Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/fd7f83c1-f827-3297-a189-95647b2df8c5.roa
File:                     fd7f83c1-f827-3297-a189-95647b2df8c5.roa (raw, json)
Hash identifier:          PyIC2At5RhySAJehuwYWLaEeTzQENDk3TLzO+zVEmRQ=
Subject key identifier:   A6:63:E4:6B:53:15:32:63:5B:6D:C7:7C:44:05:E2:BC:93:35:EC:5E
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F4328584E6F3A49A2347EA73657F89700
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/fd7f83c1-f827-3297-a189-95647b2df8c5.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     213035
IP address blocks:        209.182.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:49:a2:34:7e:a7:36:57:f8:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=d0f51c04-2bd8-4dff-9270-256ec4a4c94f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ee:c6:4e:88:4b:33:c5:b6:97:e9:ea:f1:37:
                    f6:d0:58:5b:88:6d:54:f4:38:e1:23:e4:86:e1:07:
                    a1:67:5d:d4:69:f8:1e:ba:fb:f3:99:f4:fd:b1:27:
                    5b:13:28:06:af:6f:c0:10:04:3b:72:83:e3:d0:fc:
                    c7:1d:72:a6:5a:0d:9d:e8:02:c2:93:82:a0:76:00:
                    d8:1a:68:5c:9f:5a:51:8d:14:fe:a5:d2:14:d9:ce:
                    6f:2d:20:46:d2:af:c0:d1:6d:13:1f:0b:52:cf:4b:
                    91:ce:bc:08:d3:dc:f4:33:b4:b9:4c:fb:a3:cf:fe:
                    8d:8c:62:92:4c:98:8d:8a:37:3b:22:a4:3c:9e:13:
                    87:9b:46:6d:4d:fa:d0:3b:cb:c5:11:f6:51:0b:51:
                    67:01:bd:20:25:99:0b:f3:ea:09:f5:a4:85:14:5b:
                    f5:00:f2:13:04:f5:43:41:d0:53:cf:c4:1f:41:43:
                    04:84:a4:44:d6:ff:f0:48:cb:f2:2c:5b:82:29:48:
                    dc:37:f4:17:df:ec:c4:c9:48:c7:91:73:56:32:4b:
                    1c:13:bf:a7:72:ed:90:6d:da:1e:83:da:e2:e5:c3:
                    d3:15:b3:ca:97:eb:7f:f6:4f:a4:12:85:b9:f0:06:
                    d2:2f:3a:30:32:d7:22:82:03:7c:cb:09:17:44:31:
                    07:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:63:E4:6B:53:15:32:63:5B:6D:C7:7C:44:05:E2:BC:93:35:EC:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/fd7f83c1-f827-3297-a189-95647b2df8c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.182.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:d6:f3:69:97:8d:78:b7:2e:a7:c6:97:ad:fd:6e:93:dd:01:
         72:44:24:f2:d6:2a:8b:77:6b:d4:22:6e:8b:9b:bd:a0:dd:bb:
         bb:03:3d:6f:f1:3d:f7:57:a9:bf:dd:fb:38:46:24:9d:c3:5c:
         a3:20:0a:3b:78:00:c0:ce:88:3e:d2:e8:62:4b:c3:1b:c1:4b:
         06:5e:92:37:d4:67:28:c1:94:cb:f1:3f:de:bc:f1:13:35:8b:
         71:fb:b6:89:2a:99:f2:61:e5:98:fd:1d:ab:83:45:34:46:3f:
         a9:0e:f4:2e:dc:b1:96:c2:63:36:66:d2:ab:ff:91:b0:0c:a1:
         1d:9e:4a:46:e0:d1:e9:5d:ff:77:78:13:78:ca:44:25:dd:8e:
         e1:ae:0d:f5:cb:31:bb:6b:d2:e3:9e:2e:4d:6f:37:0d:db:8f:
         50:a8:0a:aa:d5:6f:26:0e:17:4b:66:61:07:42:86:9a:82:8e:
         50:24:43:fa:26:1f:03:ae:b0:6d:30:df:10:fe:07:f0:5e:cf:
         48:ed:bd:55:ff:97:4a:c1:c2:41:84:b2:3f:63:11:1a:b3:85:
         4f:2e:e2:df:8d:e2:2f:36:42:8e:33:bd:61:ce:c1:b5:c2:57:
         5c:e7:3d:5c:78:f6:2b:35:a5:6e:bc:8c:b6:54:3d:91:05:51:
         d2:68:b9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:37:48 2026 by rpki-client