Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/d0a0488c-ee0c-3167-bf89-5dd53a8dd62b.roa
File:                     d0a0488c-ee0c-3167-bf89-5dd53a8dd62b.roa (raw, json)
Hash identifier:          FVhNxyu71qHr16IfsYLy6C8iTKFqz2FRLEV2w45ItS8=
Subject key identifier:   2E:F2:FD:47:92:F7:6F:04:A9:E5:0D:E3:D2:F6:4B:84:B3:76:BC:09
Certificate issuer:       /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial:       010D0C9F4328584E6C6F67269FD379EB37F55F00
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/d0a0488c-ee0c-3167-bf89-5dd53a8dd62b.roa
Signing time:             Tue 07 Jul 2026 21:00:13 +0000
ROA not before:           Tue 07 Jul 2026 21:00:13 +0000
ROA not after:            Mon 05 Oct 2026 21:00:13 +0000
asID:                     55133
IP address blocks:        205.213.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6c:6f:67:26:9f:d3:79:eb:37:f5:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
        Validity
            Not Before: Jul  7 21:00:13 2026 GMT
            Not After : Oct  5 21:00:13 2026 GMT
        Subject: CN=6254027c-7959-410b-a9c4-51b3076f4233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:86:bb:6a:0e:28:a3:45:9e:d2:74:5b:e8:fe:
                    42:4a:6b:b1:3e:c2:d0:b2:11:57:14:b7:29:10:83:
                    3b:4d:d3:1e:ad:7e:e4:c5:87:af:a2:13:cb:ba:07:
                    a5:c8:28:a9:57:63:70:e1:79:84:84:51:f7:03:29:
                    0c:fc:e8:98:17:e2:a5:0b:d5:e5:0c:61:ec:4d:b3:
                    d2:d5:78:e3:0e:ea:6a:d6:d3:91:ac:ed:2e:dd:14:
                    70:37:d6:0a:67:b0:8e:ae:84:46:4a:51:7c:c1:0c:
                    59:41:2a:c5:3b:eb:e9:f7:2d:01:d9:ff:e8:5c:ec:
                    2d:c9:7f:44:b6:d1:45:f7:58:8d:ab:1a:ca:58:d5:
                    88:ac:de:7a:1b:3f:ba:21:ea:9c:71:8e:a9:cc:3c:
                    8d:d2:78:07:80:0c:ea:e2:18:57:5d:f7:8f:99:db:
                    67:95:a9:1b:3c:61:cb:78:09:0c:d5:e8:3d:4e:bf:
                    79:48:3d:3f:25:80:b4:b7:a7:74:2c:af:70:30:bc:
                    67:6d:30:ba:3a:c0:86:85:d7:27:47:ab:48:8b:62:
                    39:12:99:89:a5:77:24:c3:b6:19:ab:98:5c:c9:8c:
                    18:99:b7:c2:98:de:a6:47:78:23:4d:61:b1:27:cf:
                    cb:64:5b:48:73:0e:96:77:c2:93:26:8e:37:33:9a:
                    88:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F2:FD:47:92:F7:6F:04:A9:E5:0D:E3:D2:F6:4B:84:B3:76:BC:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/d0a0488c-ee0c-3167-bf89-5dd53a8dd62b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl

            X509v3 Authority Key Identifier:
                keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.213.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:38:60:73:26:e3:e5:12:73:55:01:17:0c:15:9c:4b:68:15:
         2e:74:63:38:53:42:ed:6b:cd:fb:f8:6a:97:7a:62:27:5c:e8:
         be:c2:57:49:17:09:5c:fd:1d:86:c0:67:aa:a7:6c:d8:2b:70:
         97:b9:a5:b0:0a:24:cc:f5:55:a7:5f:48:f3:db:1b:87:0e:ce:
         e8:26:ff:82:f3:d6:18:67:9d:12:cf:f4:66:fb:1f:99:b1:e2:
         21:f4:c7:83:66:0b:75:46:f9:d8:51:b6:f9:5c:1e:81:56:f2:
         37:47:0a:d7:40:84:af:93:31:a3:09:73:14:cb:c6:ad:80:84:
         6a:ac:be:58:67:a8:32:9a:5e:76:de:4a:a7:33:c2:7e:18:ea:
         88:4c:c7:1c:1b:04:a1:7f:e5:66:8e:94:99:b8:17:59:f3:16:
         5f:9f:05:73:b6:c3:0e:2f:d9:f5:32:25:d9:ac:38:05:45:08:
         5e:9d:a4:43:ad:03:a3:19:5e:fd:f0:d5:87:ed:90:bd:3a:2c:
         98:f4:02:e1:9b:bc:57:ec:7d:41:93:43:e0:5a:3b:1f:c7:11:
         32:75:15:2c:ff:3c:2b:bd:03:32:9b:54:34:4d:87:b9:06:43:
         68:5b:87:28:f5:aa:2f:f9:34:b3:39:aa:67:bf:a4:a4:f7:3d:
         64:ae:91:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:33:58 2026 by rpki-client