Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5dfc3ed5-dac8-3ccc-be51-b2a82099a0e5.roa
File:                     5dfc3ed5-dac8-3ccc-be51-b2a82099a0e5.roa (raw, json)
Hash identifier:          PY6tGuAJ1QJiOWY993zFzyO0MCmeaQFJqQT9vPvAsd4=
Subject key identifier:   E7:5C:CD:D7:B9:43:FE:FC:C6:D5:AE:62:7E:B8:24:F7:C9:03:68:13
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584E86F50C8EB494281C19046500
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5dfc3ed5-dac8-3ccc-be51-b2a82099a0e5.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     3939
IP address blocks:        204.2.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f5:0c:8e:b4:94:28:1c:19:04:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=c0019417-60b2-42ee-97d0-e3d48a74e6b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5a:80:7f:f4:76:a3:2a:06:8e:64:5d:de:f7:
                    77:81:6d:52:fa:cc:53:df:88:a3:95:94:d9:45:9a:
                    25:11:b9:0f:12:91:09:1b:eb:02:2f:27:c6:3a:cb:
                    25:c1:fd:4c:3f:ba:ac:fd:a6:fd:a0:b1:e6:11:f9:
                    86:17:ee:ee:0f:e4:62:2b:43:2d:7d:fa:e0:6f:53:
                    be:20:68:34:e5:31:53:77:ba:b6:9c:ce:65:2d:8b:
                    f2:05:36:a0:4f:b1:81:6a:66:cd:fe:0d:78:74:27:
                    ec:ef:7f:9b:ed:a2:cc:2d:c8:28:ce:e9:76:b9:e2:
                    46:16:41:9f:3b:6f:1d:bf:8c:7d:54:94:4f:c2:48:
                    82:6f:49:9e:1c:cc:a2:6c:0b:9d:82:fb:d3:f8:6e:
                    52:88:0e:81:b2:ec:a1:5e:ad:7d:d5:27:73:0e:0f:
                    37:46:e9:3d:15:85:a9:0c:14:5a:07:f4:48:41:a9:
                    eb:52:fa:ed:db:50:10:1e:4c:14:bd:47:e8:3f:80:
                    ae:17:5b:41:18:78:c0:03:91:8a:05:cb:11:a8:49:
                    7f:51:b1:e0:0b:7e:d3:0d:d2:9d:53:9c:7b:f7:10:
                    45:40:95:e4:d1:da:92:c3:c0:3c:fb:0f:bc:98:53:
                    fc:db:b7:7a:1c:42:9a:55:3e:54:a7:d5:0e:ac:82:
                    e2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:5C:CD:D7:B9:43:FE:FC:C6:D5:AE:62:7E:B8:24:F7:C9:03:68:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5dfc3ed5-dac8-3ccc-be51-b2a82099a0e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.2.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:d8:e5:26:11:21:15:4c:2b:16:22:76:ed:55:21:c1:58:04:
         2b:89:0c:41:fb:d1:dd:33:f9:35:48:55:30:96:6c:37:11:49:
         32:c5:47:c1:ff:fa:e9:87:09:08:38:c6:5a:74:d7:ce:09:36:
         97:34:65:6d:6e:dc:7c:a2:ea:84:d8:69:ee:06:ee:0d:ac:75:
         63:65:80:a3:4a:f0:2a:17:10:4d:74:a1:b5:e7:75:78:a0:ee:
         b4:5a:c2:5f:74:0f:74:58:3a:5d:e1:84:6d:d5:a7:9b:b1:05:
         a8:db:cd:cd:85:80:dd:d3:24:8c:32:b0:b2:56:13:ba:be:1c:
         dc:41:82:56:f0:0e:81:40:82:64:fb:45:0a:6f:94:22:dd:66:
         9b:db:7b:5c:3d:a1:d0:7a:d5:6c:fd:0b:b8:5a:44:43:b2:10:
         48:2b:33:b0:7e:b3:4e:18:2c:27:4f:00:31:ef:ab:5c:4b:51:
         90:ac:35:bf:d1:5d:ae:87:7f:80:77:cd:d2:b8:71:a3:6b:36:
         d6:bd:c7:f6:d9:0b:6a:c1:2c:47:25:fd:34:27:d0:c3:45:b1:
         ea:aa:7f:8c:82:62:45:3c:6c:5a:19:3f:50:a2:43:34:51:50:
         2c:3d:88:c4:00:00:fb:d0:fe:87:14:74:31:22:28:e3:f6:8b:
         1c:6b:8b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:05:15 2026 by rpki-client