Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ad879128-7b27-384f-86e9-2c8ebc8566ff.roa
File:                     ad879128-7b27-384f-86e9-2c8ebc8566ff.roa (raw, json)
Hash identifier:          nbEFHzOSrFTXFgWAXwxGGoNTdNh7gufut+Ytc4ZhcdM=
Subject key identifier:   65:63:70:DB:91:ED:D9:F7:B5:8A:9F:84:A5:10:D4:26:0A:5C:D3:1A
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584EA794035D76599D35242E0A00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ad879128-7b27-384f-86e9-2c8ebc8566ff.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     21723
IP address blocks:        208.181.144.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:03:5d:76:59:9d:35:24:2e:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=48788da8-207f-4d11-9213-b88022358d12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e4:47:f2:ba:6b:80:76:05:4c:91:c6:e1:4e:
                    3d:36:7c:6f:18:93:fb:86:b2:f0:41:f2:ea:2b:41:
                    23:f1:b2:ff:3f:4b:70:e9:39:69:d9:a8:3c:da:ca:
                    52:94:0e:8a:80:57:f9:90:24:23:27:34:a0:29:b2:
                    8a:2e:12:30:be:ec:73:f9:45:20:93:c1:e0:f9:5c:
                    28:3e:19:ee:31:ab:ee:c2:59:ac:9c:a1:4f:0e:bb:
                    c3:b7:c0:cf:23:6f:b6:4d:56:34:99:be:22:08:02:
                    83:ff:84:34:cb:7d:96:41:43:00:93:92:92:da:37:
                    8e:2d:eb:99:c1:2f:a7:50:5b:72:06:2a:5e:db:9c:
                    d0:eb:5d:2c:4e:c9:02:be:ba:e2:a6:f6:e0:64:51:
                    03:7f:fd:b2:8b:43:23:b3:e4:fe:7c:70:42:e8:d1:
                    1e:16:03:51:c0:6a:08:a7:ca:6f:4a:da:0d:8a:a5:
                    a2:86:9e:39:a1:3b:56:bf:0c:51:3d:3c:90:d7:0d:
                    2a:1a:15:5b:e5:b0:67:56:81:b8:47:73:90:70:f1:
                    0d:d1:92:37:36:23:95:3b:6a:49:22:c2:ad:33:b7:
                    b4:ba:42:8e:aa:b5:97:0b:43:c4:8f:b0:ca:5a:cc:
                    48:ad:90:26:7d:16:3c:c6:c5:9d:55:7d:cd:67:62:
                    f4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:63:70:DB:91:ED:D9:F7:B5:8A:9F:84:A5:10:D4:26:0A:5C:D3:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ad879128-7b27-384f-86e9-2c8ebc8566ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.181.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:75:5c:de:c1:99:4a:bf:4c:ab:ae:f7:ad:10:bc:c9:3f:63:
         7d:d0:ae:a5:d9:d4:41:93:7c:68:e6:71:8d:9a:cc:19:7b:32:
         0d:65:a8:9c:6c:51:e4:ed:34:51:f8:a6:d8:81:42:e7:19:e6:
         85:09:f0:fd:de:82:7b:42:13:0c:f9:02:33:ef:b1:ad:2f:48:
         4d:dd:da:3f:11:a1:1e:1f:a4:9c:6e:25:19:d6:c9:1b:52:ed:
         b6:cc:78:61:8b:28:2c:59:b5:9b:5e:c5:7a:b9:5f:78:5b:69:
         6f:e5:a0:ba:ce:42:9c:5a:99:a2:47:0d:83:97:dc:2d:f3:6b:
         fc:13:1c:de:60:a6:d7:50:69:ae:69:f3:02:4d:89:a5:20:e1:
         ab:be:1a:ff:bb:a0:e7:0c:cd:69:fe:3c:d1:0c:10:21:7e:0f:
         54:01:e7:52:de:84:2e:d9:41:cd:07:16:e5:98:fe:37:7b:61:
         df:cf:ec:cc:1e:c9:fc:e9:46:8d:2f:25:4f:92:dc:07:da:01:
         87:22:9a:79:ff:07:d5:08:8c:7e:35:49:dd:2c:66:43:83:96:
         88:7a:0e:3c:d2:59:21:d9:99:ad:68:90:50:03:cb:9b:91:08:
         8d:83:23:59:9d:37:89:25:b1:47:3e:24:cc:24:05:99:d9:99:
         73:48:ed:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:09:02 2026 by rpki-client