Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c3f72f9b-07a0-3728-acc1-0d3d22f3d524.roa
File:                     c3f72f9b-07a0-3728-acc1-0d3d22f3d524.roa (raw, json)
Hash identifier:          5vTHWVVH36JuynuRiYRChRkyPLIMwvmqyanvPPsLtC4=
Subject key identifier:   E7:9A:38:3A:06:AC:B2:32:2D:34:37:F9:B9:6E:5A:9E:64:C4:A6:39
Certificate issuer:       /CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba
Certificate serial:       010D0C9F4328584E561A0F0D14DA926309D3B700
Authority key identifier: FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c3f72f9b-07a0-3728-acc1-0d3d22f3d524.roa
Signing time:             Mon 29 Jun 2026 21:00:12 +0000
ROA not before:           Mon 29 Jun 2026 21:00:12 +0000
ROA not after:            Sun 27 Sep 2026 21:00:12 +0000
asID:                     26229
IP address blocks:        162.138.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:1a:0f:0d:14:da:92:63:09:d3:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba
        Validity
            Not Before: Jun 29 21:00:12 2026 GMT
            Not After : Sep 27 21:00:12 2026 GMT
        Subject: CN=ee54d65f-eb57-4cc9-8732-eb999fd501c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:dc:aa:22:3d:d8:d8:76:2a:2b:c9:93:c9:24:
                    15:bc:8b:ae:ff:76:56:6d:b8:1e:37:42:14:c9:b3:
                    4c:62:34:55:bd:97:fd:fd:57:9f:e1:fb:d4:5f:b6:
                    84:c8:33:4f:61:14:72:e0:c7:75:02:3b:1d:e0:4e:
                    b8:9c:82:18:45:a6:79:85:71:18:38:3e:d3:ed:6d:
                    6b:1d:8b:b9:49:6e:5f:95:6f:8f:d5:89:a7:7f:d5:
                    f6:d2:92:85:ec:a3:84:10:5d:4b:86:fd:d1:6c:fd:
                    2a:5e:60:d1:ec:ee:90:ba:98:e3:d9:d0:63:31:eb:
                    60:c5:82:cf:ab:d2:4d:9e:58:71:6a:af:ff:c9:fc:
                    f6:29:6e:f3:de:15:f9:ed:db:4e:50:6a:3f:f0:15:
                    b9:46:cd:9f:2e:9f:39:ab:08:8f:37:d0:3a:d4:e3:
                    7c:43:b0:bc:ad:d4:0b:22:b6:86:e6:14:70:42:9b:
                    01:58:c0:03:37:89:a4:00:d2:9c:6d:5a:14:a4:e3:
                    cf:a4:10:8c:c7:46:3b:b0:9b:d0:07:ea:3b:c2:f8:
                    36:52:a5:87:34:35:ef:4a:e3:77:3d:15:53:28:da:
                    e5:fb:c0:29:c6:a1:4d:ff:7a:48:b7:ab:4b:8e:cb:
                    dc:7e:f0:b0:b5:d5:ed:b9:95:e9:06:27:32:bf:c9:
                    1b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:9A:38:3A:06:AC:B2:32:2D:34:37:F9:B9:6E:5A:9E:64:C4:A6:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c3f72f9b-07a0-3728-acc1-0d3d22f3d524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl

            X509v3 Authority Key Identifier:
                keyid:FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.138.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:05:fd:be:fd:d2:38:a3:63:91:8b:b6:bc:f1:82:e7:1d:22:
         2c:2b:01:c1:84:18:3e:c4:30:0f:d4:49:67:36:36:7e:be:d8:
         df:bc:10:cb:af:ef:17:8b:c4:aa:88:d5:e9:94:12:6d:c6:0b:
         e7:03:b2:41:f8:c1:fb:16:f2:f9:30:a7:b1:1f:3b:bc:48:1b:
         9b:28:9c:25:42:6f:95:22:84:41:25:a9:8f:ca:23:8a:d7:3d:
         b9:b0:08:ee:a5:d3:9e:90:07:73:dd:1f:e0:8d:23:7d:81:2c:
         52:a0:1d:e0:77:ee:15:d3:b1:2f:af:54:1a:fa:52:b1:0f:5b:
         54:a5:d7:85:e2:a5:a5:d1:9c:8c:e3:cb:24:ac:86:56:9c:14:
         c8:1c:a3:21:85:8b:8f:f6:b7:99:50:20:2f:5e:0d:9f:60:78:
         2e:fc:8f:ec:18:fc:5e:ad:96:6b:64:98:3e:c7:c0:d1:43:6f:
         8d:9f:82:85:84:f9:3e:6d:b6:28:0d:bd:90:30:10:b4:50:d3:
         3d:23:d9:51:a0:67:bf:2d:f7:ae:02:2b:e8:c8:c3:58:37:45:
         02:45:3e:73:38:fe:9f:eb:09:78:e9:6d:cc:57:f5:7a:70:3b:
         7a:7c:90:7a:af:5e:5c:7b:6e:b4:c6:8f:f9:90:2a:b8:2f:04:
         38:bf:a9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:44:57 2026 by rpki-client