Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94738821-1f1e-430f-b49e-05e511cc80b4/36385032-d3cb-3645-a487-3c64bfe2ccfb.roa
File:                     36385032-d3cb-3645-a487-3c64bfe2ccfb.roa (raw, json)
Hash identifier:          57PbqIEBFjC4b/gG7kxN7WFSw5O6icd1oyiuqgYZ4rk=
Subject key identifier:   7B:53:51:A6:12:69:C8:2B:E3:D2:77:33:A4:9C:BB:C6:97:1A:A4:D5
Certificate issuer:       /CN=94738821-1f1e-430f-b49e-05e511cc80b4
Certificate serial:       010D0C9F4328584E48248A618938FAA73267EC00
Authority key identifier: 80:3E:2B:5E:60:69:89:D0:A0:A4:C5:19:14:52:A3:C1:0B:59:D7:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94738821-1f1e-430f-b49e-05e511cc80b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94738821-1f1e-430f-b49e-05e511cc80b4/36385032-d3cb-3645-a487-3c64bfe2ccfb.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     209242
IP address blocks:        209.222.114.0/24 maxlen: 24
                          209.222.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94738821-1f1e-430f-b49e-05e511cc80b4/94738821-1f1e-430f-b49e-05e511cc80b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94738821-1f1e-430f-b49e-05e511cc80b4/94738821-1f1e-430f-b49e-05e511cc80b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94738821-1f1e-430f-b49e-05e511cc80b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:8a:61:89:38:fa:a7:32:67:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94738821-1f1e-430f-b49e-05e511cc80b4
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=8379ff62-8d46-4561-8ac6-82e612c7545c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d7:df:3f:40:38:77:b0:90:aa:5e:bb:65:19:
                    55:26:af:cc:42:64:fd:b5:5f:84:fa:9d:be:b7:b4:
                    b6:c6:dd:e2:ef:82:e8:50:28:f5:80:31:ad:ca:26:
                    92:2f:61:b7:15:fb:5e:c3:3a:75:65:ef:fc:8c:46:
                    ec:65:9b:7e:e7:14:14:c3:d8:3d:54:8e:5e:09:97:
                    7e:25:d2:51:b6:15:30:03:08:f3:40:12:89:b1:b6:
                    60:1b:10:f9:63:00:15:3e:ee:c9:ed:73:d4:b2:e2:
                    f0:7b:3d:dd:b2:8f:ea:b4:86:6b:46:b2:c9:b6:95:
                    22:da:bb:c3:d3:32:16:b9:46:20:26:86:4f:f8:c2:
                    e1:a5:5b:6d:de:de:c5:1c:af:d6:3a:08:9c:52:82:
                    fc:3c:88:27:21:78:76:3c:61:d6:07:34:f9:6b:23:
                    2a:3d:a7:83:a1:65:40:24:95:bb:43:b8:bf:1f:53:
                    0b:a9:58:e3:fb:4f:3c:94:53:21:72:20:ea:b7:d9:
                    63:13:04:17:f0:0d:26:8f:85:65:1a:c6:a0:99:77:
                    15:bf:f1:74:8d:a7:ed:6f:53:69:81:39:c3:9f:38:
                    ce:11:df:59:89:eb:f0:0c:2b:fb:81:e2:1f:37:d8:
                    35:32:c4:09:5c:dc:cc:3f:56:96:f9:65:9a:4d:07:
                    1e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:53:51:A6:12:69:C8:2B:E3:D2:77:33:A4:9C:BB:C6:97:1A:A4:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94738821-1f1e-430f-b49e-05e511cc80b4/36385032-d3cb-3645-a487-3c64bfe2ccfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94738821-1f1e-430f-b49e-05e511cc80b4/94738821-1f1e-430f-b49e-05e511cc80b4.crl

            X509v3 Authority Key Identifier:
                keyid:80:3E:2B:5E:60:69:89:D0:A0:A4:C5:19:14:52:A3:C1:0B:59:D7:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/94738821-1f1e-430f-b49e-05e511cc80b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.222.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:8c:d1:8a:da:8d:4f:ee:74:8e:4f:31:8b:99:70:77:8d:27:
         28:7b:7c:0e:4b:d7:17:88:00:28:9e:f3:bc:f8:3f:bd:f7:18:
         a1:67:81:79:ec:d6:ec:84:39:a4:00:77:8e:e9:9a:c3:4f:db:
         ff:84:fb:99:dc:46:f7:66:da:66:67:6d:67:b4:31:c8:26:07:
         97:23:ab:67:17:00:63:99:11:bc:13:1c:d3:f9:80:72:6d:48:
         67:c9:9f:1c:2d:83:a3:b1:4d:07:4b:53:19:63:17:e3:62:ac:
         71:88:52:cf:ca:91:ea:3c:ea:9d:a6:fb:21:a9:dd:f6:e6:63:
         c7:57:46:a8:61:09:db:4c:7a:8b:ac:b9:b7:a2:a1:9c:97:94:
         84:d0:05:20:b1:62:d2:a9:fa:af:92:0e:2b:8a:cd:ae:03:ba:
         2a:1b:d4:70:2b:43:38:b2:91:96:50:94:ed:b4:97:07:7b:21:
         81:09:74:28:f6:68:0e:39:4b:b7:05:1a:e2:f1:ba:14:62:dd:
         3c:3f:8e:e6:dd:67:97:47:6f:ee:d1:40:ec:50:16:ed:9f:28:
         58:1a:5d:20:81:fb:b5:95:1e:08:2a:50:dd:e1:d5:d7:1e:3b:
         4b:e2:cd:12:52:7f:e3:02:eb:03:bc:51:90:6c:ec:db:95:cb:
         b8:0a:b7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:50:27 2026 by rpki-client