Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2649ead5-2330-3ec5-a70e-0603b6659232.roa
File:                     2649ead5-2330-3ec5-a70e-0603b6659232.roa (raw, json)
Hash identifier:          xYjAa4oboZA4qIfMoo6JJHX1McIqqi0J4OBT5QV0nGo=
Subject key identifier:   FC:76:DA:80:08:97:DD:99:93:94:06:23:74:C6:33:1B:5F:C9:08:0B
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E4129C3F4B53D1229A1026C40
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2649ead5-2330-3ec5-a70e-0603b6659232.roa
Signing time:             Mon 22 Jun 2026 09:00:11 +0000
ROA not before:           Mon 22 Jun 2026 09:00:11 +0000
ROA not after:            Sun 20 Sep 2026 09:00:11 +0000
asID:                     30036
IP address blocks:        192.119.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:29:c3:f4:b5:3d:12:29:a1:02:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun 22 09:00:11 2026 GMT
            Not After : Sep 20 09:00:11 2026 GMT
        Subject: CN=d31a3e5c-68c6-43b5-82d0-feaf08bd5f5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6d:7f:c2:5e:28:21:43:5f:6d:7a:57:0c:4b:
                    44:e6:b5:4d:79:e3:fa:f6:4a:47:cf:b7:11:17:96:
                    17:8f:a3:05:b4:01:3c:b8:75:59:9f:b9:7e:d8:21:
                    24:db:39:7a:3c:b6:bf:67:34:63:e3:d3:79:45:d2:
                    9e:d8:06:6f:4e:cf:5d:4f:b5:0a:aa:fa:7f:6b:96:
                    3a:bb:90:19:48:f0:89:85:b9:1b:02:53:f9:4b:74:
                    51:74:44:4d:6d:f0:19:06:2f:81:e3:66:e7:97:3c:
                    34:74:19:bb:f5:bc:76:e7:23:1f:c8:e2:8f:17:60:
                    6b:e8:3d:10:ef:c7:ae:2f:75:e3:88:8f:55:be:9f:
                    fa:73:48:eb:6d:f7:a8:70:61:44:88:cb:7f:db:1b:
                    94:57:ab:e0:7a:d9:1f:3e:e2:55:7a:05:ad:73:c9:
                    fa:ea:cb:37:83:b0:23:cd:2c:b2:4e:94:f2:61:b9:
                    cf:0c:d0:1c:a1:15:a1:00:e6:ba:c7:ce:d3:13:9e:
                    21:a4:9f:eb:b7:93:d0:2e:4b:98:97:65:c1:70:0e:
                    9e:b9:d1:11:d0:e4:89:66:2b:17:cf:87:8c:a5:7b:
                    85:22:a1:c4:17:0f:56:b4:a1:e9:65:d2:62:4b:a5:
                    24:a6:fe:d2:7d:9f:05:2b:38:54:00:30:9a:fc:59:
                    3b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:76:DA:80:08:97:DD:99:93:94:06:23:74:C6:33:1B:5F:C9:08:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2649ead5-2330-3ec5-a70e-0603b6659232.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.119.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:98:f2:b3:ba:00:72:e8:55:7e:4b:de:65:fa:38:c7:f0:5e:
         f1:47:4f:ea:73:52:1f:09:53:31:b0:89:d3:b4:75:6d:84:21:
         47:bd:c0:72:3b:d0:67:4b:0d:63:27:6d:44:42:c3:25:b9:3f:
         5a:cf:e5:93:9a:f7:4e:35:a1:87:ef:6a:ce:41:43:2e:ad:99:
         38:2d:7f:cc:34:4e:0d:49:08:97:9f:77:ba:7d:07:0f:6c:a8:
         2e:f4:2b:28:80:51:ec:38:c2:a8:69:38:e1:71:f5:3b:f8:57:
         09:e3:2b:a4:b4:a5:d6:77:97:f7:9c:5f:ea:da:58:6a:a0:82:
         b7:9d:0b:6c:3f:1e:c2:5a:48:de:ce:75:4f:30:5e:b3:50:cc:
         c5:e4:d0:0d:ad:ea:63:0b:aa:0e:6f:67:3a:5c:ab:0d:1b:ae:
         9c:5c:9c:8a:bf:31:1f:ff:e6:f4:f5:1f:bb:a8:29:19:27:ab:
         89:e6:29:74:77:3a:7b:c8:48:cd:16:2c:34:9a:d7:61:68:de:
         c1:23:04:2d:85:41:d1:a8:57:b6:f5:46:7d:3f:9c:04:aa:8d:
         72:17:2c:52:6e:1a:4f:3d:66:3b:82:e6:c3:22:18:b8:6e:f5:
         e4:69:a2:a4:07:20:7a:ed:13:f7:9a:fe:02:45:74:e3:61:e7:
         af:5a:3f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 03:22:16 2026 by rpki-client