Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/2ffa2be5-bf0e-3632-ac11-cbf141961a73.roa
File:                     2ffa2be5-bf0e-3632-ac11-cbf141961a73.roa (raw, json)
Hash identifier:          x6WviOSGDvodaPj1my+CYlib8fxFnRsWsEOIMeF93fw=
Subject key identifier:   1F:5A:EC:77:67:49:EC:22:8A:45:1E:9D:00:0A:63:C3:F6:57:03:CA
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584E50849B4695B3CBDF87886E80
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/2ffa2be5-bf0e-3632-ac11-cbf141961a73.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     271
IP address blocks:        207.23.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:9b:46:95:b3:cb:df:87:88:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=749cd333-dea7-4f61-b0ce-be0b5766202c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:43:36:ec:31:51:a1:c1:2f:34:92:4f:55:ce:
                    35:86:1a:45:ce:16:d5:33:aa:ce:a6:62:e9:ea:f3:
                    cc:1e:af:e1:dc:18:e7:33:2a:99:3e:c1:26:26:fe:
                    25:04:bd:c2:e1:2f:01:86:dc:60:52:fc:5d:b3:25:
                    5c:0e:f2:48:98:3c:42:ea:12:8f:af:82:a6:9e:d5:
                    5d:ea:b4:85:c1:ce:d8:22:40:97:17:db:ab:28:5a:
                    2d:8e:08:70:64:b3:d8:1e:4d:42:b0:4d:4a:d5:29:
                    49:f4:ba:a6:46:a8:6a:9c:a3:d9:39:43:b3:c5:3c:
                    85:e0:7b:b5:8a:f9:78:31:34:82:a4:8c:42:17:33:
                    b6:4b:b5:ec:66:c2:b1:eb:82:91:05:29:c2:72:a8:
                    c3:f0:da:02:61:55:34:f0:24:7b:38:53:1e:c0:9f:
                    75:72:14:bc:5c:70:68:c7:d5:21:6c:9b:5d:4e:8b:
                    b1:c7:12:37:97:de:52:29:45:a7:d1:e3:4b:d7:9f:
                    67:b7:b4:a0:58:1c:22:07:30:ff:27:b0:49:b9:e9:
                    75:4b:07:54:28:cc:bd:39:c1:d8:91:47:29:b3:54:
                    29:bc:0e:f0:c6:b7:f8:fe:01:b9:9b:50:8e:44:5d:
                    06:24:67:8a:71:a1:41:7c:b9:44:90:c8:ea:46:b8:
                    fb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:5A:EC:77:67:49:EC:22:8A:45:1E:9D:00:0A:63:C3:F6:57:03:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/2ffa2be5-bf0e-3632-ac11-cbf141961a73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.23.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:70:4e:b4:d6:00:2e:46:7e:b9:bd:33:2f:58:bc:81:18:cb:
         e2:a6:f7:96:61:ee:7f:69:5c:40:09:73:99:7b:29:f5:17:f1:
         bf:b3:0a:d4:e3:b9:34:ad:e9:18:72:94:a2:e5:7c:8d:66:3b:
         51:c3:73:6d:1d:6e:65:42:6d:ca:1c:21:4c:10:2f:f6:1a:8a:
         0e:2a:9c:68:56:bb:77:f9:13:34:82:dc:12:62:82:96:60:b8:
         ae:73:f6:3c:97:28:2c:e4:9f:ab:ac:5b:61:67:e2:a6:b2:30:
         69:26:ab:de:ca:25:e7:63:09:e9:93:bd:1e:c6:03:d6:ac:02:
         11:c9:90:7d:d6:85:65:55:90:9b:d3:21:9e:00:ad:2f:63:ba:
         99:a5:1c:a8:03:b3:00:dc:3a:eb:99:6e:78:6b:77:57:bf:9b:
         bc:c8:7f:7c:9d:63:d1:78:06:d2:dc:03:63:96:fb:fc:dc:bb:
         c8:39:6e:74:c4:f0:a7:8a:11:51:c7:d9:ef:00:df:60:20:71:
         03:d1:d8:f4:e2:24:fd:f1:2b:94:3c:36:88:9d:31:3a:3e:a3:
         ff:01:39:d4:36:00:a4:c4:56:48:ab:a6:b6:cd:6d:91:91:86:
         3c:ea:28:f5:c6:f3:4b:bf:16:67:3a:d8:99:6a:f1:ef:8f:5c:
         9c:f3:6f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:28:27 2026 by rpki-client