Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/af85533c-8398-322a-b767-04b2d9900d33.roa
File:                     af85533c-8398-322a-b767-04b2d9900d33.roa (raw, json)
Hash identifier:          xkWmMWG/OCE3HKnphCV9XsGH0zybFqh/cwWeHvcziKA=
Subject key identifier:   83:0C:C9:C6:68:B9:0A:CB:F3:77:9C:1C:7D:1A:CB:AD:24:82:22:DD
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F4328584E736A29725B3955CF74128E80
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/af85533c-8398-322a-b767-04b2d9900d33.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     6079
IP address blocks:        209.150.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:29:72:5b:39:55:cf:74:12:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=4b63fa8e-aec3-4fda-9633-6791a604086c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f5:57:01:aa:13:47:0d:be:52:75:2b:dd:a9:
                    13:91:4c:1a:b1:8a:87:d4:91:44:6f:0a:45:fc:30:
                    d1:75:bd:b4:0a:d4:28:f1:e3:05:45:9f:83:ce:5d:
                    1e:35:c5:a1:c1:ed:0a:78:f7:47:bc:95:fe:80:93:
                    f2:2d:8b:f0:77:92:4d:57:65:7f:d2:cd:f9:bf:87:
                    d1:db:21:92:d5:1a:3e:60:b5:63:96:6c:23:b3:2e:
                    ef:eb:fd:2b:4b:99:e5:f0:31:d5:41:24:eb:8b:26:
                    69:86:2c:6a:bb:bc:47:3e:fb:c5:05:c7:56:ec:69:
                    1a:e2:8e:92:0b:5a:01:81:74:66:68:19:04:29:f8:
                    70:62:6b:ec:3b:e2:dd:0d:10:1a:3c:a4:99:2c:ab:
                    61:62:d5:01:b4:de:43:50:ba:d8:76:e9:61:8d:7f:
                    57:67:99:74:1b:dd:4c:ed:70:3c:1a:2c:e2:6c:cd:
                    5e:36:e6:94:2d:73:30:fc:06:78:08:e9:70:0c:e8:
                    4e:54:6d:11:2f:15:4b:02:88:97:82:b8:3b:52:56:
                    bb:55:ae:3d:6d:dd:03:fe:b1:b9:d8:e4:4d:9b:11:
                    03:2d:ec:12:6d:c8:5a:11:2f:c3:2c:ba:b3:dc:01:
                    c9:39:3c:be:06:8c:76:ff:88:b5:77:03:6c:27:ce:
                    a4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:0C:C9:C6:68:B9:0A:CB:F3:77:9C:1C:7D:1A:CB:AD:24:82:22:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/af85533c-8398-322a-b767-04b2d9900d33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.150.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:87:c5:ad:0a:85:11:f5:94:3c:6c:46:42:97:ae:8c:11:e9:
         24:c4:9d:47:9c:10:53:32:d1:7b:03:03:d9:8b:55:b9:91:df:
         9c:54:72:98:42:29:04:5a:bd:86:28:e2:4d:99:cb:4a:d0:13:
         05:17:78:b0:41:56:6e:a0:65:86:1d:b8:3d:9c:08:8b:7e:a7:
         7e:eb:83:a6:49:c3:92:dd:a1:bc:aa:ae:21:3e:65:c6:e2:5c:
         1a:07:68:2f:40:e6:c4:4b:01:3f:d2:92:8d:9a:e7:74:de:2e:
         a5:78:b7:a3:5f:f3:0b:d4:05:94:bd:53:8b:08:90:69:17:96:
         ea:46:c5:c7:ac:0b:a6:8b:5a:2e:59:4c:55:d9:93:57:91:00:
         f2:48:09:da:bd:69:06:23:02:30:23:1e:b4:de:c9:ed:85:29:
         be:76:ed:2d:c2:1e:43:70:37:86:13:3a:86:c4:28:18:f6:28:
         46:73:51:f0:d9:a9:7b:81:d0:dc:ee:76:3c:5b:f9:97:ed:b6:
         94:4f:39:c2:6d:64:98:37:7b:a3:74:d3:42:1b:25:e7:a0:b6:
         a8:2a:42:40:0a:00:a3:58:86:55:a5:df:cb:fd:a9:be:fd:f8:
         d2:bc:2b:02:e4:52:c0:4a:c0:99:9b:a7:d0:f8:22:5f:d9:ef:
         40:61:d6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:40:09 2026 by rpki-client