Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/757c630c-1704-3fb8-b8aa-a6f536633ed2.roa
File:                     757c630c-1704-3fb8-b8aa-a6f536633ed2.roa (raw, json)
Hash identifier:          HBWWxGIPd73kIAsqESfKM1lnBhDbQ3I7qMqd663yxfE=
Subject key identifier:   9B:E8:C9:04:D0:7A:3E:8E:DE:8E:88:4B:9F:B7:93:99:99:C3:97:5C
Certificate issuer:       /CN=21e0730d-65d0-4a7c-9717-adf401d3e5d6
Certificate serial:       010D0C9F4328584D95F007E0F6B8FE78268B3A80
Authority key identifier: 0A:37:C0:4C:F6:BF:1E:4F:FC:8B:AD:57:5A:16:FE:97:5D:C0:20:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/757c630c-1704-3fb8-b8aa-a6f536633ed2.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     8075
IP address blocks:        209.51.100.0/24 maxlen: 24
                          209.51.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/21e0730d-65d0-4a7c-9717-adf401d3e5d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/21e0730d-65d0-4a7c-9717-adf401d3e5d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:f0:07:e0:f6:b8:fe:78:26:8b:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21e0730d-65d0-4a7c-9717-adf401d3e5d6
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=bc7dc562-d804-45e3-9f23-6813239a455d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:39:26:09:71:f4:20:50:d9:4b:ee:2e:b4:b1:
                    1d:7d:af:38:39:ca:cf:be:02:a9:88:ec:b8:da:b4:
                    e7:47:83:d5:a0:50:e6:c8:04:fc:86:13:b2:2e:f2:
                    66:8a:7d:c8:53:d6:03:59:f9:1b:c5:b9:1c:af:a2:
                    c2:95:12:0d:5e:ba:7f:12:e9:ef:8f:f1:4e:71:2c:
                    c6:81:01:21:42:70:67:b7:3a:9c:3a:c0:67:e4:52:
                    f8:38:7a:2b:e1:be:2e:22:cd:62:e5:14:90:ed:32:
                    69:ca:86:a0:9e:00:7e:7a:93:f4:5d:80:61:cb:ff:
                    71:ce:b1:07:dd:ec:55:e1:93:98:52:f9:49:f7:50:
                    81:d1:1e:2b:b8:42:49:ad:ba:65:74:2a:fb:e2:83:
                    bc:9e:52:dc:a8:df:bc:d3:42:ba:ef:9b:63:8d:8d:
                    dd:cf:fe:a4:5d:5e:e9:9c:bc:9b:3f:4b:ab:69:ce:
                    17:05:05:d8:1b:8b:13:bd:95:76:62:45:fc:69:ce:
                    4a:a9:92:24:0f:77:64:93:d8:2f:b7:58:1f:91:72:
                    49:8b:5f:fa:c1:0e:26:41:7b:ac:e0:58:a1:fe:08:
                    d0:d7:0b:42:f8:a3:2f:97:2f:15:b1:28:e3:ff:86:
                    f0:40:7b:b8:97:c8:c2:c6:af:91:16:0d:26:67:2f:
                    15:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E8:C9:04:D0:7A:3E:8E:DE:8E:88:4B:9F:B7:93:99:99:C3:97:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/757c630c-1704-3fb8-b8aa-a6f536633ed2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6/21e0730d-65d0-4a7c-9717-adf401d3e5d6.crl

            X509v3 Authority Key Identifier:
                keyid:0A:37:C0:4C:F6:BF:1E:4F:FC:8B:AD:57:5A:16:FE:97:5D:C0:20:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21e0730d-65d0-4a7c-9717-adf401d3e5d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.51.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:7b:34:28:91:3b:f1:86:02:6f:df:0e:8d:a5:fd:7f:1b:74:
         3d:95:4f:2b:56:42:cd:93:7c:df:b4:3d:37:32:f9:8a:11:3e:
         3f:a4:78:0a:5d:e8:aa:92:39:9b:d4:7e:cb:a9:f7:e6:0e:90:
         8a:f1:0d:4c:0f:b2:16:67:b3:a9:c9:d1:92:41:d3:70:a1:50:
         06:21:83:16:59:7e:eb:2e:06:d6:91:96:49:08:c9:ec:c3:07:
         90:a9:df:e0:4b:d2:2d:94:e8:82:9b:3a:9f:ad:7a:32:e9:35:
         cd:da:4d:c7:84:74:9a:a4:79:85:ef:3d:b1:b7:de:a9:64:3c:
         a3:40:c2:bd:f8:3d:89:f9:ee:28:ef:06:84:39:bd:10:c5:03:
         32:a1:1b:fd:bc:61:63:9d:8d:23:cd:cf:01:b7:fd:5c:c3:cc:
         71:24:52:f7:9f:eb:f9:96:20:cb:54:ff:ee:cb:5c:ff:13:1a:
         ab:c1:4e:1a:79:85:94:3b:38:02:48:7b:be:f2:5a:a9:0c:6f:
         38:e7:b2:03:81:ac:dd:97:fd:bf:6d:15:98:56:b6:dc:20:9f:
         b1:da:5f:3a:42:57:80:3c:47:05:3b:f8:71:9a:76:49:12:7d:
         9d:bf:78:b4:6d:eb:81:16:f4:e7:32:a9:a1:fe:03:3e:65:25:
         d3:89:16:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:17:33 2026 by rpki-client