Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/700820a1-96be-3e11-8d92-5a0e7d708de3.roa
File:                     700820a1-96be-3e11-8d92-5a0e7d708de3.roa (raw, json)
Hash identifier:          CJ1+0s74Chj3ga498VLpApWiyqTo8/286PS8fubxJUo=
Subject key identifier:   58:13:B7:95:CD:7F:BE:8C:A7:35:E8:9B:05:0A:5A:25:A1:ED:6E:F3
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584E87E66B9E8B4FAE26C5202B80
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/700820a1-96be-3e11-8d92-5a0e7d708de3.roa
Signing time:             Fri 17 Jul 2026 17:06:54 +0000
ROA not before:           Fri 17 Jul 2026 17:06:54 +0000
ROA not after:            Thu 15 Oct 2026 17:06:54 +0000
asID:                     834
IP address blocks:        216.24.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:87:e6:6b:9e:8b:4f:ae:26:c5:20:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Jul 17 17:06:54 2026 GMT
            Not After : Oct 15 17:06:54 2026 GMT
        Subject: CN=4077097d-04ef-4cad-bce5-8a7a8ce69d6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e0:b3:13:17:c6:94:37:3b:85:56:eb:be:f5:
                    94:0e:85:ee:78:5d:9d:5a:2c:f3:ad:4b:ab:21:43:
                    cd:59:16:94:1d:39:da:ba:16:31:92:97:b6:12:0a:
                    0c:a7:05:8d:30:51:76:96:5d:04:47:3e:e8:dc:9a:
                    82:be:66:19:03:36:e0:35:12:8b:7c:8d:bc:72:b3:
                    b6:43:04:b9:f6:7d:de:e0:1f:70:f0:c9:3f:4b:49:
                    24:e7:50:ab:9c:6d:68:d4:ff:bd:3e:e0:95:00:11:
                    41:60:8a:b2:88:ae:c3:7b:eb:36:99:6e:60:0d:56:
                    d9:38:f3:ec:eb:03:b8:3b:c5:00:2b:8f:d0:2d:b3:
                    87:f6:dc:c4:b7:03:d7:fb:49:a2:2f:5c:30:be:c1:
                    a9:da:f7:21:48:e0:9b:a3:1e:e4:e7:00:3c:4b:5b:
                    20:c2:84:f0:d7:3e:89:c1:d9:a3:5d:41:24:3a:e1:
                    0a:c5:9b:fe:7c:cd:90:6d:20:19:d6:48:3b:8c:64:
                    2c:58:11:71:bf:17:b1:b7:8b:c8:7d:41:67:8a:83:
                    c1:d4:e3:33:42:0c:07:de:83:05:6d:e6:4d:94:11:
                    de:20:0e:91:85:9e:f1:bd:c1:6f:e0:7d:4d:82:d1:
                    ea:06:d1:44:c0:68:76:85:c3:76:0d:a3:2a:6a:3f:
                    ad:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:13:B7:95:CD:7F:BE:8C:A7:35:E8:9B:05:0A:5A:25:A1:ED:6E:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/700820a1-96be-3e11-8d92-5a0e7d708de3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:37:e7:4d:3f:eb:9e:b4:c2:54:70:b7:cc:d4:9a:06:77:ea:
         47:b3:00:d9:01:bd:cb:0d:3d:c0:3d:12:42:dc:47:fd:72:de:
         bd:fc:db:fc:a6:ae:ea:09:9f:65:6f:02:aa:51:b8:34:90:96:
         16:d1:a3:3f:19:6d:70:12:8a:1b:3f:fd:50:92:3f:2d:a7:c1:
         ca:02:92:36:0e:db:52:43:fb:c8:88:63:a0:50:ae:a3:ba:b1:
         03:3d:3b:26:4b:c9:62:53:03:06:a5:df:56:49:a6:27:a7:cf:
         a5:8b:bf:52:83:df:f0:50:7a:ca:81:ba:d4:fb:8d:b2:04:09:
         32:45:37:4a:d2:d9:b7:36:19:1d:8c:04:cd:e7:e2:82:87:b1:
         b6:dc:9a:ab:66:e3:5f:a1:ad:85:d0:3a:ff:58:bf:16:57:55:
         ba:b9:bd:6c:9e:f1:db:d7:63:90:f4:06:33:18:6b:51:1b:b0:
         42:2d:a7:aa:bb:92:2f:47:e0:78:a7:53:bc:76:e6:fe:ee:cf:
         ff:42:6a:9b:2d:7e:b6:e4:ea:07:11:8d:35:ce:e3:69:e3:50:
         9f:fc:61:25:6b:b0:4d:1f:12:b7:95:28:20:f2:3d:1b:0a:47:
         c4:74:cb:f4:12:51:03:18:d0:07:f8:69:71:c2:17:08:c1:8d:
         b9:b0:64:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:08:11 2026 by rpki-client