Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/ea1d94da-b9ef-3726-8fd3-2c2e03ba8c70.roa
File:                     ea1d94da-b9ef-3726-8fd3-2c2e03ba8c70.roa (raw, json)
Hash identifier:          onvC2q2ysTBg1B7w/ciR7YEd9gQAUlQOPv/JTlc8RlU=
Subject key identifier:   A5:08:36:23:4E:4A:38:30:94:FD:D5:CD:96:62:8B:36:24:42:8E:49
Certificate issuer:       /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
Certificate serial:       010D0C9F4328584E921FA695E20886B12A59A888
Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/ea1d94da-b9ef-3726-8fd3-2c2e03ba8c70.roa
Signing time:             Tue 21 Jul 2026 09:00:12 +0000
ROA not before:           Tue 21 Jul 2026 09:00:12 +0000
ROA not after:            Mon 19 Oct 2026 09:00:12 +0000
asID:                     21559
IP address blocks:        204.77.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:92:1f:a6:95:e2:08:86:b1:2a:59:a8:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
        Validity
            Not Before: Jul 21 09:00:12 2026 GMT
            Not After : Oct 19 09:00:12 2026 GMT
        Subject: CN=0a80ed4f-4c14-477b-8cf9-5ad08a0fb949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:07:07:7f:a4:f2:df:44:c3:b9:38:f9:b5:bc:
                    94:36:94:3a:b8:b0:a2:e7:fd:87:8f:3e:57:23:b8:
                    56:31:3c:40:1e:8d:ec:8a:30:00:d9:5c:df:62:a0:
                    76:90:95:4a:dc:4e:48:25:f8:28:0c:ff:58:68:0e:
                    05:d1:13:f2:3c:85:f4:9f:97:d6:cc:d8:ab:43:49:
                    06:9d:9e:b4:9f:84:f3:cd:f6:92:99:64:8e:e8:65:
                    65:df:2a:73:0e:25:d1:7d:e2:3b:a8:3d:4a:40:42:
                    97:e7:0d:91:e9:5e:38:73:c4:3b:c3:07:2c:86:08:
                    0c:0e:b1:75:2e:db:c2:d8:bb:14:8f:d9:e1:23:a4:
                    7e:cf:26:49:34:b6:6e:0c:67:1a:53:5a:08:73:f0:
                    bb:71:45:4a:ad:c7:cd:01:b3:f4:72:43:47:80:49:
                    47:8f:28:81:48:00:46:db:89:03:df:de:18:02:c6:
                    e8:ab:af:aa:99:04:27:2e:a1:c9:b2:5e:a5:2f:c6:
                    33:0d:a0:77:28:33:38:55:30:d8:61:c7:4e:43:61:
                    c4:4c:16:5b:ab:32:10:6a:04:df:24:c6:af:0a:52:
                    9d:d1:7e:41:dd:9a:84:dc:ff:87:ff:f4:6e:a9:a5:
                    b1:44:3e:eb:17:6c:b1:d2:4f:8d:29:22:cf:c6:6f:
                    d9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:08:36:23:4E:4A:38:30:94:FD:D5:CD:96:62:8B:36:24:42:8E:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/ea1d94da-b9ef-3726-8fd3-2c2e03ba8c70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl

            X509v3 Authority Key Identifier:
                keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.77.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:53:b1:4a:2d:3d:9a:e0:51:ff:1a:f1:4a:43:ff:1c:18:f0:
         50:ab:e3:41:4c:da:57:db:1f:c9:c1:2d:f0:40:45:7a:d3:0c:
         72:9e:d6:5f:2a:31:54:3f:cf:2b:5f:f3:c5:93:b8:d9:7d:d0:
         aa:88:30:0b:80:bc:d9:ef:37:43:b8:15:85:f5:8b:68:40:b5:
         7e:97:d7:7f:03:83:20:99:33:f6:52:4b:b0:ac:52:30:8c:e3:
         b1:b4:b8:a2:5a:2c:44:4c:e2:aa:37:f1:ab:25:ca:fd:71:e8:
         d0:eb:c6:30:36:70:ed:4b:4a:40:2c:14:35:1f:f6:41:d3:8d:
         b1:5b:fc:74:27:d7:d7:af:b2:30:7d:0a:b7:f0:76:eb:ac:7e:
         01:74:a5:e1:20:dd:12:6a:74:c6:2c:ff:d9:aa:f6:95:14:70:
         bc:f7:08:3c:0e:5f:3e:93:cc:0d:e9:bd:a0:c8:22:d4:24:53:
         73:84:7f:6c:b2:55:17:92:d7:13:1c:13:16:3a:0c:43:20:cf:
         c6:a6:61:19:1e:66:07:05:0f:ca:60:3c:57:0f:d4:8f:44:d1:
         c5:8b:34:35:35:9f:8e:a3:66:1c:2b:d7:00:7f:6c:39:c9:67:
         12:08:d8:77:a5:a4:93:f0:2b:aa:8f:4a:a0:ec:06:aa:c8:8a:
         36:41:dc:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:05:24 2026 by rpki-client