Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/3668a37b-a50d-3732-b77d-a313fa326510.roa
File:                     3668a37b-a50d-3732-b77d-a313fa326510.roa (raw, json)
Hash identifier:          22M1HPdL7yTqY/JrvUNv2PBfDTMsHVeE7MxdnBI2Ml0=
Subject key identifier:   51:CB:6F:83:78:D2:99:DC:52:91:C2:FC:36:41:93:5E:6E:4C:10:D1
Certificate issuer:       /CN=213e5365-5be3-42f4-a3d1-7f74bb44df13
Certificate serial:       010D0C9F4328584E78FF7C0649E4D8EBB6321500
Authority key identifier: 7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/3668a37b-a50d-3732-b77d-a313fa326510.roa
Signing time:             Sun 12 Jul 2026 09:00:11 +0000
ROA not before:           Sun 12 Jul 2026 09:00:11 +0000
ROA not after:            Sat 10 Oct 2026 09:00:11 +0000
asID:                     14618
IP address blocks:        208.70.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:78:ff:7c:06:49:e4:d8:eb:b6:32:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213e5365-5be3-42f4-a3d1-7f74bb44df13
        Validity
            Not Before: Jul 12 09:00:11 2026 GMT
            Not After : Oct 10 09:00:11 2026 GMT
        Subject: CN=369c2533-77ca-426d-aeb0-e75a11d9942b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:10:3c:7b:53:bd:f4:75:b3:6a:c4:b4:89:08:
                    3d:dd:68:10:42:52:d9:4a:6b:34:1d:6e:35:78:93:
                    e5:c8:1d:07:46:79:62:ab:69:d4:54:42:aa:d8:c1:
                    1b:e2:cc:36:df:d8:df:53:72:02:7b:cd:c2:00:2f:
                    58:b7:72:01:10:96:da:5a:48:41:92:d2:35:92:cc:
                    48:00:97:a7:32:04:66:a5:7b:33:f2:06:85:15:54:
                    0a:6a:45:63:a9:6c:e5:5e:71:42:95:21:af:67:04:
                    42:1d:91:24:d7:97:b7:e8:9a:ce:7d:ac:73:72:30:
                    9e:06:d8:c3:78:c8:91:fb:28:d6:6f:5f:ad:2d:1f:
                    80:56:6a:01:19:6e:c7:eb:aa:b9:06:4f:ac:c2:b7:
                    7c:f2:df:b5:78:7b:d7:0a:0f:be:0e:35:c4:b7:0d:
                    17:16:6f:7b:ed:9a:ec:fb:c2:4c:c5:c4:a9:1f:2c:
                    ee:ff:7a:05:e7:6a:2d:8d:5c:43:99:9e:11:17:c4:
                    7b:b3:b6:6b:d9:c0:a5:31:9a:57:ce:42:7a:5e:ad:
                    66:7c:11:90:3b:3b:42:5d:36:a5:a8:a2:0e:1c:88:
                    9e:c6:78:3c:14:33:43:5d:49:60:99:1e:24:ed:66:
                    23:70:f0:05:ad:d7:d2:8c:b6:47:f5:92:35:63:b7:
                    32:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:CB:6F:83:78:D2:99:DC:52:91:C2:FC:36:41:93:5E:6E:4C:10:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/3668a37b-a50d-3732-b77d-a313fa326510.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.crl

            X509v3 Authority Key Identifier:
                keyid:7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:23:cb:d3:6d:c3:65:cf:30:d7:c0:0b:5e:dd:e5:ec:59:23:
         5f:7e:5d:42:89:a3:26:2f:75:ba:fc:38:e1:a7:9b:20:bc:f0:
         1c:a6:0a:aa:86:54:fc:e2:97:31:0a:79:77:3a:e6:79:42:21:
         ef:87:67:d3:27:77:77:2d:15:d5:db:14:d8:1c:e3:8d:cd:d0:
         87:f7:80:40:a2:59:a8:57:2b:b4:a7:d1:26:da:4f:cf:48:25:
         6f:40:47:64:4c:e1:eb:6f:27:52:a6:5e:70:06:7b:5e:ed:a2:
         9d:b6:b6:78:d9:67:3c:50:d2:12:1a:64:f8:35:e2:9a:05:b1:
         75:9d:fa:25:4e:06:08:31:8c:5e:4c:55:ba:d9:c9:d2:b0:ac:
         6b:a8:25:77:97:a1:51:93:d2:d4:e1:b8:b6:58:27:18:36:5a:
         fd:4b:12:cf:58:bb:f4:56:27:58:e5:43:71:17:8a:8d:3b:f6:
         56:cd:3a:80:f4:21:98:48:9c:df:ba:ea:fa:65:2c:47:65:44:
         13:38:4f:3f:a9:92:63:63:d7:19:f0:7c:54:84:d2:0f:38:2a:
         42:86:0d:2b:a5:41:8f:3d:3f:3e:d2:c2:9d:36:06:50:b7:e2:
         8e:b5:08:c8:47:20:f0:0a:33:d0:5c:19:46:65:9d:4a:cf:94:
         74:76:de:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:38:51 2026 by rpki-client