Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2a9ff331-5183-36df-ab6d-01ae046643d7.roa
File:                     2a9ff331-5183-36df-ab6d-01ae046643d7.roa (raw, json)
Hash identifier:          UKsOgfBXlbog0nk6rjsS8OZFgbqFJnBnb2t9hJuVtaU=
Subject key identifier:   31:7D:84:E9:72:9B:17:BB:CE:6C:65:B3:37:2C:61:68:17:57:6D:F4
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E5E79FE59AD6E357233681C00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2a9ff331-5183-36df-ab6d-01ae046643d7.roa
Signing time:             Thu 02 Jul 2026 21:00:12 +0000
ROA not before:           Thu 02 Jul 2026 21:00:12 +0000
ROA not after:            Wed 30 Sep 2026 21:00:12 +0000
asID:                     30036
IP address blocks:        64.237.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5e:79:fe:59:ad:6e:35:72:33:68:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jul  2 21:00:12 2026 GMT
            Not After : Sep 30 21:00:12 2026 GMT
        Subject: CN=9a039d91-f2f7-421c-9ef6-6661ea7ec692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:10:31:04:00:28:e1:62:c7:35:48:f4:e9:d7:
                    55:3e:f5:e3:27:ad:8b:32:61:06:8d:63:37:1b:bc:
                    0b:ac:95:4b:77:cc:c3:29:dd:18:1e:46:bd:6e:f3:
                    b5:b8:f5:39:fb:81:46:d7:ce:66:56:d1:83:83:60:
                    bf:6a:17:21:29:14:fd:c7:34:53:b9:02:5b:1e:74:
                    6a:cb:2b:ca:be:63:ff:a9:f6:bb:ad:fb:90:54:5a:
                    62:d6:af:47:a2:2d:80:56:18:51:ef:e5:84:e1:7d:
                    ae:37:0a:d5:7e:cb:e5:84:97:fc:a7:6c:06:42:4f:
                    0c:91:da:ea:58:69:52:a5:da:03:4e:ad:6c:66:72:
                    cc:89:c7:e1:8f:99:9c:66:84:87:ec:95:f5:ee:b6:
                    9f:ae:83:bf:65:45:6d:0f:0b:0f:0f:6a:e5:22:31:
                    dd:22:a7:41:e5:c1:3b:16:9f:3d:f2:0c:bc:38:47:
                    08:a4:87:1b:46:88:bc:24:fc:44:ad:98:b7:97:49:
                    26:ed:ae:b6:6d:05:d2:35:9f:f9:77:58:93:be:36:
                    2c:3e:d4:0e:7c:20:a0:0a:ad:a4:0b:ab:01:4b:5c:
                    bd:3d:b3:76:27:4d:99:05:74:6d:d8:d6:13:30:5f:
                    2e:6b:62:44:97:1c:09:ae:a1:35:cb:b4:60:15:4a:
                    a4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:7D:84:E9:72:9B:17:BB:CE:6C:65:B3:37:2C:61:68:17:57:6D:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2a9ff331-5183-36df-ab6d-01ae046643d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.237.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:48:79:a1:a6:07:f8:fe:c4:50:00:db:f4:ae:a8:74:90:14:
         06:56:82:fe:64:55:32:35:78:71:57:46:af:ed:43:ba:88:15:
         b3:a8:41:6a:91:e2:49:e3:f7:70:01:1a:ae:5b:c2:82:8a:28:
         78:ba:ca:e3:5e:d6:69:30:cf:3f:42:2a:ea:ae:a5:59:b6:4c:
         34:d3:ac:c3:f3:de:fc:27:54:ff:6e:94:62:d4:44:07:b6:d8:
         08:6e:a2:a4:fe:13:8d:bd:e1:5a:61:0c:22:d0:f1:99:80:de:
         97:e5:9e:87:90:8a:d6:b9:00:0d:50:54:dc:23:73:29:48:ca:
         56:00:7b:06:7a:cb:d5:08:22:0f:32:82:dd:38:6e:99:dc:23:
         57:26:76:fd:40:43:46:fa:05:f0:25:09:da:2f:de:b1:ce:1b:
         1f:a6:cd:ce:b8:76:9d:08:15:b6:f0:3b:07:5c:10:87:18:78:
         ca:48:0d:fb:7b:24:2e:64:f9:97:7f:33:93:9a:d7:40:a4:1c:
         34:bd:0a:7a:f3:93:fe:e0:23:36:9e:e9:7b:59:fe:ce:92:30:
         ac:13:da:7b:3c:ea:a2:e3:8a:00:07:f9:8e:97:36:bf:25:35:
         0e:f0:a1:84:9f:7e:95:1e:c4:b1:e5:97:40:c5:7e:81:e3:0e:
         3e:9b:a0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:11:13 2026 by rpki-client