Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/38596e48-a4eb-3908-88f2-59cda477d727.roa
File:                     38596e48-a4eb-3908-88f2-59cda477d727.roa (raw, json)
Hash identifier:          UZhxfNeBtfocIAm6OsWeLKjhM/MuNdQXrql6fgsvs4A=
Subject key identifier:   13:0F:33:D2:37:54:ED:D9:52:2B:BA:8D:81:A8:FA:1C:EB:4D:E2:9C
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584EA7A0266AD8389D0CFD257740
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/38596e48-a4eb-3908-88f2-59cda477d727.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36040
IP address blocks:        208.117.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:26:6a:d8:38:9d:0c:fd:25:77:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0b39f118-947d-42d0-bc0b-d1fa4d0d88b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:91:ac:8d:e8:bb:a8:fb:f7:24:91:98:79:d4:
                    57:95:a3:5d:4c:67:90:c6:d0:45:43:8b:e5:3d:7a:
                    ac:da:d4:05:cb:74:43:25:53:ce:37:bb:71:e5:47:
                    13:bd:5c:27:c1:f1:74:4d:a5:a6:be:08:33:ed:ca:
                    81:fa:88:99:8a:f8:00:1f:3c:28:ad:68:ec:81:22:
                    36:96:b2:5b:71:c6:a9:a6:5f:35:4a:09:cf:3c:05:
                    66:21:ed:03:dc:41:93:f3:9d:c1:86:e4:fa:3a:58:
                    f6:44:79:e3:24:8e:02:e1:80:c8:8d:99:00:8a:9c:
                    39:41:fd:19:46:18:cd:61:4e:6c:ac:a0:78:4f:fb:
                    d8:01:a9:d0:c9:f6:04:a9:3a:84:70:bb:42:54:b2:
                    6a:a1:a0:04:28:2e:89:a4:9d:3e:8f:ea:f5:2b:17:
                    69:5b:74:38:5c:3f:44:05:45:d0:e4:dd:d3:39:86:
                    f0:36:53:13:e2:4c:f2:72:bc:b1:f5:50:7e:36:56:
                    8e:9f:df:b3:0f:f2:da:da:9f:36:1c:98:e0:d7:c8:
                    bd:12:d7:0f:3f:c2:cf:23:4c:dc:e2:60:74:c9:4a:
                    55:b3:42:b5:c4:07:90:3c:8e:60:ce:14:54:6b:c4:
                    b2:bc:d9:7c:d5:4c:34:cf:8c:d3:27:6b:20:0b:f4:
                    59:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:0F:33:D2:37:54:ED:D9:52:2B:BA:8D:81:A8:FA:1C:EB:4D:E2:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/38596e48-a4eb-3908-88f2-59cda477d727.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:e8:7b:b1:ea:a8:97:99:be:f8:69:1a:21:6f:a7:fc:b8:9a:
         96:38:3b:a5:c7:84:52:18:7c:8a:f6:8c:a6:72:80:32:25:30:
         fc:ce:bf:27:89:9e:9c:fc:9b:f5:84:bb:95:58:1f:d1:11:46:
         5d:b0:74:e4:de:69:ee:8c:b7:e4:f0:16:cd:cb:4c:e6:19:f3:
         ae:52:fd:e5:ef:92:3f:dc:85:52:2f:33:a5:81:74:59:66:de:
         2f:1e:0c:51:22:16:7a:7e:32:9b:92:cd:26:a8:7c:53:b8:61:
         38:f3:6f:75:04:f8:ca:9d:4a:cd:e2:c4:e9:f0:d3:36:85:3e:
         d6:f2:73:d5:03:64:89:b8:d0:e5:c4:2e:05:8a:65:22:b0:a6:
         45:06:b9:f8:8b:83:76:f1:94:cf:6b:e5:ec:bb:53:f4:ec:78:
         76:39:35:d8:4a:b2:6c:39:4b:50:5e:55:7b:ff:b8:ea:63:bb:
         32:42:ac:3e:48:7f:b1:5a:94:90:c5:46:7a:b4:f1:fd:bc:af:
         8d:a6:71:11:e7:18:18:99:4c:8d:2f:02:53:66:ad:82:63:eb:
         ad:24:80:98:9a:9b:d5:87:4a:5b:4e:bc:dd:a2:8d:35:e9:9b:
         29:88:c2:2f:b4:fa:81:68:ea:2d:45:d6:ea:5f:ad:1c:6b:3e:
         a6:a3:9f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:17:16 2026 by rpki-client