Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/07dc0b8a-4776-47f3-8037-78c17c3b905d/8ba1ff5d-1f16-31c1-b7c3-a5acae3ab35b.roa
File:                     8ba1ff5d-1f16-31c1-b7c3-a5acae3ab35b.roa (raw, json)
Hash identifier:          cr7lImrqqd4fgN58OjEqSn1hM7qJGBpnfj9vf0CRmhA=
Subject key identifier:   2E:43:AD:0F:53:59:E6:58:CC:34:44:1E:17:68:06:1F:1A:4D:BD:8F
Certificate issuer:       /CN=07dc0b8a-4776-47f3-8037-78c17c3b905d
Certificate serial:       010D0C9F4328584F374D1943D2D534E958C81000
Authority key identifier: 66:BD:C0:82:F4:DA:3A:DC:4C:FE:B1:94:40:CA:6A:AE:5D:AF:E2:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/07dc0b8a-4776-47f3-8037-78c17c3b905d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/07dc0b8a-4776-47f3-8037-78c17c3b905d/8ba1ff5d-1f16-31c1-b7c3-a5acae3ab35b.roa
Signing time:             Fri 18 Sep 2026 13:00:12 +0000
ROA not before:           Fri 18 Sep 2026 13:00:12 +0000
ROA not after:            Thu 17 Dec 2026 14:00:12 +0000
asID:                     7341
IP address blocks:        205.144.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/07dc0b8a-4776-47f3-8037-78c17c3b905d/07dc0b8a-4776-47f3-8037-78c17c3b905d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/07dc0b8a-4776-47f3-8037-78c17c3b905d/07dc0b8a-4776-47f3-8037-78c17c3b905d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/07dc0b8a-4776-47f3-8037-78c17c3b905d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:4d:19:43:d2:d5:34:e9:58:c8:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07dc0b8a-4776-47f3-8037-78c17c3b905d
        Validity
            Not Before: Sep 18 13:00:12 2026 GMT
            Not After : Dec 17 14:00:12 2026 GMT
        Subject: CN=4fc32ef9-2051-4c40-9db1-40ea5290afb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:20:d2:00:f2:48:8f:c7:48:4b:90:0b:02:c9:
                    46:c2:17:b8:d7:96:40:fc:94:13:36:88:95:d6:91:
                    62:9d:52:e5:7e:a5:eb:75:b8:47:91:61:de:f9:76:
                    cb:a0:4e:0c:b3:3b:5a:79:dd:b1:33:a9:70:ce:49:
                    4d:34:f5:41:2b:bf:7e:80:18:40:ce:c0:31:75:9b:
                    e5:6b:06:df:4f:b1:57:5a:4a:d7:53:51:17:d4:44:
                    3f:da:90:9e:d8:82:9f:fc:54:6d:f7:f0:9b:9e:f8:
                    5c:f0:fb:da:b2:54:bf:d2:2a:5f:ac:4b:d6:a7:2f:
                    0a:b4:0e:a3:b7:64:87:d7:a8:4f:93:f4:7a:fb:a8:
                    79:bb:dd:0f:f8:bf:5c:8c:17:05:83:fb:3d:43:77:
                    93:8a:77:11:7c:e9:8d:9a:16:9c:11:93:70:e7:2b:
                    33:6a:33:44:bc:eb:df:1c:ec:cd:83:a3:bc:86:ec:
                    1f:38:df:66:e4:4f:15:c1:72:77:e5:1e:c8:c9:10:
                    4d:8c:00:90:3e:a2:16:eb:95:a0:c8:70:af:c2:a8:
                    c3:b1:b8:bd:98:65:d1:cc:fc:b4:19:ec:e5:c5:9b:
                    77:76:f7:40:44:39:1b:33:fc:31:4a:9a:ec:0e:a5:
                    be:5c:a7:e4:d2:bb:29:81:bf:50:3e:1e:1e:65:d8:
                    b3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:43:AD:0F:53:59:E6:58:CC:34:44:1E:17:68:06:1F:1A:4D:BD:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/07dc0b8a-4776-47f3-8037-78c17c3b905d/8ba1ff5d-1f16-31c1-b7c3-a5acae3ab35b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/07dc0b8a-4776-47f3-8037-78c17c3b905d/07dc0b8a-4776-47f3-8037-78c17c3b905d.crl

            X509v3 Authority Key Identifier:
                keyid:66:BD:C0:82:F4:DA:3A:DC:4C:FE:B1:94:40:CA:6A:AE:5D:AF:E2:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/07dc0b8a-4776-47f3-8037-78c17c3b905d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.144.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:dc:95:42:e6:3c:4e:6e:38:66:6a:f2:a0:92:b5:31:14:d4:
         cc:b9:ba:7b:d5:f1:8e:4c:94:ae:3d:72:64:a6:76:e5:0f:b6:
         ef:79:0c:47:62:d8:67:42:87:71:c5:25:3f:55:37:fe:80:d3:
         68:10:78:e5:2e:33:1d:2d:91:a8:7f:34:df:73:b5:4c:f0:92:
         ad:fd:31:cc:ed:f2:c4:32:76:b0:f8:2c:cc:71:60:e4:87:1a:
         31:5f:69:44:56:7a:2b:ce:ba:34:1c:18:78:0d:04:39:51:8d:
         7b:75:e1:6b:fc:74:7f:89:14:f1:4a:f4:79:3d:84:85:8f:d6:
         c2:2e:91:21:19:0c:e2:75:8d:5c:b2:de:48:04:57:af:0d:8a:
         be:bc:92:6b:2a:8a:0e:0e:7d:d7:21:2b:30:f6:2e:b2:72:ac:
         41:dd:13:e5:14:35:14:5d:49:c9:d5:94:cb:dd:e5:ab:70:59:
         56:ce:08:da:77:b8:d7:ab:e8:3b:26:92:d0:16:91:73:53:1f:
         a9:e4:c1:37:3b:03:c6:d4:6f:29:2a:4e:4d:a5:ee:17:5b:87:
         25:a5:fa:8a:bb:ac:cb:f5:11:f7:cc:b5:d2:a6:5b:75:df:b6:
         8c:df:14:fe:31:be:3e:f2:70:be:23:9e:ad:71:4b:4e:f4:ce:
         3f:da:fb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:32:30 2026 by rpki-client