Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4f268d85-829a-35fe-8ec0-cb85d47c12ad.roa
File:                     4f268d85-829a-35fe-8ec0-cb85d47c12ad.roa (raw, json)
Hash identifier:          W02jXsyKyrlPbawymWZ5CzKCPjXB9r7681Juw6Fn98o=
Subject key identifier:   06:C3:0B:9F:AB:7E:5A:41:E3:45:48:78:09:4F:E2:7E:66:9C:32:51
Certificate issuer:       /CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
Certificate serial:       010D0C9F4328584E6DD4C463FD2A927408960080
Authority key identifier: 45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4f268d85-829a-35fe-8ec0-cb85d47c12ad.roa
Signing time:             Wed 08 Jul 2026 09:00:12 +0000
ROA not before:           Wed 08 Jul 2026 09:00:12 +0000
ROA not after:            Tue 06 Oct 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        204.57.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6d:d4:c4:63:fd:2a:92:74:08:96:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
        Validity
            Not Before: Jul  8 09:00:12 2026 GMT
            Not After : Oct  6 09:00:12 2026 GMT
        Subject: CN=7f3ddb04-2766-4e20-8e10-93386bca9d3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:58:1e:ea:b7:a4:76:8e:c6:e8:24:d5:9a:e3:
                    09:bf:b2:60:86:fc:58:54:35:9d:b5:0d:b8:b0:c0:
                    07:a8:1f:f4:31:c5:76:c0:2d:72:3d:e2:4f:d0:28:
                    0a:32:ca:05:b7:29:a8:28:74:34:72:fb:ab:0a:53:
                    51:02:0f:4d:9d:3b:30:50:9b:2f:68:7b:b4:e5:b2:
                    1c:3c:2e:00:26:e3:96:67:0d:7a:2d:fc:28:69:51:
                    db:4d:69:d6:3e:0f:71:f6:a1:ae:34:4c:10:34:72:
                    a0:fc:48:69:f4:a3:2f:04:8d:b0:de:42:29:08:5d:
                    c9:34:99:3a:ac:aa:d1:52:29:3c:27:c4:05:38:7e:
                    e2:1e:cf:5a:49:f8:de:9a:85:7e:53:2a:45:74:6e:
                    a9:1d:45:12:a6:57:9a:5c:5a:ca:7b:eb:bd:2d:c1:
                    04:92:99:be:0c:b6:70:f3:e3:80:b2:f4:70:b5:9e:
                    d8:b2:c7:4a:ac:8f:43:93:bd:16:c3:2e:56:d2:cf:
                    c0:be:27:62:b9:d2:af:45:0f:1a:df:56:11:47:0c:
                    3e:df:95:8f:e5:4c:f4:36:db:bf:7b:a1:b2:8d:9a:
                    43:79:08:b4:93:f6:6d:60:34:f1:ba:09:54:22:e2:
                    d0:e0:f3:1a:bd:7d:c0:a2:69:3b:12:f1:df:06:a6:
                    01:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C3:0B:9F:AB:7E:5A:41:E3:45:48:78:09:4F:E2:7E:66:9C:32:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4f268d85-829a-35fe-8ec0-cb85d47c12ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl

            X509v3 Authority Key Identifier:
                keyid:45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.57.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:0a:75:a8:29:69:63:d7:2f:e2:e1:82:b4:96:ea:a7:14:08:
         1d:99:e2:22:c6:48:bc:d1:53:29:f4:aa:86:11:c9:fa:d0:0b:
         10:54:e7:bb:61:85:29:7a:79:29:cb:fc:4e:86:d3:4c:aa:71:
         73:78:91:54:e8:ef:24:43:63:46:1e:bd:5d:a3:0e:c5:41:a2:
         18:86:56:be:92:3c:71:8a:ae:15:dd:fd:9f:e3:37:8a:a4:a1:
         3f:2b:ae:e3:5a:dc:97:2d:31:a9:79:7f:f4:f3:2c:41:79:c6:
         d8:dc:09:80:d3:3c:28:a3:e4:a9:55:9f:01:88:45:b4:f9:61:
         77:91:8c:a5:0d:a7:c7:f0:5f:96:fc:d1:c4:d5:c9:ea:21:47:
         ac:a4:d6:55:b4:0d:17:06:8c:f8:83:7b:e8:20:de:09:e3:8c:
         8f:a2:9a:ea:59:70:1c:db:50:4f:6a:41:61:9f:32:6c:e9:eb:
         99:06:11:dd:cf:5b:e2:ba:f0:6c:b5:8b:fc:fc:9a:a9:78:6b:
         fc:a5:84:37:9d:5c:6c:10:0e:bb:93:f3:7a:e5:4c:2b:5c:70:
         f8:17:8d:4d:ff:5d:75:c4:f2:57:21:66:7d:cf:3a:15:3b:e2:
         61:a2:b3:2c:55:3e:9e:71:a8:62:4e:74:a8:81:74:c2:db:d6:
         57:03:a3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:27:50 2026 by rpki-client