Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/0d407db7-59d2-30ac-958d-48c3388d3b19.roa
File:                     0d407db7-59d2-30ac-958d-48c3388d3b19.roa (raw, json)
Hash identifier:          sek4WcPCRu3o9iG5QUXM3YaSWFA3XIB1LmeuLY5fgmU=
Subject key identifier:   89:31:A6:62:53:8F:45:AF:22:13:A8:D5:92:61:ED:E9:49:60:2D:52
Certificate issuer:       /CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6
Certificate serial:       010D0C9F4328584E90BA46B0327A52F130BF0600
Authority key identifier: 53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/0d407db7-59d2-30ac-958d-48c3388d3b19.roa
Signing time:             Mon 20 Jul 2026 21:00:11 +0000
ROA not before:           Mon 20 Jul 2026 21:00:11 +0000
ROA not after:            Sun 18 Oct 2026 21:00:11 +0000
asID:                     204321
IP address blocks:        170.149.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:ba:46:b0:32:7a:52:f1:30:bf:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6
        Validity
            Not Before: Jul 20 21:00:11 2026 GMT
            Not After : Oct 18 21:00:11 2026 GMT
        Subject: CN=12285d51-a117-4d14-b480-1b7fa9a196dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:00:ad:d9:77:7c:61:52:91:bc:b6:dd:5d:1e:
                    a3:0a:c8:93:94:41:04:33:3a:75:71:af:e7:99:3c:
                    47:76:ae:0b:9f:20:29:5b:82:22:b3:ef:23:34:83:
                    2b:44:95:00:9d:4b:f2:31:4e:27:d1:cc:4f:c2:eb:
                    cf:fd:f8:bb:b9:e6:73:c4:e7:43:7b:d7:f4:0c:31:
                    e7:fd:30:aa:d1:48:22:cd:25:f4:ba:b5:95:72:0b:
                    19:c5:66:a3:2e:2f:c5:b9:93:96:b7:4e:9f:a8:db:
                    47:d3:b7:a2:b2:11:5d:a6:d7:ee:ec:ec:e2:99:93:
                    46:f0:27:a5:bd:49:c4:7b:6e:4d:39:c0:62:f2:90:
                    1b:d0:09:e8:84:c9:19:3c:04:0c:c7:c9:b6:7c:f4:
                    27:88:99:87:b7:aa:48:bb:cf:fb:64:66:37:1f:66:
                    59:96:19:93:c0:d8:05:8f:bd:6a:44:c6:17:b7:f3:
                    2a:8a:9a:55:c2:c5:a8:3d:4f:d4:a7:2e:db:82:7b:
                    53:c7:91:28:f8:65:b4:6b:ce:af:02:6d:72:a5:cf:
                    b1:7a:23:d8:42:15:31:14:d3:19:04:53:ed:d1:b9:
                    04:98:9b:8d:4c:b1:b6:30:0b:a3:b2:2e:a3:25:37:
                    7a:ec:8b:7e:5a:a3:37:b7:1f:5b:4a:57:74:5b:a8:
                    da:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:31:A6:62:53:8F:45:AF:22:13:A8:D5:92:61:ED:E9:49:60:2D:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/0d407db7-59d2-30ac-958d-48c3388d3b19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl

            X509v3 Authority Key Identifier:
                keyid:53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.149.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:be:f1:c2:6a:23:cd:f9:a8:1f:1c:87:36:0e:f7:53:d9:02:
         ce:0c:f3:3d:0b:44:5d:cc:fa:32:a7:8e:49:8b:0a:cf:60:d3:
         36:77:81:4b:10:bc:07:99:ce:1c:2a:71:ef:05:28:23:93:3d:
         06:b5:38:d4:a4:92:c7:3f:53:9a:a7:e2:16:f0:e6:4e:24:bd:
         9f:8c:57:5c:94:27:15:64:f7:16:0f:5b:7d:a9:2e:5c:37:5e:
         f7:2c:d8:01:91:68:40:ab:13:78:e2:fe:cd:73:e0:1e:ff:0c:
         af:46:72:66:d3:02:86:d3:c5:94:df:a4:6f:4d:98:7a:7b:e3:
         81:e2:32:1a:53:6a:2d:3c:d1:ed:17:1e:e1:3c:aa:7d:77:a0:
         97:18:e4:71:84:72:b4:d0:0d:fa:44:fc:77:b6:92:8b:71:5b:
         93:08:02:c7:b2:c4:e8:a3:dc:b0:4b:ed:f4:3f:d9:f3:8d:9f:
         18:e8:17:90:e7:5f:31:02:39:c1:72:77:fb:c7:30:09:a5:8e:
         2b:69:66:78:a3:0e:8e:d4:8e:05:ba:7b:ae:2c:5e:6a:8f:5c:
         97:36:d0:1e:ba:2c:2a:2f:31:5c:a9:fc:d4:26:64:f6:d2:43:
         48:35:16:ed:29:77:73:39:2b:c3:b0:20:81:36:32:fb:6d:2c:
         44:52:64:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:05:37 2026 by rpki-client