Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/540698f2-284c-35b9-b18d-c574ef5a181c.roa
File:                     540698f2-284c-35b9-b18d-c574ef5a181c.roa (raw, json)
Hash identifier:          sgf/NUDk7HUCwESalXT0c59owJeOuLQCIVmr+rK/5Co=
Subject key identifier:   F0:1D:C3:EA:83:6C:B3:C4:91:B6:29:D2:5B:8B:F2:23:64:1C:11:88
Certificate issuer:       /CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae
Certificate serial:       010D0C9F4328584EB416EFB521185C07A6347800
Authority key identifier: 0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/540698f2-284c-35b9-b18d-c574ef5a181c.roa
Signing time:             Sun 02 Aug 2026 13:00:12 +0000
ROA not before:           Sun 02 Aug 2026 13:00:12 +0000
ROA not after:            Sat 31 Oct 2026 13:00:12 +0000
asID:                     33146
IP address blocks:        209.222.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Aug 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b4:16:ef:b5:21:18:5c:07:a6:34:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae
        Validity
            Not Before: Aug  2 13:00:12 2026 GMT
            Not After : Oct 31 13:00:12 2026 GMT
        Subject: CN=00492a0f-ee7c-4281-b5c0-0911db345843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c5:c7:a8:09:14:29:50:a2:91:88:c4:78:42:
                    0e:39:76:1b:7a:d2:53:17:45:86:db:96:6d:61:d7:
                    35:9c:ce:62:89:9f:a9:f4:ad:3b:c4:16:59:6c:19:
                    91:d9:a4:e5:7f:2a:bf:44:5d:fb:9c:ca:a9:ab:47:
                    06:50:9d:14:a0:1d:61:30:5e:82:c1:86:f2:a3:27:
                    82:59:fc:8c:cd:19:8f:8a:75:98:8b:ff:40:5c:dc:
                    e5:9f:01:77:4d:97:b2:19:79:6c:c5:af:bb:e3:43:
                    78:8f:05:5a:fd:1e:bc:f9:9b:a6:96:36:56:cf:f7:
                    c2:b8:bf:05:c6:9f:b2:d5:24:6c:08:36:56:b3:00:
                    51:0e:25:2d:5b:1d:53:bd:ac:99:fb:b1:45:9f:e5:
                    1e:42:fa:eb:f5:47:de:30:28:c8:95:4a:68:d1:66:
                    06:24:6a:4e:3e:91:e0:83:a5:b9:28:c1:7e:bb:37:
                    bf:8d:bc:ce:d1:fb:f0:07:02:50:0b:68:eb:15:a8:
                    62:fc:97:08:4f:82:9e:3d:bc:21:cb:aa:49:8a:15:
                    0f:80:63:28:d1:e3:26:81:7c:fb:f3:ac:67:f0:8d:
                    54:e9:e2:e0:1f:e4:42:ba:40:52:90:85:ff:63:0c:
                    00:c7:cf:bd:6b:3f:63:6a:70:88:ba:cf:e2:7d:7c:
                    91:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:1D:C3:EA:83:6C:B3:C4:91:B6:29:D2:5B:8B:F2:23:64:1C:11:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/540698f2-284c-35b9-b18d-c574ef5a181c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.222.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:ad:2a:45:bb:0d:58:7e:0d:64:fb:92:49:a7:15:0e:38:53:
         0e:21:2b:b4:e1:b6:95:cc:2c:70:a7:1e:56:47:00:53:4d:f1:
         f8:db:df:c9:2b:a9:2c:53:84:33:18:35:4c:16:4b:bc:cd:44:
         c8:b2:42:24:d8:63:a2:08:f4:da:72:23:76:00:cc:ac:42:3f:
         ec:8b:36:f8:37:a5:8a:17:bc:33:6b:cb:e8:e2:f4:84:3b:f1:
         85:b8:cb:04:6b:d6:0b:00:43:42:ce:d3:f5:c8:ac:27:32:95:
         ab:c8:a4:cd:b8:bf:32:11:f1:99:34:28:2a:dd:73:1a:20:78:
         68:71:12:95:30:36:0c:21:51:5f:0b:15:f5:c6:6f:72:a5:6e:
         2a:21:8f:05:21:6c:1b:8f:70:76:64:59:35:d7:ab:b1:4b:e2:
         cd:68:3a:c4:63:c3:d8:4e:0a:59:ed:44:2a:cf:66:40:2a:ab:
         58:cf:59:2c:2c:e9:7e:34:a4:c6:1f:87:9e:d6:86:64:d6:90:
         f2:43:ec:34:b9:d3:a4:56:61:11:f9:f5:12:ad:1a:79:78:26:
         0a:84:28:90:c6:96:55:ec:5b:b2:ec:23:6f:55:ef:7c:e8:dc:
         58:66:c6:df:bf:2f:0b:05:37:b5:bd:5a:6d:a6:59:b3:61:f9:
         1b:72:17:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 22:18:09 2026 by rpki-client