Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/c728a5d9-d7c5-3f6f-ab84-a5c66c6f642b.roa
File:                     c728a5d9-d7c5-3f6f-ab84-a5c66c6f642b.roa (raw, json)
Hash identifier:          QXarNqKKuUE0GE+RX1v3yv/fkUa6fuQuAmfd54e3u+Q=
Subject key identifier:   E5:8F:87:7A:1B:32:A8:6A:71:79:95:53:F2:69:D6:2C:8E:62:4E:10
Certificate issuer:       /CN=6fb18968-7aa5-41e5-96b6-c45c25a566e8
Certificate serial:       010D0C9F4328584E8B24EA6DBEAC4932A6D14400
Authority key identifier: C6:9F:AC:EA:70:7D:E0:51:AB:C5:1B:82:39:4D:0E:73:3A:A2:A1:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/c728a5d9-d7c5-3f6f-ab84-a5c66c6f642b.roa
Signing time:             Sat 18 Jul 2026 21:00:11 +0000
ROA not before:           Sat 18 Jul 2026 21:00:11 +0000
ROA not after:            Fri 16 Oct 2026 21:00:11 +0000
asID:                     11260
IP address blocks:        24.207.0.0/17 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6fb18968-7aa5-41e5-96b6-c45c25a566e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6fb18968-7aa5-41e5-96b6-c45c25a566e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8b:24:ea:6d:be:ac:49:32:a6:d1:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fb18968-7aa5-41e5-96b6-c45c25a566e8
        Validity
            Not Before: Jul 18 21:00:11 2026 GMT
            Not After : Oct 16 21:00:11 2026 GMT
        Subject: CN=02c483c1-99ad-4ab7-8236-8cca1e56ae0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bf:e0:f0:f9:2d:81:2c:7d:d6:c3:87:44:6d:
                    a0:df:ab:5d:7f:d4:63:56:73:b0:94:7d:2c:3d:08:
                    c2:bc:11:51:23:3e:fe:c5:cd:c5:68:1d:23:d9:e8:
                    99:07:4c:fa:c4:3e:bb:5e:28:ae:c6:bc:0e:a1:ba:
                    ee:4d:b3:0d:15:25:a3:e9:ab:da:02:0d:61:0f:91:
                    58:4c:66:af:e2:b9:29:73:c6:8c:24:c6:cd:a9:4b:
                    37:79:6b:5a:1a:51:49:bd:7c:1a:1d:58:01:75:69:
                    9a:41:2a:01:a0:e7:ea:b4:2d:62:ab:fb:c7:6e:90:
                    f8:62:66:1f:b2:e1:bf:07:17:de:e4:3b:d8:7b:ea:
                    46:10:34:ae:b4:05:82:30:d0:6f:aa:74:20:0a:1d:
                    5c:28:b0:e8:7a:9c:95:67:5c:07:e5:ff:7b:19:ae:
                    e4:20:1d:06:a6:67:45:6c:94:43:5f:40:8c:41:63:
                    30:53:00:1e:32:84:57:a2:d5:23:2e:f1:7d:b8:76:
                    ac:5d:ca:2d:f7:4a:4e:c1:72:38:f5:0c:51:c6:c8:
                    2b:f0:13:c0:45:a4:b9:5d:fb:2c:51:c6:a7:65:c8:
                    fd:e7:ac:dd:85:c1:59:d1:0d:09:90:95:ce:a4:3b:
                    8e:e1:d1:e4:75:91:9f:85:77:c8:a2:4e:63:1e:ee:
                    a7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:8F:87:7A:1B:32:A8:6A:71:79:95:53:F2:69:D6:2C:8E:62:4E:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/c728a5d9-d7c5-3f6f-ab84-a5c66c6f642b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6fb18968-7aa5-41e5-96b6-c45c25a566e8.crl

            X509v3 Authority Key Identifier:
                keyid:C6:9F:AC:EA:70:7D:E0:51:AB:C5:1B:82:39:4D:0E:73:3A:A2:A1:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.207.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:77:53:a5:73:af:d4:a8:52:b9:b4:e2:45:4f:c4:26:af:ba:
         60:c7:46:ad:9c:bb:e6:2d:9f:b3:42:81:72:a0:fe:b9:34:9d:
         9e:ef:91:f7:db:88:24:3f:d2:26:11:e1:ea:42:e2:7b:83:10:
         c4:47:3f:d4:6f:42:e5:43:ea:a3:99:f1:99:97:f8:44:a1:26:
         f5:ac:34:f1:e1:48:21:05:a5:36:dc:82:ad:2b:73:eb:5d:58:
         e0:e4:b8:fc:32:2c:64:72:99:35:e5:5f:f9:cd:b6:61:03:51:
         8f:b2:6d:dc:d1:b2:7e:80:f6:fd:fd:a1:e2:b2:f1:a5:e3:42:
         b5:77:52:f5:d7:37:7a:b9:0c:a0:2e:14:26:4a:0b:72:ad:c6:
         af:d7:ba:2d:fd:1c:ac:00:f3:fa:5a:b7:ee:26:9c:8e:9d:9c:
         7f:b2:d0:68:6b:01:c0:d1:a6:1c:46:80:75:76:b1:92:e4:4d:
         e4:95:82:59:0d:9e:2b:c7:48:40:e6:58:10:cd:18:32:3f:6f:
         ba:59:be:6f:a5:45:4a:88:ef:e2:30:9f:7f:22:cf:76:86:05:
         f5:97:56:c7:a1:90:f8:6f:75:bf:9b:f6:68:44:2f:3f:b1:b6:
         14:22:9a:b1:2c:8e:1b:ad:fe:7e:82:8d:03:67:16:5f:49:9d:
         50:ff:f6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 06:06:04 2026 by rpki-client