Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2f3264de-28c1-3302-b929-7cf8d7c207e2.roa
File:                     2f3264de-28c1-3302-b929-7cf8d7c207e2.roa (raw, json)
Hash identifier:          6achuQ9T0bbR5H2p32+UGzRCDQB9C59ACV+N4Flh/tw=
Subject key identifier:   CD:6B:61:86:FD:A0:47:4F:5B:08:7D:20:48:4D:82:72:CC:81:05:7F
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E4129C7DE86C50CBA8ADDCC00
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2f3264de-28c1-3302-b929-7cf8d7c207e2.roa
Signing time:             Mon 22 Jun 2026 09:00:11 +0000
ROA not before:           Mon 22 Jun 2026 09:00:11 +0000
ROA not after:            Sun 20 Sep 2026 09:00:11 +0000
asID:                     30036
IP address blocks:        192.119.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:29:c7:de:86:c5:0c:ba:8a:dd:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun 22 09:00:11 2026 GMT
            Not After : Sep 20 09:00:11 2026 GMT
        Subject: CN=85bd8019-57e8-485b-a6cd-ec9e32f1ecd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f4:22:fe:15:22:87:1c:24:58:16:2f:3c:08:
                    c1:97:44:e7:c6:44:9d:ed:9f:3a:14:2f:85:34:57:
                    82:91:2c:24:dc:75:ea:ef:da:a0:df:40:6d:00:9a:
                    44:e6:e2:7f:22:9f:c6:5d:ee:e7:91:5a:81:46:1b:
                    10:69:04:b3:69:87:a9:36:46:3e:aa:59:62:20:0e:
                    5e:d7:c0:1e:48:10:e1:74:8f:03:5d:97:13:48:6a:
                    22:76:e1:65:a0:29:ef:45:0c:3b:d5:f6:e5:21:64:
                    a5:5d:dd:50:25:19:fb:44:b4:5d:ec:8e:ae:0c:77:
                    b2:71:01:5f:98:1d:b7:a4:77:67:60:12:43:49:fd:
                    71:82:0b:e6:e7:7c:9d:bd:41:45:66:aa:db:60:de:
                    71:2b:3f:99:97:41:a4:5f:96:12:da:c7:10:e8:84:
                    68:02:9e:47:00:b7:18:86:d8:6b:43:9c:5c:98:09:
                    38:9d:cd:74:5d:e8:4a:65:11:c8:ba:98:1b:cf:de:
                    80:ea:72:ee:ac:80:ab:05:32:bc:8e:84:81:c5:0d:
                    18:47:b5:d4:2e:8a:35:30:dd:9f:80:7b:7f:34:7a:
                    d0:77:d7:5b:60:ea:3a:12:93:14:73:5f:cb:c4:7b:
                    00:32:f2:40:0b:1a:8f:23:8a:5e:be:cb:1e:bc:f0:
                    c2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:6B:61:86:FD:A0:47:4F:5B:08:7D:20:48:4D:82:72:CC:81:05:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2f3264de-28c1-3302-b929-7cf8d7c207e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.119.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:4c:a3:f2:05:d4:5b:2d:8d:03:35:23:1e:c7:b8:af:39:0e:
         06:9d:25:39:bd:ea:b5:99:5a:03:89:7e:0b:9b:39:96:b0:25:
         17:63:5c:48:37:a6:25:ed:b5:cd:48:06:68:39:3c:3c:6d:cb:
         b4:ed:6a:0e:89:ab:2b:ca:d7:a7:72:df:09:0e:cc:d3:04:2d:
         0b:20:3d:2e:82:0b:50:ec:5e:13:40:ea:58:45:91:86:f0:60:
         8e:62:dc:8e:37:2c:7d:60:fd:49:75:10:8b:7e:17:c0:25:5f:
         30:8d:02:9d:65:21:5e:a7:1c:6a:c5:93:df:e8:40:1a:16:3e:
         a4:15:91:fa:f9:1a:16:a4:0e:fa:f4:66:a7:e6:da:0e:de:b7:
         3d:20:4c:3f:19:d5:4a:54:2f:ea:a7:19:c7:36:6e:99:05:4c:
         69:f0:b7:4f:20:ae:85:67:9d:1f:58:4f:25:f3:b5:42:28:c8:
         78:68:d2:1c:20:49:2f:ce:c1:57:b7:6f:6d:27:28:11:c1:6e:
         65:ec:17:39:38:33:6d:17:c8:3f:e4:10:15:ab:f6:3b:a1:88:
         97:dc:85:4a:61:99:69:15:b4:01:e6:f8:75:33:61:4e:b9:6a:
         4b:e7:dd:04:7e:cb:c8:ef:b3:ce:9b:5c:39:b9:36:ab:c8:75:
         e0:64:34:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 04:23:58 2026 by rpki-client