Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/970d9bca-40c5-40bc-9803-1ef81a602415/6e7a68c3-0547-3263-8434-d888d57e10cc.roa
File:                     6e7a68c3-0547-3263-8434-d888d57e10cc.roa (raw, json)
Hash identifier:          Pwc9rSeBblimyfeyInYF0NkdJkIFae9ko+xY8cwIlG4=
Subject key identifier:   40:8C:8C:D8:E9:1E:C4:FA:D1:7C:33:49:92:C6:85:D8:BB:51:EF:60
Certificate issuer:       /CN=970d9bca-40c5-40bc-9803-1ef81a602415
Certificate serial:       010D0C9F4328584E86F4FE249D0B78A636018300
Authority key identifier: 0D:2F:9B:99:1D:D7:B7:CA:98:0F:30:C4:8F:14:B2:C3:85:23:DD:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/970d9bca-40c5-40bc-9803-1ef81a602415.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/970d9bca-40c5-40bc-9803-1ef81a602415/6e7a68c3-0547-3263-8434-d888d57e10cc.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     21859
IP address blocks:        172.247.32.0/24 maxlen: 24
                          172.247.34.0/24 maxlen: 24
                          172.247.35.0/24 maxlen: 24
                          172.247.38.0/24 maxlen: 24
                          172.247.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/970d9bca-40c5-40bc-9803-1ef81a602415/970d9bca-40c5-40bc-9803-1ef81a602415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/970d9bca-40c5-40bc-9803-1ef81a602415/970d9bca-40c5-40bc-9803-1ef81a602415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/970d9bca-40c5-40bc-9803-1ef81a602415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:fe:24:9d:0b:78:a6:36:01:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970d9bca-40c5-40bc-9803-1ef81a602415
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=76ec9ba1-9d70-4d1e-8c77-e666041a0d4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:96:a2:ea:b1:1b:47:bb:c9:26:97:25:6a:c4:
                    ba:d1:0a:2e:20:c8:ef:75:af:d6:c0:1e:70:16:42:
                    88:95:e1:c8:87:1e:dd:59:36:d9:4a:d9:96:2f:7d:
                    d7:24:82:a5:3a:1a:06:16:81:f9:05:2a:01:ed:2d:
                    e9:e0:70:06:5b:01:ac:61:8f:f2:5e:15:fb:96:3d:
                    cd:86:71:21:20:c6:4f:91:c6:0a:67:89:3b:84:b9:
                    fd:7f:2f:e7:b3:83:8d:2d:5f:c8:09:73:0d:ed:e6:
                    bf:3a:31:5b:ac:05:7c:66:56:b1:7d:1b:be:f6:38:
                    d5:21:5a:c0:e6:d1:6e:ce:21:6e:55:f3:58:75:c3:
                    97:2b:8d:0c:16:4f:4b:85:88:0a:c0:7e:de:b7:fc:
                    76:8a:e0:eb:f6:49:a1:bf:bb:ec:8f:54:64:4c:1e:
                    0a:d2:60:e6:9d:d3:03:14:e2:cd:a2:7f:95:49:fd:
                    12:55:99:40:d7:f2:1c:4d:8a:58:51:7f:40:b3:b4:
                    6b:5f:ea:b8:66:4f:23:62:f5:9b:a7:93:97:ec:94:
                    d9:44:ab:c8:4e:51:89:30:61:56:0a:f2:d5:52:1d:
                    eb:ee:30:de:d4:3d:bc:05:6b:3c:f1:c6:aa:a5:9f:
                    61:51:84:7b:81:85:45:cc:8a:52:be:39:c4:df:19:
                    c1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:8C:8C:D8:E9:1E:C4:FA:D1:7C:33:49:92:C6:85:D8:BB:51:EF:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/970d9bca-40c5-40bc-9803-1ef81a602415/6e7a68c3-0547-3263-8434-d888d57e10cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/970d9bca-40c5-40bc-9803-1ef81a602415/970d9bca-40c5-40bc-9803-1ef81a602415.crl

            X509v3 Authority Key Identifier:
                keyid:0D:2F:9B:99:1D:D7:B7:CA:98:0F:30:C4:8F:14:B2:C3:85:23:DD:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/970d9bca-40c5-40bc-9803-1ef81a602415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.247.32.0/24
                  172.247.34.0/23
                  172.247.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:70:16:e4:52:01:2e:99:c0:90:54:50:b1:26:19:53:e1:93:
         3c:44:51:b3:14:d8:52:b6:ff:84:0b:31:9a:65:3c:93:ac:91:
         44:43:74:02:1b:a3:6f:a0:10:e1:33:d3:83:f3:96:8f:4d:85:
         5e:bd:9f:32:c8:33:aa:8e:6d:a9:a0:33:ae:1d:62:d6:6a:d6:
         01:e2:17:bf:0e:d3:ba:15:09:82:88:b4:2a:1c:6e:ac:63:31:
         a6:ea:30:99:25:ac:2d:fa:76:94:14:32:c5:4d:89:bf:84:79:
         46:c2:21:56:9e:d2:ec:a9:f9:f5:2d:69:c9:6d:39:c7:89:e8:
         fc:57:8c:dd:b7:8e:2e:99:21:1c:b8:cc:be:02:01:0b:39:02:
         ec:e0:84:e6:29:cc:1c:93:70:ab:c1:c0:a0:a5:8a:d9:0a:3b:
         fb:ae:d9:9a:78:b7:a6:a4:48:17:b2:b2:0c:1e:d0:be:6c:9b:
         7a:28:94:87:91:c3:07:12:d3:ab:2a:10:0e:a6:9a:30:31:b5:
         7c:7a:e3:93:2b:47:96:dc:02:ec:cd:ea:e1:59:8d:8b:9a:bb:
         b5:ba:19:52:74:e0:51:b7:a6:41:ac:63:cd:9d:31:83:57:71:
         d8:fa:ac:be:fa:15:06:b8:f0:f6:18:34:19:87:51:ae:0e:53:
         0c:a3:f9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:43:00 2026 by rpki-client