Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/ae8567ef-f0e2-314e-9d1d-1d2616b4d20e.roa
File:                     ae8567ef-f0e2-314e-9d1d-1d2616b4d20e.roa (raw, json)
Hash identifier:          nYBxOCWiuEuoPiyRGbN39ndbGCAIU2qhD+HKnHrAqHE=
Subject key identifier:   1C:ED:81:9A:41:B4:B1:B4:83:11:1A:55:48:D0:CA:04:78:CB:28:DB
Certificate issuer:       /CN=332d4c1c-68fd-46ba-9450-84697fbe4bcb
Certificate serial:       010D0C9F4328584EC306495859B8A5DA8A384600
Authority key identifier: 04:D2:50:7C:E0:55:F4:5A:1A:02:70:D2:84:82:43:CC:30:79:71:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/ae8567ef-f0e2-314e-9d1d-1d2616b4d20e.roa
Signing time:             Fri 07 Aug 2026 21:23:48 +0000
ROA not before:           Fri 07 Aug 2026 21:23:48 +0000
ROA not after:            Thu 05 Nov 2026 22:23:48 +0000
asID:                     19871
IP address blocks:        209.237.150.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/332d4c1c-68fd-46ba-9450-84697fbe4bcb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/332d4c1c-68fd-46ba-9450-84697fbe4bcb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:06:49:58:59:b8:a5:da:8a:38:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=332d4c1c-68fd-46ba-9450-84697fbe4bcb
        Validity
            Not Before: Aug  7 21:23:48 2026 GMT
            Not After : Nov  5 22:23:48 2026 GMT
        Subject: CN=85cd8f78-bf0f-4f35-9195-97a58349375d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b2:0f:00:41:04:10:1e:47:9b:65:6a:ce:e1:
                    d5:42:62:9b:37:9d:eb:d3:6c:a1:ba:10:5c:22:78:
                    d7:2f:10:28:a4:6c:c3:9a:e5:95:52:99:ea:d0:79:
                    3b:88:c8:e0:49:bf:96:e3:fc:93:99:9f:16:bc:21:
                    44:f6:09:72:0a:b4:f6:65:b8:33:60:78:d8:a3:59:
                    f9:a1:a5:25:bb:f7:88:fe:a8:3c:90:d8:b6:92:4d:
                    7d:66:ac:d4:97:82:0b:b7:04:83:02:87:67:25:e3:
                    cb:e0:fb:50:00:77:a6:27:c7:fc:4a:fa:5b:08:0a:
                    30:ec:bd:9f:7c:62:3b:35:39:07:7a:d6:ac:b0:cb:
                    d4:0f:ed:82:9a:b3:db:24:cd:de:f1:4e:66:1c:1f:
                    22:ff:5e:9c:b2:74:36:3a:84:3c:3d:ec:b9:ca:73:
                    2c:2c:27:d1:7a:a0:64:bb:74:b2:70:0a:1d:b3:d0:
                    0f:19:e0:17:1f:fa:a0:c0:47:08:95:9d:67:91:e6:
                    06:84:f4:cf:be:dc:3a:31:c1:27:71:eb:41:63:ea:
                    f4:d7:39:26:d3:de:b0:49:49:f9:9d:55:80:aa:59:
                    69:a2:30:03:bb:8b:e7:6d:70:e0:62:0b:5f:47:80:
                    bc:77:5e:fb:2f:c3:5c:32:5a:c0:9d:b7:18:4f:7d:
                    9f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:ED:81:9A:41:B4:B1:B4:83:11:1A:55:48:D0:CA:04:78:CB:28:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/ae8567ef-f0e2-314e-9d1d-1d2616b4d20e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/332d4c1c-68fd-46ba-9450-84697fbe4bcb.crl

            X509v3 Authority Key Identifier:
                keyid:04:D2:50:7C:E0:55:F4:5A:1A:02:70:D2:84:82:43:CC:30:79:71:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:75:65:59:a6:43:b2:1f:45:d0:58:7f:4a:bb:ef:19:ee:d7:
         bb:55:f5:88:6c:06:3a:6a:f9:41:f3:87:b5:87:68:4d:81:1f:
         35:92:c7:56:f9:73:df:a9:be:59:ca:ec:50:34:1b:fa:8f:db:
         69:b4:d9:fe:aa:63:99:e9:71:9a:33:50:8c:17:79:2a:88:3b:
         65:c4:46:12:cc:29:28:62:6b:1e:62:1e:7f:d0:c8:be:75:a2:
         4e:2c:bf:cf:f3:33:54:18:27:7e:75:8f:42:fa:a4:a4:85:3b:
         47:65:a9:ed:f4:82:6f:26:c7:23:93:f4:65:29:55:af:f9:75:
         dc:d2:02:79:e3:60:03:a3:d0:8e:61:31:03:f1:3a:31:56:2e:
         67:04:56:38:41:34:88:78:63:74:db:58:a7:58:dc:75:cf:6a:
         e5:5e:7e:16:db:0c:22:c1:f0:10:d7:41:20:03:b3:f8:86:77:
         5f:0a:77:a1:c8:43:f1:39:38:f4:40:7d:b7:06:70:1b:e1:70:
         51:73:3e:b6:6e:89:33:a2:7c:87:34:c3:8d:1e:88:13:94:42:
         a6:3e:2e:dd:60:66:77:32:2a:d6:ba:69:89:b9:e3:63:3b:85:
         94:bf:6f:3f:e4:87:b6:01:33:25:7b:15:dd:ef:62:0b:c4:db:
         08:f9:76:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:58:55 2026 by rpki-client