Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/e48f367e-c5ad-35d4-9dce-f2016c51e2a8.roa
File:                     e48f367e-c5ad-35d4-9dce-f2016c51e2a8.roa (raw, json)
Hash identifier:          YCemoOwW3oPgSsuaRPqpmwl1J5pM5dfmZH55fWlOys4=
Subject key identifier:   20:01:B0:7E:23:15:2C:21:2D:65:2F:7A:0B:A3:B5:F9:36:3F:11:D1
Certificate issuer:       /CN=09fe46b0-7034-4d7b-a746-7a70f788c3f5
Certificate serial:       010D0C9F4328584E7FFA31580AA638D25ABFD4E0
Authority key identifier: 2A:52:1B:75:DD:A9:EE:3E:91:EC:CB:6F:A7:C2:EB:3D:EA:BC:38:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/e48f367e-c5ad-35d4-9dce-f2016c51e2a8.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        209.127.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:31:58:0a:a6:38:d2:5a:bf:d4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09fe46b0-7034-4d7b-a746-7a70f788c3f5
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=32f821a8-143a-45c1-ba15-ba45f7e90839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6c:b6:ac:2c:4d:92:d3:68:89:7c:7a:d9:82:
                    16:d3:3f:f0:5f:2c:f2:fe:c1:02:a2:1e:9f:44:f8:
                    db:d6:b8:f1:d2:91:0f:21:84:e1:e1:ef:8b:bf:6f:
                    b9:0e:0c:2b:f5:3d:7f:5b:08:71:87:2b:fe:b5:21:
                    18:e1:a9:d7:3f:a8:71:ce:2d:62:bb:40:7e:05:e9:
                    73:4e:4d:b9:a8:ec:c5:6f:af:ae:5c:fc:b8:1b:bf:
                    a4:e8:11:af:0d:27:63:3c:f3:a1:85:08:21:2b:8d:
                    c4:38:55:af:93:1d:ef:5a:97:07:8b:ff:51:f4:43:
                    45:05:cb:b6:0b:af:6e:f8:fa:34:09:38:bf:6f:1a:
                    6b:5b:11:a3:39:42:8c:2e:4f:68:02:3f:91:fc:24:
                    42:55:b0:c9:c8:4b:67:07:04:5f:ee:13:65:c7:51:
                    2c:f1:77:19:00:5b:01:a0:86:84:3e:1d:2e:21:a6:
                    68:f9:0c:cf:3c:d4:c4:44:86:0d:b5:7d:82:07:4d:
                    38:06:58:51:2e:56:48:f3:a1:99:6b:09:b5:ba:4e:
                    03:49:c9:02:26:08:1a:f3:b7:36:24:06:68:4d:8f:
                    88:3d:54:f2:58:6e:a6:61:f1:9f:e2:9c:9c:ae:44:
                    42:2b:38:14:fa:69:ad:61:e6:56:ee:53:9b:90:4d:
                    60:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:01:B0:7E:23:15:2C:21:2D:65:2F:7A:0B:A3:B5:F9:36:3F:11:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/e48f367e-c5ad-35d4-9dce-f2016c51e2a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5/09fe46b0-7034-4d7b-a746-7a70f788c3f5.crl

            X509v3 Authority Key Identifier:
                keyid:2A:52:1B:75:DD:A9:EE:3E:91:EC:CB:6F:A7:C2:EB:3D:EA:BC:38:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/09fe46b0-7034-4d7b-a746-7a70f788c3f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.127.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:2a:db:66:43:16:05:46:30:06:82:5e:0a:94:10:00:c0:6c:
         23:03:02:71:5d:b5:35:56:73:43:70:41:eb:1a:7e:80:ac:11:
         74:17:84:e3:26:21:2c:2a:23:3e:0b:ee:90:79:fe:f8:90:f0:
         d2:29:8c:6a:d5:29:c1:60:71:4c:47:9e:e4:b6:04:a5:f8:35:
         b0:b2:05:74:90:4b:9d:b2:cc:f3:de:58:97:56:48:d8:fd:e3:
         48:e6:e9:c2:52:3e:77:b5:64:de:bc:ea:fc:0d:fd:12:66:97:
         d6:01:23:0b:9f:64:1f:7d:57:2e:28:3a:fe:27:17:d0:13:04:
         76:58:bb:8c:c3:f5:5d:06:74:f1:d2:fb:2d:aa:70:62:e6:ad:
         73:89:9f:2c:53:de:ba:ce:59:12:34:c4:c8:ac:de:d3:b9:b2:
         c7:d9:2b:f1:a2:1e:3b:98:2b:7a:7e:3b:21:39:bf:df:b6:43:
         e7:4e:21:7a:47:47:6f:bb:55:4e:0a:85:35:4b:80:bf:d6:35:
         87:29:03:13:77:82:86:bf:2d:3b:47:06:23:ee:92:30:de:88:
         a8:c5:29:b3:4a:ad:68:19:bd:d6:0b:58:a2:18:46:a8:4c:39:
         de:1a:34:fb:c5:76:57:9a:7c:3d:8c:cd:a6:12:24:fb:dd:60:
         f5:21:aa:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:49:20 2026 by rpki-client