Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/70ecbbd8-f88e-4306-9c9f-72852fe7f658/63941285-1412-37d0-ad11-d639a1ac8aa0.roa
File:                     63941285-1412-37d0-ad11-d639a1ac8aa0.roa (raw, json)
Hash identifier:          dLVwAIZE996UeNYzihFZL3Fw1+J3ZLgMUTIAmyOns28=
Subject key identifier:   31:41:44:C5:22:46:94:39:04:7F:22:4D:DF:A4:5C:DC:39:38:DB:5A
Certificate issuer:       /CN=70ecbbd8-f88e-4306-9c9f-72852fe7f658
Certificate serial:       010D0C9F4328584E987791C4716201BE14B9BA20
Authority key identifier: 18:8A:2E:D4:DE:05:C5:C4:47:14:BF:5C:AC:9E:D3:43:E5:15:21:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/70ecbbd8-f88e-4306-9c9f-72852fe7f658.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/70ecbbd8-f88e-4306-9c9f-72852fe7f658/63941285-1412-37d0-ad11-d639a1ac8aa0.roa
Signing time:             Thu 23 Jul 2026 15:32:18 +0000
ROA not before:           Thu 23 Jul 2026 15:32:18 +0000
ROA not after:            Wed 21 Oct 2026 15:32:18 +0000
asID:                     402573
IP address blocks:        209.151.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/70ecbbd8-f88e-4306-9c9f-72852fe7f658/70ecbbd8-f88e-4306-9c9f-72852fe7f658.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/70ecbbd8-f88e-4306-9c9f-72852fe7f658/70ecbbd8-f88e-4306-9c9f-72852fe7f658.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/70ecbbd8-f88e-4306-9c9f-72852fe7f658.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:98:77:91:c4:71:62:01:be:14:b9:ba:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70ecbbd8-f88e-4306-9c9f-72852fe7f658
        Validity
            Not Before: Jul 23 15:32:18 2026 GMT
            Not After : Oct 21 15:32:18 2026 GMT
        Subject: CN=b3f00b65-e29b-438c-bc55-f9b34fb1434d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ee:d0:67:90:a0:60:3a:f1:1c:c5:c4:cc:87:
                    00:85:32:51:5f:b3:8e:f7:f9:6e:da:4c:77:a4:b2:
                    82:3c:3b:4b:1c:c6:bf:02:04:71:10:89:3f:56:78:
                    ee:fe:05:49:8b:1c:0a:12:f7:6e:58:c8:7d:a7:0f:
                    6e:fb:b9:c0:56:bc:94:e9:e3:08:d3:36:81:3a:ef:
                    9a:b1:fa:f7:2b:bb:9a:19:16:b0:35:97:7d:1a:83:
                    76:35:5d:a0:a6:9b:97:d1:a5:11:dc:7c:bf:10:b7:
                    da:86:3f:35:54:80:08:85:51:93:9f:0a:10:16:13:
                    a9:eb:ad:23:91:fc:b4:02:9c:27:c2:d3:40:6a:ca:
                    bc:15:21:73:53:ff:5c:94:d0:fa:2f:73:8f:07:a6:
                    90:3e:ec:5f:fc:27:7a:76:a8:12:87:04:9a:38:11:
                    63:0b:7a:59:6f:fc:d1:28:33:37:23:2b:8a:a7:d5:
                    e8:a9:70:8d:9c:15:19:85:01:10:0e:2e:60:5b:d3:
                    fb:05:02:3d:21:b8:69:dc:d3:c7:f0:6d:18:25:d0:
                    bc:26:c9:92:3b:0a:1e:1f:90:82:8a:fc:08:94:ca:
                    f2:7c:b4:46:34:c3:58:a0:6f:d2:a8:12:30:7e:8c:
                    56:5f:0a:1b:8e:6b:39:2d:9e:32:63:02:87:17:3a:
                    5b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:41:44:C5:22:46:94:39:04:7F:22:4D:DF:A4:5C:DC:39:38:DB:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/70ecbbd8-f88e-4306-9c9f-72852fe7f658/63941285-1412-37d0-ad11-d639a1ac8aa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/70ecbbd8-f88e-4306-9c9f-72852fe7f658/70ecbbd8-f88e-4306-9c9f-72852fe7f658.crl

            X509v3 Authority Key Identifier:
                keyid:18:8A:2E:D4:DE:05:C5:C4:47:14:BF:5C:AC:9E:D3:43:E5:15:21:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/70ecbbd8-f88e-4306-9c9f-72852fe7f658.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.151.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:ba:cb:3c:1e:be:cc:b4:08:a4:9f:1c:b3:cd:f8:f8:e1:59:
         7e:b5:38:f7:0d:9d:88:04:8c:1c:5a:7a:52:7b:e5:59:e3:03:
         33:17:36:aa:3c:09:cb:a8:0f:59:a1:38:50:c2:6f:d5:80:49:
         a6:f8:0f:1a:93:96:73:ac:2c:7c:6b:17:d0:2a:90:cf:6a:ad:
         01:66:6f:70:bc:8c:2f:95:0b:0d:6e:2f:e8:de:25:e8:d1:a6:
         f3:7d:fd:a6:15:b2:65:c1:75:00:ec:63:a6:5b:f8:cb:8a:f1:
         34:f4:70:d1:e1:0f:13:9f:8f:6e:1c:8f:8d:47:f1:4d:ab:6a:
         07:3b:ee:1d:30:7e:4a:db:51:42:e3:3a:f3:3e:44:38:51:eb:
         f1:df:a9:d7:f5:9f:be:0e:b1:5f:0b:18:f7:02:22:1d:31:37:
         8f:0e:4d:6d:6f:63:3c:11:29:8f:93:8d:20:2d:2f:0f:bc:5c:
         cf:38:5f:2e:e1:e9:35:7c:aa:a8:16:66:7e:e0:a5:25:aa:2e:
         2c:1c:05:b9:97:e0:a9:e0:02:11:71:04:4e:02:b4:a7:e6:8e:
         13:d6:4f:53:b1:32:91:cd:d3:72:c9:c0:d9:a2:1c:a1:e4:58:
         7b:86:78:9b:19:82:00:86:bc:89:92:b7:a8:e5:7a:97:a3:d7:
         bc:77:e4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:44:37 2026 by rpki-client