Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/d00cc37e-552d-3224-b706-528c3bb75b85.roa
File:                     d00cc37e-552d-3224-b706-528c3bb75b85.roa (raw, json)
Hash identifier:          7Me799vrsxLhTgWVEu2qHO6dKCX6SbAYzViNoLCxs5Y=
Subject key identifier:   CD:94:11:C5:93:40:34:76:19:B1:F4:22:DC:AB:F2:C0:C5:C8:E8:5C
Certificate issuer:       /CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6
Certificate serial:       010D0C9F4328584E90BA51DF8A73D325F430B3A0
Authority key identifier: 53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/d00cc37e-552d-3224-b706-528c3bb75b85.roa
Signing time:             Mon 20 Jul 2026 21:00:11 +0000
ROA not before:           Mon 20 Jul 2026 21:00:11 +0000
ROA not after:            Sun 18 Oct 2026 21:00:11 +0000
asID:                     204322
IP address blocks:        170.149.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:ba:51:df:8a:73:d3:25:f4:30:b3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6
        Validity
            Not Before: Jul 20 21:00:11 2026 GMT
            Not After : Oct 18 21:00:11 2026 GMT
        Subject: CN=078ce255-e65a-4994-8e25-a0267779b0e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e4:01:e5:ac:9d:be:8b:59:f3:62:2c:ab:cd:
                    bb:70:26:3b:17:54:1d:be:96:13:d2:d5:93:84:46:
                    81:0c:ab:8a:15:bb:4d:fb:33:38:17:93:54:6c:cb:
                    45:52:fb:93:47:b4:88:d5:64:e0:93:bf:a2:17:7d:
                    b5:b2:08:c7:25:fb:53:4c:93:f3:f6:91:27:4e:eb:
                    e0:dc:e7:de:af:6e:d4:40:50:04:b7:8d:88:40:6e:
                    28:f5:e9:07:f4:f3:f0:37:69:8e:00:89:ac:7e:47:
                    c2:aa:34:30:4c:09:5d:0f:fe:c7:e7:6f:63:68:c5:
                    fd:a6:b4:68:5a:4d:c2:55:6f:f1:37:a3:3d:80:bd:
                    88:39:1f:bc:42:25:cb:59:49:a4:54:35:92:b3:d0:
                    f5:27:17:c0:ac:97:78:20:12:19:07:a1:aa:ed:b7:
                    c7:33:a5:19:f9:10:63:f3:10:c7:43:9a:8c:f8:62:
                    a9:2a:b5:ee:a6:2d:aa:d5:53:71:90:9f:fd:62:28:
                    23:12:f1:69:f3:bd:f9:88:98:d7:8d:b3:54:5e:25:
                    ea:fd:e5:20:5e:16:f1:de:2d:dd:d5:a2:da:ba:56:
                    46:f6:33:b3:bd:82:a1:a1:90:e2:96:78:57:40:6d:
                    f9:a4:fa:b8:60:95:19:af:5b:4d:87:4c:03:c8:4e:
                    cd:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:94:11:C5:93:40:34:76:19:B1:F4:22:DC:AB:F2:C0:C5:C8:E8:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/d00cc37e-552d-3224-b706-528c3bb75b85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl

            X509v3 Authority Key Identifier:
                keyid:53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.149.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:c0:34:b7:1d:25:1d:83:dd:a1:be:ee:12:68:9e:84:8c:95:
         57:c5:f2:ec:3b:c4:91:20:10:34:5d:ca:05:83:e0:56:26:47:
         e3:91:e6:53:1e:ea:f7:e8:32:99:84:18:b3:3f:39:ee:46:a1:
         2c:07:c8:16:dc:c0:82:3a:ae:da:7b:9b:cc:63:ad:2b:bc:74:
         5d:7d:2c:da:01:c1:11:55:5e:f2:d8:e8:0b:16:64:68:77:b7:
         3f:29:81:48:9d:77:6b:34:5a:0e:8b:b7:30:35:66:a6:fb:c2:
         6c:55:c8:d2:b0:46:be:23:f0:0a:59:8b:7f:5d:e6:46:0f:24:
         09:43:5c:a7:c6:46:62:33:3a:3a:e8:88:19:1b:10:f9:63:89:
         d0:22:b7:c1:99:7c:d1:c9:b9:5a:3f:ce:8b:cb:89:50:35:24:
         2e:e3:20:c9:5a:c5:96:a9:0d:98:05:e1:6e:ad:d1:4d:e2:0c:
         c1:01:fe:72:ac:cc:4a:80:01:2b:1d:93:81:a9:b3:13:0a:d8:
         a9:79:96:1b:3c:45:b8:2a:07:36:ce:c8:de:74:b8:c4:d9:13:
         fa:45:d3:3b:a0:64:26:8c:0b:06:04:4f:53:6a:d3:eb:79:93:
         62:d3:92:12:a2:43:de:95:7d:88:8a:f0:76:2e:10:c4:4c:7f:
         af:2f:fe:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:01:05 2026 by rpki-client