Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/00593091-7b2d-34ab-b863-656388c809a6.roa
File:                     00593091-7b2d-34ab-b863-656388c809a6.roa (raw, json)
Hash identifier:          84DEmPx0IXSxPnZl1TmT1ko6I7PnuI5au3CfcaJDzLQ=
Subject key identifier:   C1:A6:D8:FF:70:76:2F:A4:C7:D8:7E:0D:1A:B5:A5:CE:E6:35:C6:A4
Certificate issuer:       /CN=945a7f76-bce3-4d85-a81e-c84df8d5197a
Certificate serial:       010D0C9F4328584E6574AC12E089857C53C03B00
Authority key identifier: C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/00593091-7b2d-34ab-b863-656388c809a6.roa
Signing time:             Sun 05 Jul 2026 09:00:13 +0000
ROA not before:           Sun 05 Jul 2026 09:00:13 +0000
ROA not after:            Sat 03 Oct 2026 09:00:13 +0000
asID:                     394195
IP address blocks:        209.140.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:65:74:ac:12:e0:89:85:7c:53:c0:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=945a7f76-bce3-4d85-a81e-c84df8d5197a
        Validity
            Not Before: Jul  5 09:00:13 2026 GMT
            Not After : Oct  3 09:00:13 2026 GMT
        Subject: CN=43bf7f19-2bf1-4ea2-af21-af48a1894ea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a9:bd:ea:b4:e8:c2:09:21:4c:00:97:9f:7b:
                    bb:ff:2a:ab:d4:c3:43:31:20:b2:81:a1:89:f9:dd:
                    6b:75:32:e9:45:13:53:6a:b9:9b:3c:26:8a:ec:26:
                    64:44:16:f8:9d:7a:aa:03:d2:bd:5f:c6:6c:eb:32:
                    06:aa:b6:64:bc:72:b9:21:8c:1c:27:8e:0f:22:22:
                    ec:cd:36:99:33:0d:bc:49:d7:0e:1c:ef:b3:4f:5e:
                    0f:01:60:18:a4:31:6a:8f:42:a7:42:cf:9d:94:f7:
                    06:c5:91:8d:21:1a:4f:44:7c:08:6f:f1:c4:2c:74:
                    10:b5:39:bd:86:98:0a:e4:f3:f4:e7:0f:f4:0d:43:
                    bb:2e:4c:03:78:04:df:d9:23:35:d2:6c:37:e5:7d:
                    d9:d2:bd:4a:62:af:82:f8:01:9a:93:0e:b8:35:36:
                    12:67:a5:98:44:b0:78:b2:47:2c:b2:a6:0d:86:22:
                    76:b8:23:ce:41:f7:6f:10:b4:8f:d3:39:a5:71:df:
                    89:a1:11:d4:d5:1f:a3:4c:22:69:6b:d2:83:44:6c:
                    de:42:06:4d:84:a3:ef:0a:8b:ca:e6:fd:08:cc:10:
                    9f:39:48:ca:9d:a3:7a:28:72:65:8e:06:85:0c:de:
                    cf:e0:06:f8:d8:5a:76:85:b2:0b:7e:8c:1a:ec:82:
                    f9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A6:D8:FF:70:76:2F:A4:C7:D8:7E:0D:1A:B5:A5:CE:E6:35:C6:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/00593091-7b2d-34ab-b863-656388c809a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.crl

            X509v3 Authority Key Identifier:
                keyid:C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.140.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:e9:ff:da:0f:88:d5:eb:33:d0:b4:68:2f:bd:9a:3a:ed:c9:
         fa:f0:b0:54:45:48:78:ae:1c:35:14:08:6a:36:0a:0d:ed:a8:
         03:85:75:c4:98:20:57:86:7f:ce:34:94:aa:64:11:1b:3c:c0:
         e3:22:cf:68:6f:9b:8d:8a:e4:da:fb:88:ad:5b:1f:1e:12:58:
         97:ff:07:56:5d:71:49:83:71:62:6c:4c:d3:84:67:e5:38:e0:
         3b:6f:75:73:29:11:2f:31:ae:d3:a2:6e:ab:9d:45:e8:77:9f:
         72:76:0f:9b:42:a0:75:69:b2:77:af:ad:73:ad:e7:37:36:f1:
         e0:fd:e6:62:cb:fa:c7:1d:41:c0:ba:54:96:68:9a:f7:53:aa:
         62:b4:55:81:7b:ec:34:6d:ed:ff:57:1a:aa:31:4d:53:6b:73:
         30:b4:a1:35:eb:91:0f:9e:0f:00:be:3c:1f:cf:b0:d4:b0:dd:
         92:4d:39:cf:a1:71:a1:2c:30:15:26:66:8b:04:5f:54:f8:27:
         d5:d1:bb:f3:b8:ea:f4:59:de:bb:72:6f:57:2c:12:83:92:0f:
         3a:11:c2:3c:24:d0:e0:51:92:a5:a8:99:0a:c6:26:53:b6:a1:
         0d:a3:26:81:09:42:13:83:67:71:86:18:c9:19:b0:2e:86:71:
         55:d7:d4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:35:50 2026 by rpki-client