Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/c1207768-4617-394a-a105-b46a19f6feee.roa
File:                     c1207768-4617-394a-a105-b46a19f6feee.roa (raw, json)
Hash identifier:          62WwEve6tQJFSzovg9GFFRTs0WDCW39qYcbXr2ZsTbE=
Subject key identifier:   C8:76:C1:1A:86:6A:C0:43:9D:95:87:B0:A3:D4:F6:12:FE:1F:C0:4E
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F4328584E6C6F7423D7085E6682466BC0
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/c1207768-4617-394a-a105-b46a19f6feee.roa
Signing time:             Tue 07 Jul 2026 21:00:13 +0000
ROA not before:           Tue 07 Jul 2026 21:00:13 +0000
ROA not after:            Mon 05 Oct 2026 21:00:13 +0000
asID:                     14618
IP address blocks:        209.182.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6c:6f:74:23:d7:08:5e:66:82:46:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: Jul  7 21:00:13 2026 GMT
            Not After : Oct  5 21:00:13 2026 GMT
        Subject: CN=b4aec2fe-96b2-491b-88ae-dc694d104c47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:01:ff:7b:af:d9:96:e1:f3:72:17:0e:6e:83:
                    53:0c:1a:a6:a8:49:35:78:b0:a8:3c:d7:e5:32:ed:
                    e9:58:4a:12:ae:f9:5c:f7:61:01:3e:9d:34:db:ef:
                    37:b2:b1:d7:cc:f9:87:aa:dc:7f:ae:8e:04:d6:4d:
                    7f:3e:59:cf:8a:a2:6d:53:02:1a:e3:28:32:d1:42:
                    55:52:7a:10:df:b8:5d:f3:09:1b:d6:b6:86:31:23:
                    6c:d3:7a:67:76:4d:3e:39:e6:67:37:76:e8:d2:e8:
                    44:a9:ba:20:b5:7c:35:79:19:81:b7:29:bd:c4:c2:
                    4b:94:a9:2b:17:fe:16:c8:d3:ff:ed:48:90:01:75:
                    cd:75:15:f2:1d:21:67:32:1a:fc:16:4e:5b:57:22:
                    79:71:11:a6:c6:4f:ef:dd:aa:39:15:39:54:05:5b:
                    34:14:ea:4e:7b:5a:0b:dc:f3:db:2c:2c:64:52:46:
                    13:1b:1e:1b:e0:03:58:97:2c:13:1e:e1:9b:1e:b0:
                    86:6a:a4:50:89:b7:27:22:11:ee:52:44:98:b3:fb:
                    31:f9:4c:0f:8b:43:05:5c:f1:a4:f3:aa:6d:c2:98:
                    40:70:02:71:6c:26:f5:98:c5:0c:48:bc:2d:98:03:
                    18:58:00:bb:4c:bc:93:0a:42:5e:da:b0:6e:77:0b:
                    a0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:76:C1:1A:86:6A:C0:43:9D:95:87:B0:A3:D4:F6:12:FE:1F:C0:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/c1207768-4617-394a-a105-b46a19f6feee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.182.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:b3:6b:5e:16:9a:34:1d:ee:96:bf:05:24:87:11:75:bf:49:
         75:d8:00:9d:22:c9:fd:00:9d:cf:78:11:83:62:1c:a7:0a:ba:
         cc:d3:40:06:1e:79:1b:70:b2:7a:b6:48:0a:d5:d2:4c:03:b4:
         80:0f:02:24:59:94:38:84:10:da:cf:e3:28:03:21:03:a4:4a:
         28:02:00:b6:ff:a6:a7:1e:56:01:5d:ea:f9:7b:9d:69:b2:b4:
         7e:07:a5:8e:a2:88:8c:ee:60:59:1d:b2:68:02:f2:7a:68:01:
         51:d7:e1:97:65:a3:12:58:33:be:3f:9d:06:cf:48:fe:8f:42:
         3d:95:73:47:38:8d:cd:0b:76:0d:65:07:7d:99:36:2c:62:8c:
         cd:a2:24:4e:bf:e4:4b:9d:bd:6d:26:5d:be:90:d6:a8:b2:bb:
         70:96:a9:d3:57:50:b8:11:cd:29:f8:80:43:c8:06:a9:50:16:
         c5:49:a2:e2:1c:ff:3b:d9:d3:57:5a:8e:19:04:85:0b:8c:f5:
         c8:da:19:f7:82:09:3c:98:d9:db:d8:e2:37:44:20:92:4c:c7:
         6d:f8:c2:7d:83:d9:4c:3e:c7:3b:7f:a1:c3:3b:f5:5b:ea:e0:
         2d:24:cd:02:95:a6:5d:bf:7b:26:da:d8:25:97:df:0b:f4:3b:
         da:c6:3e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:54:13 2026 by rpki-client