Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/9a7e5d05-11c2-3851-b038-2bcc4e5cdafb.roa
File:                     9a7e5d05-11c2-3851-b038-2bcc4e5cdafb.roa (raw, json)
Hash identifier:          18odiTe/nvrXiT9KNHY4cKAQ4grldZzM9MDlsTil2gw=
Subject key identifier:   F3:26:9A:1A:26:E6:E6:24:F9:A6:DE:D1:5D:52:E6:09:2D:0B:3C:94
Certificate issuer:       /CN=700690a7-1957-45e2-8744-ee9735b07319
Certificate serial:       010D0C9F4328584E6F3A2B5A259787DFBBE72B80
Authority key identifier: 21:A9:9A:BD:45:2A:D2:F3:5C:22:2C:1F:F0:D9:98:B9:70:DA:DA:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/9a7e5d05-11c2-3851-b038-2bcc4e5cdafb.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     36289
IP address blocks:        209.209.24.0/24 maxlen: 24
                          2602:fcb8::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/700690a7-1957-45e2-8744-ee9735b07319.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/700690a7-1957-45e2-8744-ee9735b07319.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:2b:5a:25:97:87:df:bb:e7:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=700690a7-1957-45e2-8744-ee9735b07319
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=4b0611e6-69a3-48c0-a31d-1a5a5388bc8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e6:2f:57:ba:f0:22:9f:8e:65:9b:be:af:b1:
                    af:a5:03:d3:db:9b:e8:d0:b9:12:94:b6:4a:e9:46:
                    18:9e:ea:28:ab:1a:20:05:00:2d:d3:e9:05:7a:cf:
                    20:2d:e5:81:bc:5e:d0:6f:2e:71:d9:9e:b1:85:92:
                    90:c1:db:ef:f6:1e:13:1f:d7:5a:6b:81:25:b1:0f:
                    3c:8f:16:fe:4c:88:65:c2:4a:ba:20:4a:9f:15:fb:
                    e9:87:0b:1a:b6:52:bc:54:24:5f:1e:dd:f1:5b:11:
                    e3:8b:26:d5:b7:79:07:00:cd:4f:ee:ee:ba:73:a9:
                    a6:62:15:08:97:25:38:27:f5:18:a7:ad:50:1d:d0:
                    7f:48:c3:2e:e4:01:0d:44:52:6f:4a:ba:a6:82:03:
                    b5:e9:a6:db:e8:9c:9b:31:cd:31:67:3c:f9:1e:d3:
                    e9:85:91:b2:3f:25:4d:63:c4:3b:00:93:40:f4:ec:
                    b7:dd:66:c9:e1:b4:3f:1f:92:c8:ec:1a:38:e5:b1:
                    e3:1f:94:c9:8f:6d:ba:5e:bf:91:2a:5a:0a:a4:94:
                    7d:45:52:cc:1f:23:f9:9a:b2:a2:0e:f2:7b:ac:30:
                    27:68:7c:30:50:4d:9b:48:f1:b7:17:72:61:8f:67:
                    8e:41:6a:1f:1e:b0:e4:0f:54:9b:bf:ea:ab:1f:73:
                    79:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:26:9A:1A:26:E6:E6:24:F9:A6:DE:D1:5D:52:E6:09:2D:0B:3C:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/9a7e5d05-11c2-3851-b038-2bcc4e5cdafb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319/700690a7-1957-45e2-8744-ee9735b07319.crl

            X509v3 Authority Key Identifier:
                keyid:21:A9:9A:BD:45:2A:D2:F3:5C:22:2C:1F:F0:D9:98:B9:70:DA:DA:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/700690a7-1957-45e2-8744-ee9735b07319.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.209.24.0/24
                IPv6:
                  2602:fcb8::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:24:c0:fe:13:d2:99:31:01:8c:66:1f:31:7c:a0:2a:38:85:
         fc:0d:af:24:6c:f9:ae:1c:2d:64:71:5f:48:23:b2:1c:05:02:
         c5:66:aa:23:bd:43:19:17:3b:39:95:bb:6f:ea:77:6a:cf:42:
         29:42:36:09:26:ec:b2:d3:f1:20:6c:0c:af:30:f2:86:fc:3b:
         8e:b4:0c:95:a3:0d:10:80:4d:5e:20:09:a0:b4:fc:5a:36:53:
         77:c2:3e:4b:79:96:29:9b:39:24:90:00:32:9d:2b:5b:56:8d:
         ca:5c:37:a4:d1:18:ab:ed:85:45:ba:16:50:d0:38:ad:99:07:
         4d:3a:88:43:93:d5:4c:00:47:49:a5:2c:58:2e:3a:75:05:59:
         06:d1:c5:60:af:1f:fc:46:1b:54:11:8d:52:0d:95:49:b7:96:
         bb:f2:91:d9:20:24:3c:c2:07:a6:de:49:e6:a5:25:ca:3c:ed:
         03:8e:01:4b:25:53:0a:68:db:e7:9d:cb:91:02:af:c4:a9:a3:
         36:8c:13:5e:b1:d8:61:a9:21:23:50:2c:83:9d:3e:41:2b:5f:
         73:72:f6:58:a9:4f:4e:8e:71:14:6c:89:f7:37:d6:7a:53:b6:
         ea:2e:d4:88:f4:8c:cd:94:a5:78:f1:55:fa:58:ba:dc:1d:fb:
         44:1c:3f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:05:40 2026 by rpki-client