Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8a45faea-04c1-3376-95ba-44379b51ae2b.roa
File:                     8a45faea-04c1-3376-95ba-44379b51ae2b.roa (raw, json)
Hash identifier:          m1YSpjLKQk5gKO2PEwH4d2E7lPqhdtLt4jwm1rLFPYY=
Subject key identifier:   78:1F:5D:2E:3E:38:BF:85:97:5B:9F:C0:18:73:30:0E:04:6C:E8:B8
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584E4AEF73587C337E636CBD0500
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8a45faea-04c1-3376-95ba-44379b51ae2b.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     19905
IP address blocks:        173.24.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:73:58:7c:33:7e:63:6c:bd:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=2ed7c130-6f21-4c1c-8514-bfa5d4301500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e5:eb:a6:e7:c9:10:43:aa:eb:64:7a:d3:d0:
                    d6:56:66:fb:fb:ff:2f:59:f0:9e:ac:06:94:dd:27:
                    c4:44:e8:3d:e2:aa:4e:53:ce:ac:82:ea:7e:d0:61:
                    07:26:4c:4d:4a:4b:a0:69:01:2f:b7:f4:06:b0:65:
                    46:c8:ac:1f:9c:0b:ff:fa:04:9b:4f:a6:6b:90:cc:
                    60:39:e9:48:7f:a5:b0:fa:1c:09:ea:cb:3c:5f:7e:
                    ac:ac:e7:b0:de:a7:ff:dd:84:3d:1d:ff:72:3c:3e:
                    8d:55:4b:e7:41:43:38:0f:dd:ea:93:d2:78:b8:23:
                    52:e3:f6:dc:52:19:10:68:85:85:e9:a4:2e:8f:58:
                    fd:06:fe:50:f0:75:ac:d9:7f:9d:47:1a:0c:f5:1f:
                    98:99:c1:80:1d:70:c1:27:e1:0d:53:e1:a3:ac:41:
                    f9:08:20:00:0d:12:0e:27:c8:ea:33:ae:74:13:c4:
                    b7:cb:f3:a3:95:e1:25:d6:65:ab:80:22:a8:2f:76:
                    2c:08:12:07:75:b9:5e:9d:5f:e2:97:9b:16:5a:f5:
                    95:18:a0:27:e5:c0:4a:47:fc:fb:e9:92:07:b4:af:
                    02:7f:b8:b9:c1:de:2e:77:8f:37:4b:bd:d3:3e:e7:
                    b2:c5:84:f0:fc:09:42:b9:1c:8b:3e:c0:fe:48:fa:
                    01:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:1F:5D:2E:3E:38:BF:85:97:5B:9F:C0:18:73:30:0E:04:6C:E8:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8a45faea-04c1-3376-95ba-44379b51ae2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.24.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:35:d2:e7:af:13:6e:b2:a3:8d:29:42:d7:66:3f:e6:ed:d4:
         5a:79:b5:64:16:6c:36:e0:3a:fc:1c:64:8d:65:75:39:4e:28:
         2c:41:f0:64:4a:78:35:83:6b:e2:35:9d:b7:fe:fd:4b:96:ca:
         d3:e8:cd:f2:09:f7:4a:96:8c:ad:d8:67:b5:05:6c:83:63:96:
         6d:cb:4a:a6:ea:23:48:ee:10:ff:d4:8a:46:c7:4f:b7:a3:26:
         b7:d2:41:d4:a8:89:3e:90:b5:32:2c:1c:be:e1:a6:0d:3d:fa:
         77:c8:61:43:bc:03:5e:db:60:f9:7c:b0:21:c3:46:c2:c2:a5:
         32:09:82:55:bd:c5:8c:f0:5d:90:49:86:75:c0:c7:89:c5:c7:
         10:6b:08:88:66:1f:7f:a8:f6:71:db:d4:4b:42:c4:e6:f5:26:
         88:d1:4f:07:d5:30:0e:e5:81:33:53:12:24:31:67:65:37:b7:
         66:3a:ae:0f:c4:be:79:de:b9:56:af:6f:b2:69:03:a5:51:b6:
         c9:88:4c:9b:5b:17:b8:84:87:99:e7:74:cc:9d:64:4b:fc:08:
         b0:1f:13:8c:f2:2e:84:aa:1d:46:d5:67:46:87:b7:78:6b:be:
         d1:9d:a8:d1:44:a2:58:02:9b:0f:e6:d5:9d:ef:47:75:a8:df:
         64:65:5f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 19:34:09 2026 by rpki-client