Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/0e24e9e9-f333-3d52-ab5e-4f7aa000d147.roa
File:                     0e24e9e9-f333-3d52-ab5e-4f7aa000d147.roa (raw, json)
Hash identifier:          e7gTislMHykJjvBkBRQj3G+Ynez1j9Wz6cpH6tyBZHw=
Subject key identifier:   E1:EB:CE:EA:E9:35:A9:2D:32:BE:D1:5F:27:B9:FE:A8:67:65:92:75
Certificate issuer:       /CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d
Certificate serial:       010D0C9F4328584E9005267030E455AA3AF6E080
Authority key identifier: 6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/0e24e9e9-f333-3d52-ab5e-4f7aa000d147.roa
Signing time:             Mon 20 Jul 2026 14:55:17 +0000
ROA not before:           Mon 20 Jul 2026 14:55:17 +0000
ROA not after:            Sun 18 Oct 2026 14:55:17 +0000
asID:                     13335
IP address blocks:        207.241.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:05:26:70:30:e4:55:aa:3a:f6:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d
        Validity
            Not Before: Jul 20 14:55:17 2026 GMT
            Not After : Oct 18 14:55:17 2026 GMT
        Subject: CN=24965d93-118b-4ec7-b49f-15c473707c65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bc:2c:2b:7b:ff:f9:5b:5d:f5:7e:4f:aa:8f:
                    dd:f0:2a:7d:3e:43:78:27:7d:ed:04:54:80:0a:e6:
                    ec:90:a2:77:b1:9d:b8:57:73:cb:0a:7a:e2:27:ab:
                    a3:32:71:d1:38:d7:e3:64:ad:99:81:b8:a3:39:28:
                    21:45:73:8c:2b:c1:6f:a9:e8:42:31:eb:08:87:31:
                    2e:bc:da:61:fc:c4:d1:f9:cf:9c:05:46:8f:ef:d9:
                    64:64:ba:78:2d:7a:60:8d:05:f5:34:4e:cd:84:3f:
                    bf:c5:11:e0:97:75:bc:97:4f:d7:46:ed:61:90:ad:
                    ac:ef:2a:78:7b:4e:b7:20:fa:8c:0e:31:66:58:62:
                    95:cf:3a:33:63:d3:ce:62:4b:bc:7a:61:42:3f:6a:
                    c7:e8:61:fa:9e:03:7b:76:ca:97:2a:10:8c:be:4b:
                    f4:cf:21:f9:66:7a:d7:75:45:4d:0c:28:db:35:27:
                    51:1a:9f:d8:fc:be:ab:64:54:3d:9d:77:4a:11:40:
                    e9:fc:69:5d:0d:ce:fa:1e:53:83:e3:7b:28:ee:73:
                    c7:fc:98:7e:a5:33:fe:71:85:a8:10:ca:fc:5d:8b:
                    08:75:56:91:4b:2b:3e:96:19:23:40:8a:90:cf:58:
                    39:4e:eb:d7:48:4a:79:21:d8:63:4b:fc:b4:3c:8a:
                    e8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:EB:CE:EA:E9:35:A9:2D:32:BE:D1:5F:27:B9:FE:A8:67:65:92:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/0e24e9e9-f333-3d52-ab5e-4f7aa000d147.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl

            X509v3 Authority Key Identifier:
                keyid:6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.241.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:3d:ad:df:07:d3:11:45:06:3b:d6:92:3d:44:34:4e:63:40:
         f0:fc:21:45:5e:2e:99:03:1c:81:67:98:a0:66:c1:ea:48:13:
         cb:f8:78:d8:a7:9e:a8:6c:93:a0:4e:3f:72:1b:9f:e3:c3:a7:
         b7:26:80:ca:c0:12:bb:98:98:48:5b:54:e1:b2:bd:3f:58:67:
         ff:19:07:1a:14:1e:ab:00:71:86:e6:4c:80:c8:19:41:ea:cb:
         19:18:26:d8:dd:38:6b:e3:0e:6a:b9:9a:ae:f4:7f:32:74:1a:
         f9:f4:ef:7b:ca:49:24:7e:ea:d8:e2:18:d1:8c:36:7e:eb:07:
         ec:af:4c:3c:f0:81:6f:18:68:05:72:fc:16:04:a3:73:92:de:
         5e:ce:ea:52:f8:d5:fc:fa:27:95:ea:c1:a4:39:55:e1:a1:90:
         46:16:1a:28:c4:b3:d1:ea:dd:d2:47:fe:74:08:33:27:2d:96:
         c9:fb:a8:3e:67:27:b1:bb:8c:e5:c4:a8:c1:30:c9:29:a3:d5:
         c6:4f:4f:1c:33:87:45:79:35:6a:45:2d:de:ca:70:a8:ed:d1:
         ce:bd:11:8b:ee:7d:f4:55:24:e3:17:fb:cf:fb:b3:39:ee:23:
         43:33:c8:a3:a8:a0:1d:78:ef:25:b0:ae:0b:1c:85:16:80:87:
         35:ef:07:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:56:14 2026 by rpki-client