.250.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:29:be:18:94:82:55:b2:c7:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a71f1669-966e-4e42-a516-c99363211423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e8:aa:58:60:70:f1:2e:3f:31:ed:91:1a:da:
                    6b:9b:68:22:2e:72:b5:7b:3b:5d:e3:db:bc:74:5f:
                    67:d7:fc:fb:ba:02:a5:30:3d:bd:b9:e6:39:f6:08:
                    df:0c:f4:e8:ac:27:b1:7a:21:30:51:d7:32:d9:4f:
                    54:f7:4a:94:20:09:e5:51:07:4b:c0:9a:b8:b5:60:
                    6c:00:bd:72:ad:53:76:1e:fe:05:f4:d1:e4:fa:85:
                    2a:08:d2:bf:bb:8d:4d:ed:28:18:a2:e6:39:96:b1:
                    27:3f:dd:08:52:0d:16:05:e2:a6:ef:17:50:0a:23:
                    84:35:be:08:b7:fe:ee:42:41:a1:0c:2a:db:27:41:
                    f1:41:e9:c8:7d:a7:3e:18:2f:2c:da:8e:62:f4:d6:
                    42:1b:00:55:d7:ee:83:77:5c:56:fc:7d:21:fa:05:
                    e5:7d:29:76:7d:78:bc:b2:c3:54:07:c6:c0:35:e0:
                    62:ba:e0:36:1e:69:f1:0b:2d:8b:3b:08:56:17:23:
                    76:91:f5:aa:1b:d9:70:dd:e7:7f:bb:b7:99:4e:ad:
                    16:d7:7e:85:93:b1:e7:74:92:75:20:be:1b:30:fd:
                    39:52:96:42:ae:59:d2:a4:e7:29:ed:43:db:fb:5f:
                    9d:36:93:88:c1:98:52:af:cd:28:5d:cf:13:e7:ba:
                    16:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:DB:B5:81:B5:74:1F:09:2B:F6:C1:73:A0:44:EF:D1:ED:6D:50:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8ef6ff1f-7cc1-3fea-96e3-87de93972b70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.250.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:12:ec:22:2d:b6:0d:2a:8e:ae:21:cc:38:49:2b:f1:a0:2b:
         60:f4:56:2c:6f:5a:66:5f:52:af:9d:1a:37:a6:7e:1e:61:65:
         f1:a1:b3:53:65:e0:61:6b:e7:34:ed:55:5d:e4:d8:de:04:a5:
         ad:8d:75:11:a1:a8:7b:f5:58:70:bd:c7:62:26:a9:74:59:d8:
         60:b6:cb:1d:82:ff:27:9c:fa:b9:63:4a:4f:eb:d4:ef:1a:8f:
         26:a9:88:71:f3:1a:83:4b:d2:e2:15:80:8a:0b:42:21:f3:54:
         a1:7a:0a:40:3a:42:51:96:47:77:f4:57:88:66:bf:c5:c7:c7:
         eb:9b:5a:60:2d:e2:33:0f:79:ce:23:02:2c:f1:84:2e:9e:b1:
         54:fc:68:69:71:1a:5a:1e:85:b1:87:e6:e0:8a:6e:b2:42:35:
         08:e4:03:b6:68:2f:4f:2e:75:0f:df:f0:d6:c9:83:af:12:80:
         df:7d:81:db:16:60:5e:e0:12:23:11:fb:ba:cc:cc:be:eb:dd:
         5b:5f:86:b9:f3:2d:5e:95:c1:21:fa:eb:90:09:fe:07:1c:20:
         4a:c7:8c:98:c2:4c:f3:af:89:4c:c9:7c:56:4c:ba:82:79:f4:
         14:19:4e:0f:0a:3c:e0:5a:1d:7f:b0:1c:28:1d:9d:e1:f9:cd:
         7f:5a:ac:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:34:10 2026 by rpki-client