Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c8232a78-952c-374c-b397-532e57c4f5a8.roa
File:                     c8232a78-952c-374c-b397-532e57c4f5a8.roa (raw, json)
Hash identifier:          euAHWJ2HHEi8VK5SX+KFFffFBUO7OFF2QlvduzvZQyM=
Subject key identifier:   86:49:17:50:A8:01:40:B7:21:E4:0B:11:B1:1F:0A:1A:B7:4D:A7:46
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584E614578CAFE0C64E0C4B79300
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c8232a78-952c-374c-b397-532e57c4f5a8.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     273200
IP address blocks:        209.61.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:45:78:ca:fe:0c:64:e0:c4:b7:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=5cf6505a-a635-4411-b206-27b35ecc6684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ee:f8:74:be:fd:85:27:2b:59:3f:fb:c5:db:
                    a3:74:05:f5:40:57:62:39:59:d0:2d:16:c7:96:48:
                    44:f7:24:35:2b:1e:4d:ae:2f:b3:ef:6e:f0:15:93:
                    43:fb:81:2f:90:bd:95:35:0a:e6:9f:b0:f5:f6:23:
                    46:1f:27:bb:c8:32:c3:af:21:af:60:14:76:45:cf:
                    36:3c:c8:31:aa:91:2c:c9:cd:13:f7:96:2d:7d:42:
                    b6:cc:ae:dd:b7:76:4b:68:79:ee:f2:19:be:f2:e0:
                    af:3c:c6:52:0e:8e:0e:89:12:c9:39:79:04:58:9f:
                    fa:46:d0:c9:1c:c1:e4:9f:42:5d:fc:98:38:7b:ee:
                    15:2d:96:6a:97:ce:33:90:a7:c9:db:ea:38:4f:60:
                    d5:de:3c:ed:6a:88:99:d2:04:b1:e4:cc:51:1b:74:
                    d3:22:ab:df:c9:a5:ef:97:28:1e:13:10:a7:c4:be:
                    70:82:2c:6f:e9:09:8f:7b:43:4e:38:31:87:a9:20:
                    54:b7:bb:5e:fa:96:ef:16:35:8b:58:05:b1:11:45:
                    76:56:70:86:cc:92:9e:0d:08:c2:6e:f8:09:64:42:
                    a3:96:2a:2f:53:76:23:38:0d:c5:92:79:7d:31:f9:
                    7c:37:aa:a8:34:18:f7:44:eb:2a:dd:b5:21:2a:1a:
                    2e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:49:17:50:A8:01:40:B7:21:E4:0B:11:B1:1F:0A:1A:B7:4D:A7:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/c8232a78-952c-374c-b397-532e57c4f5a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.61.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:94:7b:61:4b:7a:da:b6:2f:b6:13:66:7c:78:2e:48:47:77:
         fa:c5:a1:8a:d8:4d:65:0a:ee:bb:42:0d:66:6e:6c:4a:63:eb:
         ec:25:4e:31:28:48:26:76:01:e1:f4:82:0a:e3:ab:68:d0:bb:
         1c:74:cc:9a:e6:ff:57:2b:a9:ef:06:5e:06:c8:24:e2:9e:e9:
         b7:4f:83:1a:b4:9a:ce:97:b9:82:2b:aa:9b:39:53:22:a0:d2:
         75:7f:92:eb:c4:af:18:30:ba:2a:98:61:ca:03:4b:9f:74:bd:
         c7:09:70:8d:49:dd:55:d4:93:f7:1f:7a:fd:46:06:d8:b3:79:
         86:63:b1:7b:34:31:2f:4f:8a:a4:66:57:fa:cd:3c:2a:d6:c9:
         b1:56:9c:87:12:be:ee:0e:ee:28:29:3d:48:28:c4:a9:ab:cb:
         8c:d3:d0:9f:77:e1:c1:b6:c5:a7:8f:ec:0e:9e:6d:3b:83:a3:
         0a:d5:a9:64:de:27:72:e3:5d:b7:59:53:f7:32:6b:87:64:38:
         8d:09:e8:44:3f:1b:fe:16:d6:02:53:23:9c:37:bb:27:fe:7b:
         e8:68:10:67:1c:ac:39:bf:f9:32:8f:23:1a:d0:69:1f:6f:44:
         ef:0a:f6:68:ef:29:05:43:d9:1d:93:20:8a:fa:fc:8e:93:6e:
         93:11:e8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:02:57 2026 by rpki-client