Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/7e0aac9c-6af5-3f46-8053-87b3ecc24d33.roa
File:                     7e0aac9c-6af5-3f46-8053-87b3ecc24d33.roa (raw, json)
Hash identifier:          Ie51TgbK2lWquwgEENS99IwZ6eEubu305VJ+Yu9jdFE=
Subject key identifier:   0D:FD:63:B0:5C:A9:DC:F8:EF:D3:F3:A0:AF:8D:84:BD:40:30:77:91
Certificate issuer:       /CN=405ae070-e9e9-4d3c-b449-868426ff2303
Certificate serial:       010D0C9F4328584E2AD453AE0002CA26B6770E40
Authority key identifier: F9:21:3A:33:01:EF:02:BE:09:BE:9D:FF:C2:08:E4:BD:BD:36:E4:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/7e0aac9c-6af5-3f46-8053-87b3ecc24d33.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     15296
IP address blocks:        204.209.76.0/24 maxlen: 24
                          204.209.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/405ae070-e9e9-4d3c-b449-868426ff2303.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/405ae070-e9e9-4d3c-b449-868426ff2303.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:53:ae:00:02:ca:26:b6:77:0e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=405ae070-e9e9-4d3c-b449-868426ff2303
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=c3c8b7dd-2a1a-41de-89a8-66a88481dadc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f7:dd:be:2a:e7:23:3d:f3:1a:22:5b:29:a1:
                    d7:c2:a7:cf:df:43:b7:72:51:77:b6:fa:c0:72:f1:
                    4f:ae:3d:43:4a:1f:aa:05:85:a3:c4:42:07:36:b0:
                    3c:17:b0:a2:c8:d3:ce:0b:88:e1:45:7b:eb:c9:6f:
                    ed:9f:29:56:a2:e0:48:44:47:85:55:1a:4a:d3:2d:
                    5a:a5:16:24:27:c1:8f:c3:16:3b:9a:d0:34:62:16:
                    d1:15:58:5d:f5:80:02:6b:0e:77:30:9a:06:73:be:
                    8f:3c:96:b8:04:b0:0a:9a:3c:cc:26:f4:2c:d3:4e:
                    5e:96:60:aa:98:44:5d:b8:a4:90:be:43:51:cb:77:
                    9f:1d:4e:71:8a:a7:5e:ad:b5:4c:6a:5d:b1:b9:e7:
                    3e:ba:eb:bd:75:9e:6d:28:dc:38:ff:b0:84:62:29:
                    8e:73:65:51:a6:68:e7:ba:b8:90:1f:ed:fe:52:5e:
                    0b:80:5e:0c:b1:d6:6c:3e:0a:c0:97:e4:27:d7:c7:
                    82:ff:a9:ba:1e:88:28:1f:25:d4:0f:4e:4b:d4:64:
                    ba:68:1b:fb:d6:ec:2b:ff:6e:f6:4d:e1:40:20:2e:
                    99:7f:40:ce:b3:85:2c:d6:6b:a3:7a:07:7f:35:54:
                    a3:c8:be:0a:82:ab:95:ca:e0:e6:c2:34:3d:6b:e6:
                    14:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:FD:63:B0:5C:A9:DC:F8:EF:D3:F3:A0:AF:8D:84:BD:40:30:77:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/7e0aac9c-6af5-3f46-8053-87b3ecc24d33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303/405ae070-e9e9-4d3c-b449-868426ff2303.crl

            X509v3 Authority Key Identifier:
                keyid:F9:21:3A:33:01:EF:02:BE:09:BE:9D:FF:C2:08:E4:BD:BD:36:E4:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/405ae070-e9e9-4d3c-b449-868426ff2303.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.209.76.0/24
                  204.209.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:7a:fb:ed:be:10:86:a2:28:d3:85:87:30:6a:dc:27:f1:d1:
         78:b6:bd:45:87:17:94:6e:9e:8e:2d:db:3b:3f:c9:b6:fa:4a:
         57:24:82:8a:37:fe:98:ea:33:5e:0a:9d:5f:37:3d:b3:9b:e4:
         cf:d3:fe:21:21:d4:d3:cc:2d:30:40:70:cd:50:c7:b1:7e:d9:
         87:a7:60:a6:61:32:24:10:61:cf:fe:64:aa:c7:83:b8:1b:73:
         21:b7:86:7e:34:10:fa:5b:ce:90:8d:26:02:5a:77:07:6b:fb:
         dc:2b:51:44:c0:8d:62:26:91:3f:3a:df:7e:71:8a:43:71:9d:
         d4:da:6a:43:29:f0:1a:e0:a4:2c:f7:7b:2a:f6:8a:0a:e4:f9:
         c7:97:9f:ab:bd:d2:8e:d9:14:ff:19:26:28:f7:89:8b:b0:ad:
         69:ec:af:91:da:01:5f:36:6a:d6:73:39:f2:08:33:fd:cb:00:
         40:0a:a9:bc:4c:f1:1f:58:cc:9b:45:f5:e8:9c:7e:a3:84:4b:
         b9:43:db:65:eb:e7:6b:f0:82:e0:31:06:38:52:92:e2:60:6f:
         3a:db:61:08:be:7c:e2:fc:3e:93:01:b1:6a:fb:75:41:77:b1:
         61:b7:23:3e:fb:27:6a:13:ca:3b:eb:13:3a:97:f1:0a:ca:44:
         92:d1:9f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:53:20 2026 by rpki-client