Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/44ad5312-3568-3fbb-ae0b-db218adc5fdb.roa
File:                     44ad5312-3568-3fbb-ae0b-db218adc5fdb.roa (raw, json)
Hash identifier:          tmPd58NB4Cz6ds1fmzNdreCMfsiUQ4hW595zewF0B4Q=
Subject key identifier:   AB:3D:25:31:D1:1A:6C:26:9C:91:33:D8:0D:14:46:51:89:C2:DA:30
Certificate issuer:       /CN=e407c8fd-b808-41d1-af5e-a88d2dd556f9
Certificate serial:       010D0C9F4328584E4AEF51129360B852E8975C78
Authority key identifier: 39:88:56:13:51:28:01:35:37:02:BA:15:76:26:0A:52:03:98:3E:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/44ad5312-3568-3fbb-ae0b-db218adc5fdb.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     396982
IP address blocks:        209.133.224.0/24 maxlen: 24
                          209.133.225.0/24 maxlen: 24
                          209.133.226.0/24 maxlen: 24
                          209.133.227.0/24 maxlen: 24
                          209.133.228.0/24 maxlen: 24
                          209.133.229.0/24 maxlen: 24
                          209.133.230.0/24 maxlen: 24
                          209.133.231.0/24 maxlen: 24
                          209.133.232.0/24 maxlen: 24
                          209.133.233.0/24 maxlen: 24
                          209.133.234.0/24 maxlen: 24
                          209.133.235.0/24 maxlen: 24
                          209.133.236.0/24 maxlen: 24
                          209.133.237.0/24 maxlen: 24
                          209.133.238.0/24 maxlen: 24
                          209.133.239.0/24 maxlen: 24
                          209.133.240.0/24 maxlen: 24
                          209.133.241.0/24 maxlen: 24
                          209.133.242.0/24 maxlen: 24
                          209.133.243.0/24 maxlen: 24
                          209.133.244.0/24 maxlen: 24
                          209.133.245.0/24 maxlen: 24
                          209.133.247.0/24 maxlen: 24
                          209.133.248.0/24 maxlen: 24
                          209.133.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/e407c8fd-b808-41d1-af5e-a88d2dd556f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/e407c8fd-b808-41d1-af5e-a88d2dd556f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:51:12:93:60:b8:52:e8:97:5c:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e407c8fd-b808-41d1-af5e-a88d2dd556f9
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=de44524e-1806-4f35-892c-113c472fdb53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:64:43:da:bd:d7:aa:d2:f6:96:78:a8:80:30:
                    d8:a8:28:4e:3d:fd:e8:71:6c:3e:fd:2e:f6:35:b5:
                    e0:89:5f:bb:7f:58:03:8d:0f:7b:13:bf:71:72:18:
                    11:f1:1a:6d:cf:d4:5b:a7:72:88:14:d5:4a:c7:21:
                    11:ec:82:b0:de:36:cf:da:9e:de:22:0c:38:12:d0:
                    7f:20:e4:d8:90:e6:75:a5:e5:f3:12:ac:d8:2a:55:
                    2a:20:2d:8b:65:e6:45:24:9b:2f:49:a5:24:08:ba:
                    ac:1d:ba:b2:c3:7f:c4:05:cf:0e:67:c6:a6:0c:40:
                    74:ac:27:7e:2c:bc:2f:cc:58:7a:00:73:b3:ee:21:
                    9f:17:80:c3:9f:72:aa:3a:0b:1a:f2:d3:d8:36:f8:
                    5c:4c:64:56:d2:16:58:71:85:e7:ea:44:ce:15:af:
                    f8:f3:b4:31:a9:2a:01:59:57:36:02:03:4e:8e:6a:
                    7d:00:f0:07:5f:7e:30:74:e6:35:8d:26:4f:3c:55:
                    69:e0:d3:8e:b7:d0:dc:d2:cf:e9:5f:30:ca:58:03:
                    9e:7f:90:56:62:23:a6:d1:e4:bd:66:ea:de:63:b6:
                    de:88:48:fd:bc:dc:a8:0d:0a:bc:8a:7d:61:b9:1b:
                    29:5b:26:84:fe:9c:7f:29:fb:34:6a:70:c9:ac:5b:
                    09:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:3D:25:31:D1:1A:6C:26:9C:91:33:D8:0D:14:46:51:89:C2:DA:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/44ad5312-3568-3fbb-ae0b-db218adc5fdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/e407c8fd-b808-41d1-af5e-a88d2dd556f9.crl

            X509v3 Authority Key Identifier:
                keyid:39:88:56:13:51:28:01:35:37:02:BA:15:76:26:0A:52:03:98:3E:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.133.224.0-209.133.245.255
                  209.133.247.0-209.133.249.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:06:6d:05:21:68:11:52:21:ae:0c:d7:b7:ad:4b:78:ef:3c:
         f6:01:cf:c2:9e:fe:49:ad:9a:a1:87:1c:46:3d:cb:3f:2a:4a:
         d5:61:68:e6:8c:82:ba:ba:51:ba:0b:f2:9a:f4:86:ec:42:c4:
         aa:c5:5e:a4:1b:56:b0:65:9b:c4:e5:ba:24:62:66:48:33:73:
         42:6e:8f:dd:aa:e0:13:71:50:ca:ed:0c:87:2e:77:83:68:3e:
         d7:5c:c7:8c:b3:9e:09:8a:09:a8:ad:32:e9:c4:e3:7a:32:de:
         cc:8c:99:30:de:99:3c:db:0c:42:49:c1:47:22:61:0c:fc:13:
         b0:d0:5f:bc:60:e8:8c:4c:04:97:38:bd:64:a9:3b:e4:f9:a1:
         f2:60:91:db:ca:28:39:eb:67:0a:0f:87:d9:50:0f:f6:87:65:
         f8:d5:f1:1a:20:15:07:4b:c0:d2:f5:e6:0d:45:95:ec:4e:04:
         a1:93:7a:a2:41:22:3e:5e:3f:f3:e1:94:df:df:9f:d2:44:c5:
         9c:8f:e7:97:9e:8a:04:9e:ea:26:32:a3:de:67:21:31:93:02:
         61:3e:1a:fb:41:52:27:54:5e:ae:eb:37:67:91:4a:86:dd:85:
         f8:5f:12:a4:a4:90:93:a7:a1:71:ed:02:94:f3:3f:98:39:11:
         b9:d3:80:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 20:05:04 2026 by rpki-client