Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/2ff3b227-b400-3cb8-af10-a35f4a0802d8.roa
File:                     2ff3b227-b400-3cb8-af10-a35f4a0802d8.roa (raw, json)
Hash identifier:          YIK1KX88vFFn1AypSYyKQmZWREsAFmg3LTadga2Ke5o=
Subject key identifier:   56:12:63:0C:55:33:AF:80:4E:77:5D:9B:3E:4C:A6:4E:C1:AF:0E:6F
Certificate issuer:       /CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64
Certificate serial:       010D0C9F4328584E5BAF56F8A5069AD9A4A0FEC0
Authority key identifier: 06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/2ff3b227-b400-3cb8-af10-a35f4a0802d8.roa
Signing time:             Wed 01 Jul 2026 21:00:12 +0000
ROA not before:           Wed 01 Jul 2026 21:00:12 +0000
ROA not after:            Tue 29 Sep 2026 21:00:12 +0000
asID:                     22135
IP address blocks:        173.242.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5b:af:56:f8:a5:06:9a:d9:a4:a0:fe:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64
        Validity
            Not Before: Jul  1 21:00:12 2026 GMT
            Not After : Sep 29 21:00:12 2026 GMT
        Subject: CN=10799510-2601-47c7-a6c1-878022170df0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5c:f2:ee:ef:ed:95:7c:1b:e5:29:99:42:f7:
                    0f:3d:6a:9e:b3:6c:d5:4b:39:62:0d:07:17:68:9b:
                    2c:d8:39:13:37:c3:6c:53:5e:f7:b8:7a:5b:49:3b:
                    86:46:08:57:eb:50:08:39:74:3b:18:f7:7a:f6:d2:
                    35:3e:31:2e:1a:45:07:99:81:d3:e6:59:01:1b:d0:
                    15:12:8e:5e:53:0f:11:d7:84:b7:83:f5:bf:95:99:
                    59:87:d2:ec:29:2b:0a:0e:ff:fb:8a:e2:b2:ec:b5:
                    18:67:1a:df:1a:8d:b8:62:6a:ef:9d:80:c8:43:e2:
                    ba:da:bb:ee:ca:b3:a8:82:01:65:b5:25:5e:be:f9:
                    d2:c5:7a:9c:92:6d:e7:bc:3f:78:3d:3f:0a:d1:7b:
                    56:39:d3:e7:09:73:1e:e7:18:66:06:2a:22:07:7b:
                    54:34:88:75:e2:b8:94:29:43:26:99:d8:f1:e9:36:
                    d2:44:6c:cb:3f:26:50:01:2a:74:27:d4:4d:6e:2b:
                    a5:d2:29:36:4d:e8:4f:2f:0b:21:ff:51:ca:03:f6:
                    c2:b3:ba:6e:5a:85:40:52:f7:b6:53:f0:2d:07:ad:
                    cf:ec:a1:de:b9:20:82:b0:37:5e:2c:45:f4:e3:45:
                    1e:fc:ee:96:03:cb:e3:4f:a4:d7:db:b4:c5:d3:17:
                    99:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:12:63:0C:55:33:AF:80:4E:77:5D:9B:3E:4C:A6:4E:C1:AF:0E:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/2ff3b227-b400-3cb8-af10-a35f4a0802d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.crl

            X509v3 Authority Key Identifier:
                keyid:06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.242.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:3c:28:64:19:a2:fa:3f:7e:02:26:8c:2a:22:5b:2d:1f:ea:
         8e:a1:19:47:9f:41:f5:8e:68:0d:87:e4:d2:23:4c:75:ea:95:
         09:c3:5f:70:9d:d4:c1:d2:d2:0b:6c:79:dd:73:9e:da:a2:0a:
         fd:4e:2f:01:80:7e:95:14:a7:da:ac:b3:7a:35:2c:52:56:e7:
         d4:a6:bb:05:01:04:e2:bc:e9:87:9c:33:a0:61:7f:9e:6c:83:
         99:dc:be:b7:71:79:75:7a:41:bb:fd:9f:41:c6:1b:07:11:81:
         a6:05:b1:d3:05:35:f1:6f:bf:b8:73:87:85:0f:02:f0:19:f4:
         e9:0a:84:ad:ab:59:a9:47:71:d5:57:e9:a7:05:b9:87:c1:5c:
         a7:06:71:ae:32:20:77:67:78:98:58:fc:d2:2e:54:83:23:93:
         9d:8b:02:62:d0:25:da:6d:24:8c:a6:ca:4b:58:fd:a1:e0:54:
         ac:3f:70:fe:06:fb:f8:c7:a3:f0:31:31:21:f6:a5:02:97:33:
         82:35:76:7f:82:40:04:f3:43:13:82:df:0a:cf:35:07:99:ba:
         17:12:11:53:fb:9b:4c:fc:b5:9f:a3:80:35:48:37:16:ad:21:
         1c:4c:8b:e4:6a:fe:9d:b6:85:5f:f5:05:1c:48:9b:88:e6:63:
         63:89:31:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:51:42 2026 by rpki-client