Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/77757d89-9c77-3e31-8e69-eea65b1e8f4f.roa
File:                     77757d89-9c77-3e31-8e69-eea65b1e8f4f.roa (raw, json)
Hash identifier:          j2lcV6ThX0JGOSX84whcpI4TCN7ylxgfx37DhY6EnC4=
Subject key identifier:   6B:D6:CD:85:B8:A2:7D:D5:D8:28:11:AE:B5:09:EE:20:FE:24:FD:02
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584DC29AFEDE7F1B750748132B00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/77757d89-9c77-3e31-8e69-eea65b1e8f4f.roa
Signing time:             Fri 08 May 2026 01:00:24 +0000
ROA not before:           Fri 08 May 2026 01:00:24 +0000
ROA not after:            Thu 06 Aug 2026 01:00:24 +0000
asID:                     21859
IP address blocks:        204.2.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c2:9a:fe:de:7f:1b:75:07:48:13:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: May  8 01:00:24 2026 GMT
            Not After : Aug  6 01:00:24 2026 GMT
        Subject: CN=0aef7007-1191-46e2-8644-301f432d53e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:67:66:4a:c9:ac:47:e7:d5:69:1e:c7:a8:03:
                    51:40:7c:b4:4d:8e:3d:ed:34:b8:31:0f:ff:be:c7:
                    80:a7:13:80:0d:5a:fc:78:9e:2c:b7:f6:76:2b:9b:
                    7d:b0:73:f3:0c:d2:c1:09:7b:d8:32:78:5b:d7:1c:
                    65:3e:4b:c8:2e:fa:d7:52:77:16:ff:1e:83:91:da:
                    04:38:2c:95:77:a9:e3:42:ce:1a:b1:ec:62:0b:f3:
                    93:66:b5:fa:4a:64:55:f9:b9:65:14:91:ea:3d:17:
                    0e:d7:34:c4:52:ff:49:bc:1b:fb:1e:94:f5:c7:7c:
                    33:17:2b:58:b4:95:c8:05:ed:9a:b2:7c:18:85:1f:
                    de:18:54:f8:17:3c:44:fb:d6:aa:8a:3d:b3:d9:16:
                    85:db:bd:fe:42:33:ee:c2:3b:fb:5d:fa:8a:96:50:
                    d3:4b:6b:77:e5:c7:11:a9:e5:99:57:a4:da:dd:09:
                    82:bc:e8:de:75:59:23:e7:5e:ed:ea:4b:0d:68:d0:
                    0d:1a:53:c4:89:e6:2c:a7:e1:c3:0d:3c:dd:4a:2c:
                    76:3b:bc:ef:f8:be:19:98:49:57:fe:23:11:65:23:
                    57:c7:b2:47:c9:d0:cc:5f:5e:9a:2a:95:85:49:bd:
                    26:1a:09:73:5d:f4:46:3a:0a:27:f7:b2:8b:d7:9f:
                    c0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D6:CD:85:B8:A2:7D:D5:D8:28:11:AE:B5:09:EE:20:FE:24:FD:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/77757d89-9c77-3e31-8e69-eea65b1e8f4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.2.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:f4:dc:3b:58:54:e4:0c:37:c1:6f:97:87:54:6b:31:17:d1:
         e6:20:28:30:e7:45:15:e9:04:55:b5:5d:50:00:7e:64:7d:9a:
         fb:0e:2b:b0:e8:63:60:6b:ca:45:5d:a6:7a:04:fc:74:c6:a4:
         b9:8e:17:f1:10:f8:0c:41:6f:31:6c:9c:53:00:7e:5c:76:78:
         bf:9d:fc:92:32:6c:b5:1f:c0:64:a6:ff:40:95:17:19:10:5a:
         8e:1b:d2:f7:f3:ec:e3:34:e9:3c:3a:87:98:db:8e:fb:64:e6:
         28:26:f9:27:61:50:3d:84:0d:31:2c:06:b1:ec:e0:93:df:0b:
         c1:d4:4e:97:df:6d:54:1e:89:3f:a3:79:7c:b0:2d:71:ae:fa:
         d7:b9:83:7f:ec:a0:32:f5:bb:34:45:77:38:fc:2e:3b:4f:21:
         9b:c6:c1:a5:be:0f:a0:52:8f:cb:2f:3f:82:e2:d1:b2:da:e7:
         76:95:e0:e8:de:65:56:82:7e:c9:16:f9:6b:7e:92:a9:3c:5d:
         1d:d0:b6:e3:7e:9e:a9:af:1a:24:31:e7:91:f6:b4:82:ed:bb:
         3b:78:70:f7:17:83:27:bd:39:d2:6c:61:e0:6b:97:03:11:5c:
         cd:25:49:3e:6d:f0:dd:19:61:81:de:4f:e1:86:cc:94:55:a4:
         db:d9:a7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:32:02 2026 by rpki-client