Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/352e859a-e30b-311a-8d4e-4ebdda38bda4.roa
File:                     352e859a-e30b-311a-8d4e-4ebdda38bda4.roa (raw, json)
Hash identifier:          dqwY0BhhVuZYuf4bw3K83lGdfKsODmZJ2v6NQdRbvyY=
Subject key identifier:   8C:C5:AC:09:BC:0D:4B:02:0B:95:B0:47:D4:AC:CD:CD:FE:80:A6:C3
Certificate issuer:       /CN=b9030ea5-31a0-4bad-bebd-2fffbce27add
Certificate serial:       010D0C9F4328584F14678FB5D868EC5DFF73B000
Authority key identifier: B7:6C:F2:37:A3:77:AF:26:56:71:EE:05:4B:8E:1B:6E:12:E3:9C:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/352e859a-e30b-311a-8d4e-4ebdda38bda4.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     49544
IP address blocks:        203.132.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/b9030ea5-31a0-4bad-bebd-2fffbce27add.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/b9030ea5-31a0-4bad-bebd-2fffbce27add.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:8f:b5:d8:68:ec:5d:ff:73:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9030ea5-31a0-4bad-bebd-2fffbce27add
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=5245385b-8b53-4a4a-a443-40269959d023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ee:43:9c:30:be:3c:27:54:3a:5e:9c:6b:cc:
                    89:72:5e:75:a4:18:dd:25:5a:89:3b:16:5d:e6:54:
                    fc:3f:14:1d:4a:26:b0:74:e6:de:e9:db:9b:98:fb:
                    7c:89:49:06:80:37:2e:3b:b3:9e:bc:16:9e:50:18:
                    9f:12:c9:00:db:eb:aa:f6:17:7e:84:80:ab:20:70:
                    23:ac:cc:57:16:94:1e:b5:41:8d:a8:1f:ef:4b:c0:
                    bf:76:9c:87:96:09:5f:d2:1b:66:5f:77:6e:7b:e4:
                    d3:99:6f:ab:1f:0f:6a:36:b9:66:95:05:c5:4f:7b:
                    21:2e:fe:5f:d1:f7:c5:0e:53:70:ba:e6:ee:82:df:
                    0e:bb:2b:1f:f2:84:a4:4d:4e:e3:e5:bb:53:4f:09:
                    55:74:28:6d:3d:c1:d6:56:16:bf:63:9b:40:50:60:
                    e7:58:06:1a:3f:e0:5e:82:55:18:0d:d7:22:78:54:
                    d4:a0:5f:53:96:94:86:3e:51:24:c1:6d:db:ec:54:
                    34:08:49:70:9c:c4:5d:ee:b4:a9:65:a0:6d:8a:6d:
                    f7:19:2d:00:7e:56:92:81:49:ee:9e:39:a7:cc:48:
                    73:d5:bb:7a:81:08:fe:9a:31:5d:4b:cb:62:c4:70:
                    0c:73:85:4e:bb:6f:39:9d:6c:3c:3a:bb:5f:29:1a:
                    37:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C5:AC:09:BC:0D:4B:02:0B:95:B0:47:D4:AC:CD:CD:FE:80:A6:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/352e859a-e30b-311a-8d4e-4ebdda38bda4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/b9030ea5-31a0-4bad-bebd-2fffbce27add.crl

            X509v3 Authority Key Identifier:
                keyid:B7:6C:F2:37:A3:77:AF:26:56:71:EE:05:4B:8E:1B:6E:12:E3:9C:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.132.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:d6:fb:ef:c5:c6:fd:b1:e0:c8:83:57:44:d7:f5:94:3e:17:
         d9:b3:a6:1e:42:59:45:d5:dd:55:27:71:82:30:95:00:88:d8:
         83:50:c0:c0:c0:60:a6:cd:0d:84:70:f1:ed:72:e0:0e:65:20:
         ee:ad:54:ff:4e:39:67:ed:da:d8:b7:57:e5:68:a1:6b:f6:93:
         57:94:ca:89:81:35:e8:b7:87:71:45:53:46:cb:75:da:a9:4f:
         0e:ee:27:26:82:8a:b2:10:dc:f9:cf:01:01:81:2e:25:5b:ba:
         84:6b:13:97:ce:ee:09:d6:82:3e:87:5d:f8:77:83:04:48:67:
         6d:c3:69:25:a8:0f:fb:d5:b4:51:3b:55:d3:63:c5:d5:c4:1d:
         4f:e2:82:40:8d:1c:6b:6c:c7:8b:e1:09:a4:c4:78:51:5f:c8:
         fa:61:1a:b0:eb:60:b8:5c:48:c1:94:3a:48:78:f3:67:24:54:
         31:0f:9c:cc:cb:40:f0:36:01:ff:1f:79:87:0d:df:42:1b:0d:
         64:27:e2:5d:27:5a:76:89:0c:b8:4f:22:dd:34:21:23:5e:5a:
         d8:2d:f9:41:20:85:12:24:83:99:b6:5d:dc:04:2f:43:b6:0c:
         65:9b:4e:a9:a3:3f:78:97:57:5e:ec:4a:8c:8e:f3:93:90:6c:
         c5:62:81:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:14:07 2026 by rpki-client