Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8205fc61-ee5e-4638-8ad1-a24d7b9c9474/880d22ac-c23d-3bde-9d07-acaf3560580b.roa
File:                     880d22ac-c23d-3bde-9d07-acaf3560580b.roa (raw, json)
Hash identifier:          wU8BLxMv0pyKEFRA199yXBl1uhySvweVnJtg3XPx/IQ=
Subject key identifier:   42:67:7E:D5:A4:E2:FB:A6:54:27:6B:61:9F:E5:82:93:35:53:B3:10
Certificate issuer:       /CN=8205fc61-ee5e-4638-8ad1-a24d7b9c9474
Certificate serial:       010D0C9F4328584E7204DC1EDC76CB5D86484600
Authority key identifier: 6C:05:B6:82:2D:55:D5:F2:29:8E:15:FC:50:02:3C:62:47:41:FD:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8205fc61-ee5e-4638-8ad1-a24d7b9c9474.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8205fc61-ee5e-4638-8ad1-a24d7b9c9474/880d22ac-c23d-3bde-9d07-acaf3560580b.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     397253
IP address blocks:        209.178.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8205fc61-ee5e-4638-8ad1-a24d7b9c9474/8205fc61-ee5e-4638-8ad1-a24d7b9c9474.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8205fc61-ee5e-4638-8ad1-a24d7b9c9474/8205fc61-ee5e-4638-8ad1-a24d7b9c9474.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8205fc61-ee5e-4638-8ad1-a24d7b9c9474.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:dc:1e:dc:76:cb:5d:86:48:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8205fc61-ee5e-4638-8ad1-a24d7b9c9474
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=ccb24c90-b0ec-4b0b-8cc4-f294af6a7cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:98:9c:c5:89:8f:e1:a1:20:bc:0b:64:63:0a:
                    cf:c3:9d:24:f4:2e:24:5d:a7:b6:aa:dc:fc:ea:17:
                    41:73:9d:5b:f5:b3:f9:b1:f8:74:11:68:c4:9b:f8:
                    61:f5:17:b7:0c:c8:43:2d:e2:c5:03:f6:5d:8d:f3:
                    98:6d:28:d5:2e:cb:48:45:aa:26:03:41:7c:5a:bf:
                    2c:ce:40:f9:34:78:29:e6:46:01:bc:fe:82:85:9a:
                    7c:42:10:5e:36:05:6e:f9:de:b0:39:c5:5c:4a:a6:
                    9f:81:9e:e8:e8:3b:2f:1b:ef:26:7c:4e:c1:79:fe:
                    84:9a:4e:1a:41:dc:f7:31:8f:fa:e5:64:74:b2:3d:
                    f2:04:0b:bd:4f:43:b8:28:6c:00:cd:d5:35:2e:02:
                    54:b8:e6:90:26:76:bf:52:d6:d8:4c:43:54:7e:80:
                    2a:ca:67:20:af:08:01:a8:8b:22:39:c3:d8:01:4b:
                    26:2e:a8:98:cb:d6:62:56:90:2e:56:84:62:1d:67:
                    9a:70:51:e7:1f:d7:02:1a:66:f8:98:22:74:f6:99:
                    3e:49:dd:4f:26:bd:8a:fb:a0:10:e4:1b:83:37:93:
                    ae:c0:e6:d3:cf:57:8d:ce:ba:25:83:93:8d:b9:99:
                    eb:e5:15:86:e7:2c:ac:2e:4a:2c:e9:ce:11:3e:78:
                    a8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:67:7E:D5:A4:E2:FB:A6:54:27:6B:61:9F:E5:82:93:35:53:B3:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8205fc61-ee5e-4638-8ad1-a24d7b9c9474/880d22ac-c23d-3bde-9d07-acaf3560580b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8205fc61-ee5e-4638-8ad1-a24d7b9c9474/8205fc61-ee5e-4638-8ad1-a24d7b9c9474.crl

            X509v3 Authority Key Identifier:
                keyid:6C:05:B6:82:2D:55:D5:F2:29:8E:15:FC:50:02:3C:62:47:41:FD:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8205fc61-ee5e-4638-8ad1-a24d7b9c9474.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.178.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:4c:9e:d6:0c:21:18:d8:c5:f4:02:f7:38:37:91:4f:86:f4:
         10:34:7d:c2:34:e5:f5:4e:94:51:31:24:c1:8d:64:4c:c3:5a:
         90:c0:3e:d2:03:36:d5:78:1f:9a:98:6f:90:27:27:3b:4f:9e:
         bb:0f:48:88:aa:cd:a0:0b:2f:bd:1d:b6:e6:eb:75:cd:23:55:
         31:63:e7:1c:e4:42:5a:2f:28:ef:43:bd:f7:66:72:32:32:a7:
         50:08:a9:a2:42:02:f5:dc:2b:37:52:4c:e7:6b:0f:69:45:77:
         90:a3:32:b2:d7:f9:93:82:ef:a5:eb:ad:ac:b0:9d:c4:5f:be:
         8d:e7:29:ce:29:3d:d4:ea:32:2c:51:e5:53:96:34:74:88:34:
         4f:55:a6:69:e0:72:21:20:7c:f5:94:f8:d8:f6:56:23:c6:e7:
         8a:e1:31:5e:59:65:6b:38:3f:68:da:e3:1d:36:cc:d5:54:0f:
         68:4d:22:b4:f2:35:38:23:57:84:ca:cf:fe:ba:3c:47:0f:72:
         bb:24:57:d5:3e:0e:7f:76:b6:fa:e6:96:09:e7:e7:34:b7:e5:
         0f:4b:a8:3a:29:21:1c:bb:be:30:c0:3f:b4:d8:d2:c1:93:0e:
         e1:fc:49:eb:6c:16:9f:b4:4c:4b:37:92:83:13:eb:98:5b:d2:
         6c:7a:0a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:44:29 2026 by rpki-client