Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/d7ab9a51-7207-3919-9940-6a30f9e7b38b.roa
File:                     d7ab9a51-7207-3919-9940-6a30f9e7b38b.roa (raw, json)
Hash identifier:          zvxQatzxIgqKfJ5nG9TQzGwbcNXGhwk/i4h1FCFk5VU=
Subject key identifier:   C6:BB:36:4E:8F:76:03:94:BD:8E:A2:32:8E:90:70:A1:C5:AF:2F:90
Certificate issuer:       /CN=109078e4-3ad5-4242-9f3e-058161c97a9f
Certificate serial:       010D0C9F4328584E66DA1747FED0E99084AEE780
Authority key identifier: D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/d7ab9a51-7207-3919-9940-6a30f9e7b38b.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     2572
IP address blocks:        204.184.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:17:47:fe:d0:e9:90:84:ae:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=109078e4-3ad5-4242-9f3e-058161c97a9f
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=242c23db-d171-4ac6-b883-31230f18b101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:71:e9:1b:5c:45:77:cf:fd:6c:d2:7e:a2:8e:
                    c4:a9:41:a6:f5:a9:e3:28:5b:67:78:8c:77:00:4f:
                    51:3c:b9:3c:da:10:46:54:58:83:ed:b9:74:f2:05:
                    52:c7:1a:10:d2:4e:e2:a9:03:77:bf:a5:ae:eb:5f:
                    27:b4:1c:59:af:e2:91:49:f0:b0:51:85:97:ca:80:
                    b8:dc:9e:87:0a:1c:67:d1:37:dd:61:73:f2:e2:8a:
                    02:9c:36:28:5e:57:cc:29:a8:53:e0:94:3b:5c:89:
                    28:95:bf:62:68:7f:f4:d4:2f:0a:44:e9:ff:73:99:
                    cb:6a:6b:c5:c6:75:39:37:74:a4:3b:f7:8d:52:bf:
                    95:a4:1b:b4:e1:b8:f9:22:8e:17:7f:6a:84:ea:d2:
                    05:94:16:66:44:0e:ee:c4:5a:25:60:71:a1:9c:91:
                    f9:26:62:cd:e5:e1:2b:50:fc:e6:0a:bb:78:d8:5e:
                    c3:f6:76:4f:67:df:79:c1:85:5c:73:50:a2:aa:48:
                    f9:8e:55:12:80:17:fd:ec:c5:93:c6:01:e0:ac:98:
                    1f:7f:86:af:e2:91:72:11:1e:2e:f5:10:59:dd:19:
                    52:79:42:2f:50:29:09:94:31:8f:1d:6c:d6:1e:48:
                    23:59:46:e0:e2:f6:c3:f0:d8:5f:38:f7:4d:33:9b:
                    e9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:BB:36:4E:8F:76:03:94:BD:8E:A2:32:8E:90:70:A1:C5:AF:2F:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/d7ab9a51-7207-3919-9940-6a30f9e7b38b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f/109078e4-3ad5-4242-9f3e-058161c97a9f.crl

            X509v3 Authority Key Identifier:
                keyid:D7:1E:FE:19:B8:C7:1F:13:78:AB:D3:D1:E0:A8:8F:35:7A:56:C6:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/109078e4-3ad5-4242-9f3e-058161c97a9f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.184.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:2b:b6:cb:c3:6b:a3:0b:98:18:84:2d:d0:2e:3d:83:d7:63:
         b0:85:94:4c:db:4d:9c:5b:96:c3:cb:87:2b:d9:83:10:b8:e2:
         07:76:83:22:eb:c9:0c:1d:ee:45:76:6b:a2:70:41:b8:14:13:
         b9:e8:76:d4:24:19:2e:bf:a8:3f:31:42:67:3b:7e:2b:11:bf:
         fd:a9:85:cc:77:af:9b:00:2e:20:57:6b:92:2d:e4:8c:19:54:
         5b:3e:46:77:95:ce:a3:fb:b5:5f:ea:95:07:a8:f3:bc:ad:d0:
         11:f2:6a:ac:a2:ef:dd:24:82:09:a0:bd:bf:2f:11:ab:05:90:
         82:a4:29:32:cb:4e:7a:6d:0f:35:bc:6c:fc:99:7b:b5:7d:5b:
         c0:50:5a:31:cd:8e:5d:9a:cf:64:cb:90:b5:63:71:56:3a:10:
         0e:ec:cf:87:b7:23:61:79:79:ef:db:7d:aa:22:2c:cb:b9:04:
         ac:b4:e5:b0:b9:dd:e1:c9:cd:ae:d8:07:d5:07:fd:a4:98:80:
         cc:ee:8a:c7:fd:67:50:b0:5f:07:b8:42:17:68:09:ae:a3:90:
         2b:49:75:08:ee:37:cf:a0:6d:91:37:76:b3:b2:ee:45:fd:76:
         6f:e7:0e:f6:43:3a:a0:fa:02:85:48:39:60:ba:40:0a:b4:d0:
         98:c3:8a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:49:41 2026 by rpki-client