Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/3a56f6c0-e8f8-375a-8d86-e4b62c4f63f1.roa
File:                     3a56f6c0-e8f8-375a-8d86-e4b62c4f63f1.roa (raw, json)
Hash identifier:          r+NjeswIDPvtBH57QoUAqubz6czqXlj5a8kpb2ZlaZE=
Subject key identifier:   CB:A0:3D:87:A9:CF:98:91:97:9B:1F:0A:15:37:FC:AF:1C:1D:5D:F9
Certificate issuer:       /CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
Certificate serial:       010D0C9F4328584E7634C89B77CDFB5521751780
Authority key identifier: 5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/3a56f6c0-e8f8-375a-8d86-e4b62c4f63f1.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     30698
IP address blocks:        209.221.240.0/24 maxlen: 24
                          209.221.241.0/24 maxlen: 24
                          209.221.242.0/24 maxlen: 24
                          209.221.243.0/24 maxlen: 24
                          209.221.244.0/24 maxlen: 24
                          209.221.245.0/24 maxlen: 24
                          209.221.246.0/24 maxlen: 24
                          209.221.247.0/24 maxlen: 24
                          209.221.248.0/24 maxlen: 24
                          209.221.249.0/24 maxlen: 24
                          209.221.250.0/24 maxlen: 24
                          209.221.251.0/24 maxlen: 24
                          209.221.252.0/24 maxlen: 24
                          209.221.253.0/24 maxlen: 24
                          216.213.48.0/24 maxlen: 24
                          216.213.49.0/24 maxlen: 24
                          216.213.50.0/24 maxlen: 24
                          216.213.51.0/24 maxlen: 24
                          216.213.56.0/24 maxlen: 24
                          216.213.57.0/24 maxlen: 24
                          216.213.58.0/24 maxlen: 24
                          216.213.59.0/24 maxlen: 24
                          216.213.60.0/24 maxlen: 24
                          216.213.61.0/24 maxlen: 24
                          216.213.62.0/24 maxlen: 24
                          216.213.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:c8:9b:77:cd:fb:55:21:75:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=250c6572-b002-43ad-b492-7d114500a5ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8b:cc:aa:2a:57:aa:51:27:4a:61:2a:99:cd:
                    67:cf:c2:df:3e:9e:74:78:9f:78:1f:8b:97:43:04:
                    09:ef:6d:3a:eb:99:7f:13:60:1a:d3:06:95:01:ba:
                    6d:97:ed:6d:aa:68:a3:74:16:de:a7:e0:6b:3e:ce:
                    5a:29:40:c9:c0:92:36:9b:8d:3b:36:66:54:5f:f0:
                    73:4a:6e:92:84:e5:55:99:a3:d9:10:87:5b:c6:93:
                    4d:0d:61:14:b9:d3:88:86:27:7c:db:40:f3:9a:43:
                    19:24:93:d5:e5:70:6a:16:86:bc:0b:c9:37:cc:52:
                    11:3a:55:53:14:6f:f4:00:25:4a:1f:b1:a6:73:81:
                    54:6d:16:2d:4d:47:28:d7:71:c8:4e:e0:7d:77:a7:
                    d1:b5:d4:dc:77:70:10:57:2f:88:1f:7a:d7:d7:85:
                    44:24:d6:50:95:eb:8b:2f:6c:27:d1:0b:68:11:3e:
                    c4:1c:25:85:26:d9:b8:51:7f:00:df:cb:ce:22:55:
                    83:a8:08:a6:6b:e4:d4:7e:01:e6:78:87:bb:80:10:
                    de:82:57:75:07:73:00:62:6f:5a:97:81:3e:88:1b:
                    14:4e:ab:37:0c:68:d4:92:f7:ed:1d:33:c1:73:35:
                    e5:47:94:9f:0c:4e:64:6f:e1:1c:01:dc:ac:67:9e:
                    f9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A0:3D:87:A9:CF:98:91:97:9B:1F:0A:15:37:FC:AF:1C:1D:5D:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/3a56f6c0-e8f8-375a-8d86-e4b62c4f63f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl

            X509v3 Authority Key Identifier:
                keyid:5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.221.240.0-209.221.253.255
                  216.213.48.0/22
                  216.213.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:6e:0c:65:1d:1b:a6:de:4c:b1:26:f8:ab:66:40:23:a3:a9:
         04:19:9f:b7:4f:7d:af:0e:e6:51:5d:fa:1c:56:f6:4f:eb:ab:
         6d:27:81:63:cf:ec:49:e8:a3:fa:43:0a:76:2b:de:53:17:85:
         8b:1d:02:4d:d2:11:84:d9:d8:bc:f0:63:dd:37:c4:ab:1f:fb:
         90:32:1c:10:8f:ea:b5:18:7b:14:87:c2:5e:66:6f:ff:70:18:
         b6:6d:e4:30:23:f7:0c:61:78:d0:9c:62:b7:af:30:b5:5a:42:
         e1:62:7e:5a:7c:b2:50:87:f6:6f:62:0a:9b:65:24:b8:67:7c:
         6c:63:f9:77:fa:2d:c2:cd:e9:cd:97:71:07:ad:d8:d5:92:bf:
         1e:3e:38:60:17:b1:da:2a:c7:68:3f:bd:92:83:63:5f:a8:cd:
         43:ab:64:a1:dc:3d:3e:46:26:5d:30:6b:a7:31:d5:35:f2:d9:
         97:01:8d:13:1a:9a:d8:19:61:c5:11:b5:65:65:84:6b:12:54:
         6c:df:74:43:13:2a:23:5b:a2:41:a7:06:65:22:26:8b:be:42:
         9e:4c:66:04:0d:1d:95:33:b5:60:f4:6d:4e:15:6a:24:dc:a0:
         bd:9a:17:b9:32:31:84:6d:9d:e5:3c:b0:5c:c2:79:62:f9:96:
         df:c0:a4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:47:28 2026 by rpki-client