Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/392f74fe-624d-3f70-8d51-c9bcea16980f.roa
File:                     392f74fe-624d-3f70-8d51-c9bcea16980f.roa (raw, json)
Hash identifier:          C4GjfzDRRd7FYyS24uT0+OfEUIWSXiiwISZJ4bm3D6k=
Subject key identifier:   05:1D:8D:71:FE:97:14:CB:F3:C1:08:2B:E6:C9:A0:5B:3E:91:75:4C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA78D5A5CA2CBFBCE9D034980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/392f74fe-624d-3f70-8d51-c9bcea16980f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     33667
IP address blocks:        209.23.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8d:5a:5c:a2:cb:fb:ce:9d:03:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a7bd7c7f-4d29-40cb-bbe0-f4c056d80230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bf:07:48:3a:e6:35:d7:fd:2d:f3:7b:a6:39:
                    d8:a0:81:82:41:f0:51:50:e5:60:cd:60:b0:59:8b:
                    ca:db:2e:b8:36:77:47:65:2a:2b:bb:c3:e1:07:84:
                    df:85:d9:81:19:3c:17:15:fa:6d:69:bd:63:9d:54:
                    be:94:35:8d:e8:e4:14:36:20:50:c0:6b:3b:c6:46:
                    92:13:63:8f:4e:0c:21:d0:a9:19:d8:05:5c:d7:f9:
                    2e:53:38:3e:b2:68:3a:79:32:42:cc:98:70:34:48:
                    27:7d:ec:30:51:18:64:20:59:57:57:88:8f:85:d5:
                    b1:76:5b:6c:e4:87:c7:2c:7c:76:f9:79:1b:62:0a:
                    75:35:53:7c:a2:ff:88:29:d0:09:94:a4:13:e8:2b:
                    43:5d:b4:6b:ec:47:b4:8e:4c:44:30:6c:ca:4d:f3:
                    e7:b6:d2:1c:12:15:63:58:f1:16:8e:f3:47:da:a3:
                    ce:19:82:6c:70:f4:74:98:b7:62:ca:ad:bb:2f:c0:
                    a4:cd:3d:28:d6:f3:5f:13:7d:66:50:ea:d9:e9:38:
                    0b:fd:66:c5:36:ba:9b:22:16:35:ca:6f:27:22:ac:
                    6a:0a:83:06:0b:58:e2:64:f4:11:1b:7e:e8:37:ee:
                    44:eb:6f:32:9a:33:37:36:56:e7:c4:5c:68:b7:29:
                    bc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1D:8D:71:FE:97:14:CB:F3:C1:08:2B:E6:C9:A0:5B:3E:91:75:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/392f74fe-624d-3f70-8d51-c9bcea16980f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.23.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:56:9a:f2:ce:39:8f:c1:4c:30:bb:d6:3d:98:5d:d6:17:e0:
         9c:f8:b4:a9:4d:2a:5c:6f:6e:c6:17:9b:11:f5:67:5b:2c:45:
         ae:ef:fe:25:43:3a:81:48:0f:39:f2:c6:db:6e:6b:88:de:fd:
         47:ee:ab:81:60:88:3e:ca:25:e8:74:c5:2b:d9:88:06:c0:60:
         d5:12:75:67:bb:37:5f:5f:ba:51:07:e5:5e:6b:ba:4f:e7:a4:
         63:a8:6c:31:44:78:b8:52:d6:3a:70:ea:cf:dc:e0:2e:aa:50:
         85:c2:27:a3:68:38:e4:98:ff:2c:e5:99:4d:b9:a4:da:1b:40:
         40:3b:ed:c1:6a:8c:c3:fd:56:fa:56:3f:a1:bf:e4:7a:ce:c4:
         22:cb:87:8e:2e:bf:7d:30:9e:76:3a:3a:79:02:c2:97:01:a8:
         69:20:57:9a:5e:ba:76:21:dd:62:ea:d4:5b:82:59:1f:c8:e3:
         c2:80:fd:0f:6f:a7:4d:aa:91:9f:87:01:3d:82:1f:7c:1b:72:
         92:f3:ca:cd:30:b4:73:c5:a6:a5:c8:68:94:8f:f6:30:c6:01:
         11:fd:81:7e:7d:29:c7:2c:06:75:99:a2:40:3e:4f:f0:59:41:
         f0:19:c0:79:1f:a5:7d:eb:60:a5:b8:3a:13:b4:4a:2d:48:ad:
         17:a9:41:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 12:23:58 2026 by rpki-client