Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/e503e508-baa8-3d83-b84a-96e21fb9bd66.roa
File:                     e503e508-baa8-3d83-b84a-96e21fb9bd66.roa (raw, json)
Hash identifier:          W0gJhQwgN+B7mumZTehVLWV3qZOVMmqy6l2kl7Lh4E0=
Subject key identifier:   82:21:85:0F:56:D6:C9:6B:17:A4:12:8F:E9:1B:84:6F:28:01:F3:61
Certificate issuer:       /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial:       010D0C9F4328584E6C6F6740129D263829AE7EC0
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/e503e508-baa8-3d83-b84a-96e21fb9bd66.roa
Signing time:             Tue 07 Jul 2026 21:00:13 +0000
ROA not before:           Tue 07 Jul 2026 21:00:13 +0000
ROA not after:            Mon 05 Oct 2026 21:00:13 +0000
asID:                     53599
IP address blocks:        205.213.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6c:6f:67:40:12:9d:26:38:29:ae:7e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
        Validity
            Not Before: Jul  7 21:00:13 2026 GMT
            Not After : Oct  5 21:00:13 2026 GMT
        Subject: CN=8b023a11-a2d9-41c1-bf16-8f0912307015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c3:f7:ca:99:01:4a:d1:a7:32:d4:69:87:d9:
                    f3:f5:41:f2:bd:ab:69:9c:e6:9f:0c:78:eb:0f:38:
                    91:26:65:7c:3a:97:c6:9b:c9:20:6a:8a:d1:5d:cb:
                    68:49:fb:a2:f4:a8:2c:02:ea:9d:f9:e5:59:40:50:
                    c5:57:1f:58:12:ab:90:ba:4e:0b:9f:6b:4e:9b:ec:
                    1b:d9:0c:cf:05:98:5a:fa:10:40:20:03:90:49:6d:
                    ac:f1:f8:c9:c0:d1:85:54:75:24:a4:ee:4c:25:78:
                    2e:83:4c:5c:8f:0a:1e:df:1f:31:4b:15:12:67:8d:
                    90:5c:50:81:a8:e1:48:ab:c9:82:39:f0:d8:d0:b3:
                    1c:d6:2a:f4:61:2f:8d:47:bd:29:d6:2e:00:9c:e3:
                    8b:37:91:81:72:21:4b:5b:74:db:8b:7a:20:c2:b4:
                    6c:59:cc:d4:21:ae:6a:76:2a:d2:1c:a0:fc:79:ed:
                    a9:88:c9:cf:3e:62:41:a1:e7:61:c3:47:95:98:1a:
                    2c:29:a7:cc:a6:e8:24:5d:4b:4b:3b:76:af:cf:87:
                    c6:4e:05:a9:d8:53:88:3d:20:24:e4:96:0e:90:00:
                    a2:94:dc:39:58:f0:23:48:41:fa:d6:66:2f:3b:55:
                    5f:e6:e5:a8:dd:2c:36:c9:9c:1c:b7:09:7d:77:dd:
                    79:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:21:85:0F:56:D6:C9:6B:17:A4:12:8F:E9:1B:84:6F:28:01:F3:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/e503e508-baa8-3d83-b84a-96e21fb9bd66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl

            X509v3 Authority Key Identifier:
                keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.213.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:77:66:37:3d:aa:cf:f9:c9:9a:91:90:35:e6:0c:8c:79:2f:
         aa:0f:2b:eb:47:00:5e:2e:65:03:0f:74:37:af:46:bc:41:d0:
         d0:fa:a3:81:4d:b0:ae:0b:46:04:c4:a1:6e:3f:7d:bf:bc:99:
         a9:eb:4e:c4:e7:f7:a6:da:fb:52:d0:46:2b:91:e6:cd:87:29:
         40:5d:66:74:f8:a9:b3:42:f9:f1:15:a1:ee:fc:eb:a2:d5:bd:
         f7:32:e8:a0:e9:fe:12:9b:f6:33:91:8a:e1:4c:ef:58:0b:45:
         b9:4b:21:b9:5d:1f:d6:d8:47:7b:f7:b8:3b:81:26:ac:08:27:
         10:ec:54:bf:b1:26:90:cd:4f:77:59:18:4a:f3:06:44:4e:bc:
         77:79:91:b6:fc:2c:84:8c:a0:07:44:72:4e:93:ea:21:f7:ac:
         da:f4:8c:18:81:4b:ec:1f:2f:15:c5:74:d5:b6:2e:cf:6d:68:
         df:f7:4f:db:e8:a4:e8:72:ff:c4:5b:e9:1d:9e:20:1f:11:0b:
         72:ee:27:b0:3d:95:60:7b:07:e1:53:6d:db:1e:cf:43:7e:fb:
         9c:2f:42:08:85:23:d3:cd:b2:30:21:fb:ff:18:23:55:41:5a:
         b9:6f:4a:b2:83:4b:7c:6b:8c:e9:c7:2e:90:3f:69:70:d3:f1:
         42:b1:e1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:37:39 2026 by rpki-client