Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/f47e22f4-6e3a-3537-a1be-97f2fa802042.roa
File:                     f47e22f4-6e3a-3537-a1be-97f2fa802042.roa (raw, json)
Hash identifier:          W9wilQSP9zyr6x2fm16i/DJbUUvHtRpp8iZQg63Q+0E=
Subject key identifier:   E2:D6:7D:43:98:0D:DF:3F:0C:0E:2F:53:5A:59:15:41:F5:DB:F2:9B
Certificate issuer:       /CN=e4c32cde-7693-4d10-ae1e-8b8e9d363074
Certificate serial:       010D0C9F4328584EA5AA6D40C7F7A7F4B2EAB100
Authority key identifier: 92:31:4C:58:BF:CF:79:3E:57:04:26:01:33:A0:29:6B:2B:85:7E:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/f47e22f4-6e3a-3537-a1be-97f2fa802042.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     14618
IP address blocks:        172.86.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:6d:40:c7:f7:a7:f4:b2:ea:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4c32cde-7693-4d10-ae1e-8b8e9d363074
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=52c12afc-a554-4528-8d8b-e6e3ae58239d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5a:c4:2a:d3:2a:a8:5d:f5:ff:75:a9:bd:bb:
                    ac:f7:b7:39:1d:4d:bd:a0:b8:ad:8d:6c:ee:e6:a6:
                    65:13:d0:e8:a6:d3:91:20:e0:c6:11:37:b2:c7:cd:
                    52:58:c0:77:f1:85:ce:1b:30:94:03:6d:c7:61:71:
                    3c:73:38:82:ec:cc:d6:58:4e:f7:2e:59:3a:e7:af:
                    29:c6:3f:e2:c1:68:c3:78:9e:e4:6a:9c:b7:98:cc:
                    bd:9a:b0:6e:7e:31:26:2c:a3:75:6e:d6:fb:ab:58:
                    51:74:56:3e:35:29:36:e7:b6:69:c7:24:fd:cf:01:
                    28:6e:93:57:5b:5a:d4:fe:6e:53:7a:57:78:b8:a0:
                    82:04:4a:02:4d:90:a0:1c:d4:25:95:a6:06:9a:7a:
                    45:28:17:80:7b:fb:47:0c:a8:21:9e:2e:00:93:f3:
                    28:0e:ae:35:94:94:57:67:a3:05:56:25:39:6c:6b:
                    8a:30:c5:70:86:56:78:42:c2:fc:da:ae:0f:db:9e:
                    ca:f6:45:bd:00:7c:da:eb:00:99:45:94:73:e1:09:
                    e6:fc:f0:dc:2c:8c:d1:57:22:d6:4b:c7:58:18:82:
                    fc:ec:8d:68:02:29:5f:35:d2:9f:13:41:70:87:b7:
                    ac:4b:74:60:b8:ee:44:9e:f8:61:69:11:08:d7:97:
                    8f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D6:7D:43:98:0D:DF:3F:0C:0E:2F:53:5A:59:15:41:F5:DB:F2:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/f47e22f4-6e3a-3537-a1be-97f2fa802042.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.crl

            X509v3 Authority Key Identifier:
                keyid:92:31:4C:58:BF:CF:79:3E:57:04:26:01:33:A0:29:6B:2B:85:7E:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.86.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:08:88:86:67:ed:7a:55:e0:f9:12:b5:f7:90:1c:ea:c1:ff:
         34:20:19:0c:99:ab:8d:dd:9a:2d:73:0c:28:c7:81:59:a0:63:
         04:54:be:8b:30:83:b1:1e:03:93:69:5f:ca:55:f9:94:df:38:
         f1:6b:bc:a5:cf:3e:c6:b9:ae:bd:7f:42:1f:85:84:45:48:85:
         76:b9:d6:40:b1:93:c4:e0:b1:d6:00:e2:9d:6d:0e:bf:b8:a6:
         21:47:d9:bd:f1:3d:b4:26:51:de:80:dd:de:8d:78:80:02:a9:
         fb:a7:b1:75:99:ee:fd:31:56:45:22:e4:72:c6:7c:dc:cd:19:
         7c:0e:c1:83:ff:e2:f0:40:ad:9f:4c:6e:f3:24:41:59:92:15:
         37:06:3f:4e:db:64:d1:d3:e2:76:36:f0:35:fa:a9:57:35:7f:
         1d:d0:44:67:b7:87:5a:84:87:a2:a5:91:37:ac:01:0e:e3:3f:
         d0:de:7f:e4:41:f5:f7:98:5b:d6:ec:c4:7c:8a:87:2b:e9:7c:
         d5:04:86:dc:9e:cf:37:25:c9:16:29:fb:f5:5c:72:21:ab:36:
         bd:5f:d5:fd:27:72:44:43:f8:54:34:80:1b:26:bd:5f:b0:ba:
         bb:b2:fb:41:33:11:48:8b:20:8b:dc:3d:25:2c:8a:f4:91:31:
         4e:f2:f1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:39:34 2026 by rpki-client