Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/1167f860-f4a5-3329-9563-b3f8f508fef5.roa
File:                     1167f860-f4a5-3329-9563-b3f8f508fef5.roa (raw, json)
Hash identifier:          oFtlxgQVZX8rf0zedRzgq/5lBSNyHIktxuI8qwaSZwA=
Subject key identifier:   75:76:29:6D:2E:BE:66:C8:5C:B8:78:DD:47:5F:6E:FC:34:D5:CC:F6
Certificate issuer:       /CN=0c924434-62f4-44d5-b440-476f5c675f3d
Certificate serial:       010D0C9F4328584E51E9E6594B4FA46918458E80
Authority key identifier: 05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/1167f860-f4a5-3329-9563-b3f8f508fef5.roa
Signing time:             Sun 28 Jun 2026 09:00:11 +0000
ROA not before:           Sun 28 Jun 2026 09:00:11 +0000
ROA not after:            Sat 26 Sep 2026 09:00:11 +0000
asID:                     14618
IP address blocks:        209.178.244.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:51:e9:e6:59:4b:4f:a4:69:18:45:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c924434-62f4-44d5-b440-476f5c675f3d
        Validity
            Not Before: Jun 28 09:00:11 2026 GMT
            Not After : Sep 26 09:00:11 2026 GMT
        Subject: CN=6ad9ca14-d72a-4c54-bb2a-4de5b52775c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8c:b1:74:99:d6:fc:50:d2:ee:e0:ba:94:c6:
                    d9:8b:8a:cd:62:25:f0:56:3f:27:71:f8:97:0f:ea:
                    47:a8:34:bd:62:4d:e9:02:90:bc:db:b8:28:24:0f:
                    42:64:fb:7c:d2:a8:3a:db:b3:0c:bb:df:b1:e8:e4:
                    3c:9d:92:90:fd:24:6a:2b:39:64:a2:ab:2c:b3:b3:
                    b7:65:22:52:85:80:80:90:20:b4:8b:4f:b6:16:52:
                    07:f2:d3:6e:94:5e:f5:86:68:57:a1:26:86:03:a5:
                    06:d8:fc:d2:15:f5:ff:64:e2:39:7d:af:31:54:1b:
                    8d:27:ef:0c:ad:e3:9d:66:89:35:49:11:85:ec:e0:
                    de:ed:7e:3c:ab:69:ae:f8:4c:a7:b0:15:39:17:40:
                    94:d1:25:86:9d:7e:fe:f7:79:06:ee:cf:6c:00:a2:
                    c0:15:c9:3a:53:92:00:fb:de:6d:d6:11:2f:e6:af:
                    98:bb:be:b1:37:d1:62:59:61:8d:90:90:a5:fa:f4:
                    db:27:f7:d3:e9:c0:5a:e9:8a:e5:84:c4:c5:e1:d5:
                    24:ab:e7:fd:ff:e3:21:96:00:57:be:3c:96:4d:a9:
                    10:04:25:54:19:c7:4a:f7:04:33:f1:c5:cf:a5:2c:
                    a9:2d:3f:aa:e1:83:48:b8:f0:60:d5:13:35:ab:87:
                    fd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:76:29:6D:2E:BE:66:C8:5C:B8:78:DD:47:5F:6E:FC:34:D5:CC:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/1167f860-f4a5-3329-9563-b3f8f508fef5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl

            X509v3 Authority Key Identifier:
                keyid:05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.178.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:0f:22:f0:88:f0:12:8f:aa:b5:13:7c:f1:60:a4:c7:2d:7c:
         ea:01:8a:e4:7f:fe:d4:98:6a:3f:32:3b:83:d0:a8:40:69:d9:
         76:cc:4e:38:6d:3c:7d:4b:83:de:4f:02:61:6a:c2:b3:a1:7b:
         e5:1f:d3:93:dd:23:bd:ce:8c:5e:09:a9:24:3c:dd:e9:35:14:
         d1:d3:d5:ad:01:33:07:6d:b7:62:ca:d8:51:a2:53:24:d9:bc:
         a4:27:b5:ba:fd:57:36:b0:2a:37:45:08:b8:a5:fa:2c:85:0d:
         4c:99:0b:59:31:b7:21:7e:3b:ea:1c:2a:c3:90:7b:bc:26:15:
         ee:5b:ee:a2:b2:02:4e:22:c4:92:6a:01:95:2d:4d:9d:4f:20:
         b0:98:ef:9c:51:f8:a4:2f:0c:d1:76:09:32:b0:fd:5b:e5:dc:
         e5:71:c6:97:e0:33:7e:96:8a:a1:16:ce:e9:be:b4:d1:13:aa:
         66:20:89:d6:be:8e:87:a1:d8:dc:19:75:f5:cb:29:cd:30:12:
         0c:c6:66:0d:17:4e:af:48:74:44:62:64:a7:1e:f0:84:27:ac:
         5f:02:24:49:68:59:c2:54:ae:bf:4a:c6:5d:02:b2:a4:59:4c:
         e0:10:57:65:24:78:48:c1:31:ba:7e:37:3f:67:b8:7a:b0:cf:
         88:22:b3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:56:11 2026 by rpki-client