Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/9d44e04d-b085-3d75-97e9-ff1c24a219d5.roa
File:                     9d44e04d-b085-3d75-97e9-ff1c24a219d5.roa (raw, json)
Hash identifier:          mo+DISQxeK3W0zs2JO0MiAvyT0TyboE6pBM1Ud9QAUs=
Subject key identifier:   64:0C:48:8B:CC:13:21:07:96:7F:15:61:3A:F0:B4:8E:01:41:90:AB
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F4328584E6F3EAFC04F70D2E1503F1780
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/9d44e04d-b085-3d75-97e9-ff1c24a219d5.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     40934
IP address blocks:        69.48.238.0/24 maxlen: 24
                          209.40.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3e:af:c0:4f:70:d2:e1:50:3f:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=d90467af-ff6b-495f-a952-6cd5f6d76a2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:48:02:3b:0e:4a:50:8a:41:22:a9:77:f5:c9:
                    48:59:3f:35:74:5c:be:06:c0:e9:a1:ac:7f:9c:82:
                    b4:7a:3c:5c:f5:0f:83:6e:20:85:9c:ca:85:47:99:
                    1f:e2:b7:5d:6b:e2:4e:4e:13:c8:2c:5c:68:64:3f:
                    8a:93:52:52:26:f4:c6:7a:26:d2:7c:97:32:7f:db:
                    86:fb:43:6e:21:05:1d:52:38:04:23:22:62:c3:d4:
                    40:ec:58:e0:e2:4a:37:c2:1a:d4:7c:16:a6:68:6d:
                    18:5e:c0:d9:22:16:6a:9d:ae:99:9b:d5:18:30:b7:
                    5f:e2:9d:e9:1b:d3:6a:56:11:dc:21:7a:a5:2b:dd:
                    1c:6e:ff:58:18:24:8f:1b:95:c6:a5:d6:be:e4:4b:
                    ad:d2:b7:45:7a:c5:e6:23:d8:1e:44:65:5d:46:b6:
                    9b:ff:45:72:a1:2a:09:8a:85:47:2c:d1:3e:39:31:
                    2e:ef:ee:fd:39:86:29:fa:53:08:22:76:f5:b3:2f:
                    16:e3:37:cb:10:d3:c6:c7:e5:d8:15:b1:ee:a7:7a:
                    b7:7d:27:b6:b7:ad:a5:9b:8c:de:d6:2c:88:47:46:
                    8c:57:40:b7:86:48:2a:5e:a3:ba:11:c9:05:f4:6d:
                    00:96:4e:bb:5f:10:f8:d6:1d:f9:2b:e4:ae:b4:69:
                    54:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:0C:48:8B:CC:13:21:07:96:7F:15:61:3A:F0:B4:8E:01:41:90:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/9d44e04d-b085-3d75-97e9-ff1c24a219d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.48.238.0/24
                  209.40.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:f2:f9:71:10:24:ab:d1:e0:1b:98:19:25:42:ab:7e:26:f5:
         b0:e3:80:df:c0:8d:63:98:1a:b6:61:0e:2b:15:13:e3:fc:5e:
         82:f5:a9:41:29:65:2e:ef:5f:96:33:d5:13:49:c2:81:a6:fb:
         89:7b:6c:62:11:13:24:b3:e6:e3:27:89:2f:75:59:bb:6a:69:
         e6:ab:4a:cf:74:4d:fe:7f:d0:47:d5:05:4a:c2:33:a0:38:1d:
         a4:12:b2:40:73:fb:be:82:b5:aa:97:53:de:0c:5b:65:fc:55:
         c4:a9:3c:19:3e:f1:f9:d5:02:78:55:d1:3b:d0:46:63:f7:4a:
         21:84:e5:33:f6:6f:c0:5c:27:fd:68:6d:f8:ab:a1:e9:12:e1:
         ae:93:31:0e:52:ae:42:e4:ad:7b:fe:17:86:b1:45:d3:60:8e:
         30:b6:06:ee:dd:e4:df:c7:6c:ee:1d:7e:8f:da:4b:29:5b:0e:
         8e:3f:de:89:58:f3:17:35:15:2c:80:8b:b5:fc:ae:dc:d8:dc:
         2d:55:04:2b:5c:4e:11:08:a6:2c:d4:77:18:37:5a:24:3c:71:
         78:f3:78:da:e5:2c:e6:50:b2:ba:bf:d5:4c:88:49:33:6c:a9:
         e0:37:a3:20:1f:3a:0f:3c:aa:f9:f5:d9:75:b4:89:92:31:4d:
         97:74:d1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:57:55 2026 by rpki-client