Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/2223bf1b-4e49-3a32-be8e-f2210cdd7887.roa
File:                     2223bf1b-4e49-3a32-be8e-f2210cdd7887.roa (raw, json)
Hash identifier:          1Ttd7y6UwBLoLQnjSXQIOIW/WpuwumWToCFxqt/Tg4Q=
Subject key identifier:   22:3E:D1:FC:30:8B:4D:FF:01:FD:8A:32:F5:0E:4B:E1:8C:4F:42:F7
Certificate issuer:       /CN=6fb18968-7aa5-41e5-96b6-c45c25a566e8
Certificate serial:       010D0C9F4328584DCC606A2B9414605A9ECFA200
Authority key identifier: C6:9F:AC:EA:70:7D:E0:51:AB:C5:1B:82:39:4D:0E:73:3A:A2:A1:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/2223bf1b-4e49-3a32-be8e-f2210cdd7887.roa
Signing time:             Mon 11 May 2026 13:00:31 +0000
ROA not before:           Mon 11 May 2026 13:00:31 +0000
ROA not after:            Sun 09 Aug 2026 13:00:31 +0000
asID:                     11260
IP address blocks:        24.207.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6fb18968-7aa5-41e5-96b6-c45c25a566e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6fb18968-7aa5-41e5-96b6-c45c25a566e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cc:60:6a:2b:94:14:60:5a:9e:cf:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fb18968-7aa5-41e5-96b6-c45c25a566e8
        Validity
            Not Before: May 11 13:00:31 2026 GMT
            Not After : Aug  9 13:00:31 2026 GMT
        Subject: CN=d8359471-7416-49d7-880a-25ef7144f699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8c:6f:e4:00:2f:66:76:f4:3c:7d:c2:e4:e5:
                    1d:5d:84:6d:cb:22:6e:43:44:a8:35:d9:51:c5:88:
                    3c:b3:86:e7:3f:35:0a:b2:9c:04:0c:a2:88:f0:77:
                    80:d3:bf:7b:27:3c:78:d3:cd:12:d8:4b:13:c0:12:
                    d4:ee:95:89:6f:a8:24:d9:1e:8a:ab:72:c3:a7:f3:
                    cd:58:9e:48:6d:1f:18:2d:c7:d9:60:c3:de:4c:a4:
                    28:f6:52:94:ac:d9:5d:a0:13:8c:8e:2a:78:21:ce:
                    1e:ae:48:fc:f6:c3:bf:cb:7a:20:62:b3:a5:d2:46:
                    1a:86:3d:5e:af:e8:0c:f0:14:a7:fd:34:f4:1c:07:
                    93:fe:66:94:37:1d:8c:07:ec:75:d3:fc:28:98:9f:
                    c5:e6:54:40:23:35:ac:1c:9f:a2:31:9e:ce:4b:cd:
                    5c:f9:74:35:94:6a:d5:c4:82:5c:b7:eb:07:6e:3c:
                    11:33:12:24:80:47:a0:b1:87:58:31:b0:88:2f:76:
                    06:97:ff:6c:cc:48:2c:03:df:2a:27:6e:6d:7c:34:
                    f1:01:6e:58:be:c4:2b:0b:0a:41:1e:b7:dd:2f:9e:
                    d7:b0:42:7d:d6:ad:e0:ba:21:c5:56:fa:1f:29:4d:
                    37:15:53:91:74:a6:13:d6:2d:23:0f:e9:1a:7d:1d:
                    6c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:3E:D1:FC:30:8B:4D:FF:01:FD:8A:32:F5:0E:4B:E1:8C:4F:42:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/2223bf1b-4e49-3a32-be8e-f2210cdd7887.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6fb18968-7aa5-41e5-96b6-c45c25a566e8.crl

            X509v3 Authority Key Identifier:
                keyid:C6:9F:AC:EA:70:7D:E0:51:AB:C5:1B:82:39:4D:0E:73:3A:A2:A1:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.207.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:77:4f:c6:19:f3:a3:0b:f4:73:49:5a:cd:86:50:b2:4e:ca:
         12:18:7a:85:48:3b:02:c0:af:14:b1:e5:09:10:8e:41:8a:f4:
         db:a3:33:04:e5:fd:64:e3:60:49:29:86:be:7d:ff:bb:64:06:
         38:e1:19:21:c3:a1:fb:0d:3d:49:e9:bd:df:f5:a8:20:1c:95:
         a9:b8:78:ec:d7:e7:a3:73:df:ae:e4:e6:8e:45:32:cf:0d:68:
         61:ff:87:81:34:17:d5:41:0e:6e:14:fe:c3:ce:4f:20:ae:f9:
         e5:13:4a:ad:74:99:b4:d2:93:c9:c4:2e:62:8f:48:72:2b:de:
         33:b8:5a:34:52:56:97:eb:8b:1f:e9:f3:75:3d:6a:6d:15:f5:
         59:74:99:0d:11:98:2d:c4:bf:8c:ae:a4:d0:67:44:75:50:99:
         68:e6:82:64:3a:41:27:96:98:66:df:de:c0:e7:67:07:95:5e:
         af:f4:74:48:68:de:9d:b9:e9:ca:aa:77:74:cb:c0:60:44:13:
         f5:f8:c6:ef:10:f0:e7:e1:9a:b3:65:df:6b:40:9f:2a:f3:e7:
         34:7a:23:c8:95:ec:5b:c8:78:0d:6d:62:d3:13:92:78:33:96:
         7d:7f:31:48:bb:d9:92:c3:f4:c0:08:6d:33:a6:c8:65:71:de:
         b6:c6:09:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:08:14 2026 by rpki-client