Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/21ed9c33-b646-337e-9363-ff7e1a1cf097.roa
File:                     21ed9c33-b646-337e-9363-ff7e1a1cf097.roa (raw, json)
Hash identifier:          oLAJRcfi4QQWyXfrEuRtFmQiacwyFTv0oEOKHp3d4Rw=
Subject key identifier:   FC:CE:F0:E8:97:EA:0C:18:45:57:75:8A:CA:72:51:AF:69:07:EE:FE
Certificate issuer:       /CN=d862b5c6-40a1-4249-a26e-11938a702985
Certificate serial:       010D0C9F4328584E8C8A49679E12349C8339B900
Authority key identifier: 81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/21ed9c33-b646-337e-9363-ff7e1a1cf097.roa
Signing time:             Sun 19 Jul 2026 09:00:11 +0000
ROA not before:           Sun 19 Jul 2026 09:00:11 +0000
ROA not after:            Sat 17 Oct 2026 09:00:11 +0000
asID:                     15257
IP address blocks:        173.195.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8c:8a:49:67:9e:12:34:9c:83:39:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d862b5c6-40a1-4249-a26e-11938a702985
        Validity
            Not Before: Jul 19 09:00:11 2026 GMT
            Not After : Oct 17 09:00:11 2026 GMT
        Subject: CN=ef6b5d56-5b40-4d1e-b804-622ff8995fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:79:9d:f8:92:5f:e8:6e:54:0e:36:70:29:36:
                    ff:69:49:c2:86:a8:ac:70:c7:ce:26:c8:81:d3:18:
                    d5:ec:68:78:f1:86:6e:a3:9f:fe:8d:74:0e:4a:70:
                    cc:47:bc:b6:cb:b3:21:6f:77:25:7d:34:c9:8d:bf:
                    ff:e7:e8:63:3a:41:59:6c:dd:93:59:40:ac:2f:61:
                    cd:d2:4a:28:00:b3:ef:d4:2e:a9:84:4f:57:6d:f2:
                    a9:4d:a7:ef:38:6b:ef:80:c3:3b:9e:58:57:f7:e9:
                    50:cc:a2:d1:87:49:48:cb:3d:a1:21:2b:2e:5f:31:
                    38:8f:06:a8:36:5f:94:3a:67:bf:97:86:bd:f3:96:
                    d4:63:cc:ad:26:c5:64:17:21:f7:ae:bd:4a:56:1d:
                    62:b5:a3:ea:55:cb:9c:e8:5b:4e:ad:7a:2b:24:13:
                    0f:c2:85:fd:b1:be:b4:bf:56:eb:96:ea:05:f2:23:
                    30:52:e3:21:b8:8e:7a:23:0c:34:6a:28:2b:d5:21:
                    d0:83:14:9d:1b:9b:58:08:29:c1:eb:ff:f1:6a:81:
                    0d:cb:3c:8c:e9:21:27:81:16:ef:5f:f1:53:6f:8d:
                    bc:b3:bd:c9:e1:08:0a:6b:4f:2c:4e:c5:b0:64:15:
                    a1:a9:ee:d6:59:39:ca:26:ce:84:18:1e:84:2d:a0:
                    fb:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:CE:F0:E8:97:EA:0C:18:45:57:75:8A:CA:72:51:AF:69:07:EE:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/21ed9c33-b646-337e-9363-ff7e1a1cf097.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl

            X509v3 Authority Key Identifier:
                keyid:81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.195.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:0e:60:30:16:ab:50:15:db:1d:c0:6a:7c:c5:4f:67:db:30:
         7c:2b:16:48:ed:46:af:81:3d:73:fc:64:1d:6c:17:21:c0:a0:
         ed:39:d5:23:39:10:35:62:9a:5e:1b:a7:57:cc:57:bf:b8:69:
         42:d5:e9:11:b9:04:37:5b:34:4c:c9:98:7c:3f:f6:a7:4c:45:
         f4:a6:28:6f:d5:b2:1a:17:38:0e:1f:17:a6:d7:f2:b4:76:3f:
         5c:e2:49:b3:31:90:7a:fd:70:fd:9c:f3:67:e5:ff:36:5e:b5:
         e4:21:a1:4e:20:56:8b:c0:dc:0f:31:ea:98:d4:2b:fc:47:19:
         64:d7:70:44:25:5c:19:e8:8d:c6:99:e9:cb:2d:5f:84:f6:a2:
         10:bc:36:c4:11:99:12:f8:7a:c9:16:2e:e9:e5:65:58:2a:6d:
         58:7a:4d:f6:c0:93:29:a2:91:94:d7:99:ec:e2:33:00:81:23:
         a4:07:ca:c9:42:52:a3:d5:33:41:89:9c:94:b5:28:df:10:c3:
         08:da:70:05:d1:3d:89:0d:a8:85:99:c6:17:73:03:f1:31:cf:
         62:db:d3:fc:09:c5:91:6a:3d:0b:b7:fa:a5:b9:77:14:ea:8d:
         e7:c9:f0:2d:59:a0:33:36:17:e3:1e:d6:a2:23:93:7e:2f:d7:
         ae:c4:1f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:43:09 2026 by rpki-client