Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/8ecd6978-c1f1-3b9f-912e-d4f6c306c11a.roa
File:                     8ecd6978-c1f1-3b9f-912e-d4f6c306c11a.roa (raw, json)
Hash identifier:          2Ht3QAZ4lsLDKiU953PlIcx7ghm73oYQkYuhpE70bwM=
Subject key identifier:   27:C6:9B:30:F4:74:FA:B5:AA:9D:A5:2F:88:E5:2F:3C:B6:97:E7:2F
Certificate issuer:       /CN=0c924434-62f4-44d5-b440-476f5c675f3d
Certificate serial:       010D0C9F4328584E51E9E63EAE309CED6D735E10
Authority key identifier: 05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/8ecd6978-c1f1-3b9f-912e-d4f6c306c11a.roa
Signing time:             Sun 28 Jun 2026 09:00:11 +0000
ROA not before:           Sun 28 Jun 2026 09:00:11 +0000
ROA not after:            Sat 26 Sep 2026 09:00:11 +0000
asID:                     19198
IP address blocks:        209.178.244.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:51:e9:e6:3e:ae:30:9c:ed:6d:73:5e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c924434-62f4-44d5-b440-476f5c675f3d
        Validity
            Not Before: Jun 28 09:00:11 2026 GMT
            Not After : Sep 26 09:00:11 2026 GMT
        Subject: CN=bd677044-6210-4a95-a649-8e614eaf42e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:5c:cd:34:87:9a:2a:9d:e5:de:2b:c0:58:6b:
                    23:ea:95:81:f8:c0:4c:7a:bd:8a:a6:5a:9e:42:91:
                    a5:99:6f:ae:f2:bf:db:df:56:18:c4:12:70:69:da:
                    13:d4:01:08:a5:d3:2d:d4:fe:52:55:98:7f:a7:d4:
                    81:8e:e2:6f:24:91:03:75:b8:a9:aa:8c:18:ac:df:
                    70:3b:b8:55:8d:14:05:76:33:6b:4d:54:0b:45:bb:
                    7d:85:99:f5:0d:1d:af:f4:26:d4:97:6d:83:46:1a:
                    ca:b9:a9:2e:44:24:33:c3:23:0d:07:5a:30:52:0a:
                    7c:7f:2d:9f:50:5e:76:8f:17:fd:6b:12:b1:bc:dc:
                    25:09:d4:22:07:28:2d:f4:95:4f:ee:8c:5e:35:2b:
                    dd:6a:d1:dc:6a:0d:59:54:45:8a:07:30:7d:f9:ae:
                    b1:67:ea:a2:fe:5e:e5:80:bc:8d:c1:23:e7:74:15:
                    b0:61:d1:07:29:44:bb:75:49:a0:04:73:b4:2b:8c:
                    58:89:05:6f:bd:5e:0a:8e:44:95:a7:7b:8b:aa:b4:
                    98:f7:df:c2:f5:f9:d3:6c:85:c4:98:f3:90:b3:4d:
                    f1:57:f1:be:75:07:60:e1:ba:53:f8:84:a0:12:fb:
                    f5:64:c8:38:04:27:8f:55:25:0b:85:a8:08:c5:f3:
                    07:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C6:9B:30:F4:74:FA:B5:AA:9D:A5:2F:88:E5:2F:3C:B6:97:E7:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/8ecd6978-c1f1-3b9f-912e-d4f6c306c11a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl

            X509v3 Authority Key Identifier:
                keyid:05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.178.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:01:54:ab:36:2f:e1:64:8e:fd:b1:a2:4d:8b:51:fd:c0:db:
         4e:7b:65:21:45:13:97:34:fd:01:d1:f1:c8:2d:c1:99:2d:b9:
         de:ff:43:14:83:33:e8:fb:9f:61:9b:d5:9b:d9:57:52:6d:7d:
         c4:8f:32:5b:7a:2a:52:63:2a:83:8e:5b:e7:e6:99:88:b0:fa:
         e0:a5:4c:09:33:f1:02:ee:ee:97:06:0c:06:72:f8:a8:4a:61:
         e9:a4:cc:44:35:3f:8e:93:66:da:12:ca:2b:04:ef:4c:14:6c:
         d2:0c:66:7f:71:ea:c5:64:7d:f5:9b:cc:ba:c8:40:41:f8:37:
         bc:99:17:bd:4c:3f:63:51:8a:33:8f:26:fd:f5:39:9d:f8:8b:
         80:37:76:c7:e7:c1:ba:42:62:4e:d0:ef:85:e6:9a:a0:e4:17:
         96:f9:e1:9e:f1:77:b5:f4:cc:40:88:1c:db:a0:ee:49:3b:1c:
         04:01:0b:3c:a0:8f:9d:dc:4e:e8:1d:db:e0:df:38:b8:68:d6:
         83:04:78:25:80:9a:4a:3b:eb:63:fb:06:ad:b9:24:3f:07:73:
         c5:d1:ec:06:22:90:5c:44:54:9b:20:3e:57:6b:ee:f7:57:c1:
         3a:9d:bd:59:d7:82:43:4c:c0:31:f1:5d:c8:80:9d:51:ae:cd:
         dc:13:98:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:52:03 2026 by rpki-client