Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/970d9bca-40c5-40bc-9803-1ef81a602415/6e7a68c3-0547-3263-8434-d888d57e10cc.roa
File:                     6e7a68c3-0547-3263-8434-d888d57e10cc.roa (raw, json)
Hash identifier:          V8/S7NIcaZhRmVBrfKDF2Mw6oHG3UOlnYbGeNEPH3fU=
Subject key identifier:   1E:F4:69:93:FD:0D:2E:10:1F:F8:23:CE:68:4A:F2:B5:7B:A6:DA:46
Certificate issuer:       /CN=970d9bca-40c5-40bc-9803-1ef81a602415
Certificate serial:       010D0C9F4328584DA6B0226BF425EDB55E5F6C60
Authority key identifier: 0D:2F:9B:99:1D:D7:B7:CA:98:0F:30:C4:8F:14:B2:C3:85:23:DD:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/970d9bca-40c5-40bc-9803-1ef81a602415.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/970d9bca-40c5-40bc-9803-1ef81a602415/6e7a68c3-0547-3263-8434-d888d57e10cc.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     21859
IP address blocks:        172.247.32.0/24 maxlen: 24
                          172.247.34.0/24 maxlen: 24
                          172.247.35.0/24 maxlen: 24
                          172.247.38.0/24 maxlen: 24
                          172.247.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/970d9bca-40c5-40bc-9803-1ef81a602415/970d9bca-40c5-40bc-9803-1ef81a602415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/970d9bca-40c5-40bc-9803-1ef81a602415/970d9bca-40c5-40bc-9803-1ef81a602415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/970d9bca-40c5-40bc-9803-1ef81a602415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:22:6b:f4:25:ed:b5:5e:5f:6c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970d9bca-40c5-40bc-9803-1ef81a602415
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=5cc0a4b1-c046-4636-aece-6bbb3b0b2003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:63:0e:08:f7:4c:a4:1f:a3:b9:56:b7:01:12:
                    98:9e:2a:cd:c6:19:a2:1a:7c:07:66:a0:53:dc:ba:
                    82:2d:2e:38:2e:4a:56:84:95:0d:54:ed:c2:ac:63:
                    80:83:6f:0a:2a:e6:c8:e5:b7:e8:54:0f:df:bf:61:
                    d3:08:55:6c:bb:9f:a9:f6:15:65:97:3f:aa:98:aa:
                    4a:d4:b2:11:1c:d2:ff:09:64:7a:76:53:15:d2:92:
                    97:54:c8:0d:0c:16:1b:ec:02:9a:5c:fa:34:e1:15:
                    8c:e3:a7:0f:90:b0:4e:b3:2e:25:96:c3:15:0e:c4:
                    37:c3:e1:41:c2:58:71:80:2b:83:90:10:40:04:cd:
                    8b:44:1a:00:98:c8:20:b9:bd:d4:3d:88:39:a8:e0:
                    31:d7:28:57:e7:db:2b:ad:e9:91:d6:a6:d4:f0:2b:
                    09:5d:35:f7:97:83:e9:15:56:00:6c:d6:06:92:31:
                    7a:b3:cc:71:cd:ab:95:ac:6e:60:59:34:68:f4:e9:
                    24:a3:d4:1a:2b:d1:c7:99:a4:b1:0f:aa:ee:b2:ed:
                    a4:53:40:96:5a:2b:f5:e1:06:d3:fc:29:1f:71:f6:
                    22:bc:a7:ca:6b:89:26:44:3b:0c:65:d5:12:10:03:
                    ed:00:6e:70:13:76:ff:7b:1b:cc:a6:b6:92:17:53:
                    66:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F4:69:93:FD:0D:2E:10:1F:F8:23:CE:68:4A:F2:B5:7B:A6:DA:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/970d9bca-40c5-40bc-9803-1ef81a602415/6e7a68c3-0547-3263-8434-d888d57e10cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/970d9bca-40c5-40bc-9803-1ef81a602415/970d9bca-40c5-40bc-9803-1ef81a602415.crl

            X509v3 Authority Key Identifier:
                keyid:0D:2F:9B:99:1D:D7:B7:CA:98:0F:30:C4:8F:14:B2:C3:85:23:DD:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/970d9bca-40c5-40bc-9803-1ef81a602415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.247.32.0/24
                  172.247.34.0/23
                  172.247.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:d4:6c:62:ab:77:51:79:72:ff:8e:0d:f6:82:5c:20:8a:53:
         fc:3c:6b:2e:44:a5:0b:24:42:f5:f3:c9:85:ae:97:8c:4d:c6:
         34:39:d0:94:1d:ee:7e:b7:8a:fe:23:8b:77:48:b6:a8:aa:00:
         ac:f0:d5:75:66:55:57:18:ba:d3:ed:11:95:c6:2a:29:bc:85:
         9e:79:55:62:1e:56:79:1b:33:d7:57:d4:03:1a:9b:07:e2:dd:
         ad:25:b2:5d:f1:ec:89:71:b3:49:13:c9:f2:aa:ac:48:0e:28:
         4b:20:73:ad:aa:64:0e:e7:ba:3e:89:e2:76:9d:88:15:fe:1a:
         1b:1e:13:46:a9:e5:cc:3e:20:7e:8b:f5:82:a7:ec:d6:77:ac:
         d1:40:22:0e:b0:20:03:0f:14:b4:63:14:69:f0:fc:36:2e:33:
         6c:df:cb:24:24:a0:d1:39:68:c3:86:ce:8f:99:d3:ad:24:a0:
         2f:5a:4f:a6:6d:21:a8:3e:ed:41:aa:c4:d1:b0:92:f7:fd:9e:
         f8:4c:c8:5d:b2:62:da:17:2f:6a:09:a0:0b:fe:d5:7f:c7:b7:
         5f:c5:a4:e7:c9:a8:aa:4c:d3:40:62:1a:e7:74:e5:3e:62:3c:
         54:42:a2:90:63:34:84:1d:d9:49:93:c0:a2:29:28:fb:c8:82:
         19:f9:85:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:30:38 2026 by rpki-client