Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f7597c28-2a91-35c4-876f-866e7107f8fe.roa
File:                     f7597c28-2a91-35c4-876f-866e7107f8fe.roa (raw, json)
Hash identifier:          jd+t68lO2yhaOuD+ZLsW/CoBxjYzX2oabKZ9EzMVZvU=
Subject key identifier:   FE:82:EE:F4:7F:35:B4:89:AF:EA:5A:26:33:52:6E:0D:C4:5C:06:C8
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F4112938764E9BF6A03812480
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f7597c28-2a91-35c4-876f-866e7107f8fe.roa
Signing time:             Tue 22 Sep 2026 01:00:12 +0000
ROA not before:           Tue 22 Sep 2026 01:00:12 +0000
ROA not after:            Mon 21 Dec 2026 02:00:12 +0000
asID:                     32043
IP address blocks:        205.179.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:41:12:93:87:64:e9:bf:6a:03:81:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 22 01:00:12 2026 GMT
            Not After : Dec 21 02:00:12 2026 GMT
        Subject: CN=2640f3ba-78fe-4384-a035-4a1dd4527cf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1d:e7:a1:5b:bf:65:83:61:27:8a:8a:f7:f6:
                    9a:2e:19:bd:1e:0a:b9:7c:57:e4:b5:a9:73:56:e1:
                    bf:7e:28:d8:2a:8d:08:57:ec:17:5f:ab:79:48:37:
                    c6:12:b4:93:2f:6d:d1:49:41:14:44:1a:c1:91:55:
                    a0:08:37:10:53:7f:88:58:6e:1d:05:c1:b5:cd:33:
                    c5:38:43:62:12:f8:1b:7b:48:d4:75:ab:a0:48:f2:
                    a0:0f:04:27:dd:d2:6c:39:3b:79:b8:9e:84:f2:98:
                    92:87:2b:06:84:fa:28:41:58:e1:e4:63:ca:e1:0c:
                    54:ae:27:4a:f5:ce:7f:cb:47:1a:31:17:88:df:33:
                    47:22:a7:27:0c:1e:f0:95:43:b8:85:07:a0:6c:a9:
                    0e:3a:54:17:ae:29:58:74:f8:a1:e7:2f:13:88:fe:
                    82:ba:88:f1:e1:ea:56:ca:69:82:46:e8:9e:ca:cd:
                    86:8c:f0:01:d8:8d:92:e8:c3:98:a4:ee:fd:d7:40:
                    f7:cb:23:c2:b5:5c:b2:e8:93:d1:aa:98:89:05:28:
                    67:c6:e4:4c:13:5a:06:39:0f:e5:60:c6:7b:b0:1c:
                    1f:c1:a4:92:9a:7a:8e:03:e3:24:00:55:37:62:ff:
                    aa:d7:bf:0b:44:dc:1c:50:24:6e:6d:1b:8c:53:f6:
                    2e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:82:EE:F4:7F:35:B4:89:AF:EA:5A:26:33:52:6E:0D:C4:5C:06:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f7597c28-2a91-35c4-876f-866e7107f8fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.179.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:94:7d:78:e3:a3:cc:4c:fe:61:1c:47:3b:42:46:bc:1c:94:
         07:c1:2c:15:e4:ce:b8:97:e3:13:da:7d:47:ad:3d:4f:8a:1b:
         f5:3f:14:14:e7:43:64:bd:c8:58:e7:16:b7:ce:19:1f:fd:b0:
         2d:a4:70:3f:a7:30:33:a7:a9:3f:33:dc:29:5a:37:98:4c:c9:
         60:21:fd:89:79:c4:b2:e0:cc:32:15:c7:9b:7d:66:90:3e:ea:
         b2:e2:2a:f6:67:5e:e2:cf:05:a0:36:ff:24:99:86:54:2c:5e:
         21:f1:b7:41:f7:69:20:6b:43:da:f0:31:b1:65:94:76:e1:6d:
         0c:75:77:31:11:80:51:a1:aa:b8:71:bb:2d:59:3b:53:4d:1b:
         f4:2f:01:0d:0b:fe:7e:aa:14:8a:75:1b:19:dd:e1:f1:f3:f1:
         ad:da:0b:59:85:0b:2e:e4:62:f4:cb:52:ad:ca:f3:2e:ef:a0:
         51:a6:17:1b:3f:79:84:72:c6:a5:42:bd:c8:61:ad:3f:5a:37:
         a9:8c:df:25:4f:cb:f5:76:59:2a:7f:a0:87:c0:3a:af:4a:df:
         01:6e:dc:86:b7:f4:5e:2a:99:c5:b8:13:f7:d7:30:2b:cc:c3:
         6d:7f:52:df:4f:90:fd:f8:b2:42:49:da:9e:0b:ae:15:64:da:
         72:5d:96:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 08:31:52 2026 by rpki-client