Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7470f73a-61d0-4b9c-80ff-a407cc438710/c51b086f-87b8-314b-a8e9-bb4db249b1c4.roa
File:                     c51b086f-87b8-314b-a8e9-bb4db249b1c4.roa (raw, json)
Hash identifier:          f52w6r2sQPe0ykT8DV/XSorHy0KTzIIr/GsoE2Kiq3Q=
Subject key identifier:   46:A0:8B:15:6B:34:0E:33:7E:31:98:29:50:C8:F2:BA:CB:2E:20:26
Certificate issuer:       /CN=7470f73a-61d0-4b9c-80ff-a407cc438710
Certificate serial:       010D0C9F4328584EC7A1D131265AD713916F8480
Authority key identifier: 1D:52:3F:BE:0B:2A:AE:E8:90:D7:B1:5A:EA:9B:77:79:8D:E7:2F:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7470f73a-61d0-4b9c-80ff-a407cc438710.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7470f73a-61d0-4b9c-80ff-a407cc438710/c51b086f-87b8-314b-a8e9-bb4db249b1c4.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     10821
IP address blocks:        24.224.0.0/19 maxlen: 24
                          206.253.32.0/19 maxlen: 24
                          209.42.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7470f73a-61d0-4b9c-80ff-a407cc438710/7470f73a-61d0-4b9c-80ff-a407cc438710.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7470f73a-61d0-4b9c-80ff-a407cc438710/7470f73a-61d0-4b9c-80ff-a407cc438710.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7470f73a-61d0-4b9c-80ff-a407cc438710.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:d1:31:26:5a:d7:13:91:6f:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7470f73a-61d0-4b9c-80ff-a407cc438710
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=b6fa009d-ba36-4def-af8f-56fa21b542bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c5:19:61:a1:07:51:5c:b3:9a:a2:75:ce:1d:
                    0a:02:49:13:c8:37:c7:53:64:8b:29:2a:50:4d:86:
                    41:42:ca:27:a8:a2:ff:2d:3d:e5:21:88:43:19:a8:
                    b9:0f:00:c8:4c:6b:94:42:df:da:31:f1:8c:a3:2f:
                    79:18:ff:d5:1d:86:56:fa:5a:ef:90:9f:6f:71:71:
                    ac:3c:a3:df:56:1c:9b:54:a8:ea:78:3c:78:7a:6d:
                    98:87:55:f0:b6:2d:b3:c4:a1:57:27:7f:30:dc:e9:
                    64:c6:ec:d0:1b:a3:47:ed:36:17:63:71:c7:ff:17:
                    98:75:f1:1a:28:0e:30:06:26:9c:e0:0b:6c:9a:c3:
                    7d:43:dc:80:4e:30:90:98:e8:18:0c:41:e8:56:e5:
                    ea:6c:e6:b0:12:e9:ae:e2:c0:33:a0:27:1a:ad:6f:
                    50:72:71:ac:ad:39:2b:e9:e9:c0:75:08:c0:73:a0:
                    ce:97:4e:a2:48:8d:47:9f:f5:c9:db:c9:06:ac:cb:
                    56:20:b3:d0:a1:f6:ec:f3:82:f8:97:28:12:5b:46:
                    0a:93:19:17:71:38:81:b5:f6:bd:bd:a8:b1:40:c9:
                    70:5f:37:b1:44:45:1e:41:d5:d4:e0:ff:88:8f:aa:
                    97:da:13:2d:76:9b:6e:0d:c5:7f:be:01:19:47:1b:
                    81:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A0:8B:15:6B:34:0E:33:7E:31:98:29:50:C8:F2:BA:CB:2E:20:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7470f73a-61d0-4b9c-80ff-a407cc438710/c51b086f-87b8-314b-a8e9-bb4db249b1c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7470f73a-61d0-4b9c-80ff-a407cc438710/7470f73a-61d0-4b9c-80ff-a407cc438710.crl

            X509v3 Authority Key Identifier:
                keyid:1D:52:3F:BE:0B:2A:AE:E8:90:D7:B1:5A:EA:9B:77:79:8D:E7:2F:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7470f73a-61d0-4b9c-80ff-a407cc438710.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.224.0.0/19
                  206.253.32.0/19
                  209.42.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:88:09:58:69:d0:4d:7f:e6:22:53:53:a3:5e:2f:02:c7:bd:
         55:ed:60:88:2a:e7:13:c3:37:98:50:5e:37:5c:ff:ee:03:98:
         8c:b2:54:ff:da:25:fd:ee:36:72:92:ef:55:c9:f9:be:43:10:
         99:6b:a0:36:74:a2:fb:f1:37:44:44:50:b4:56:5c:4d:59:2a:
         0c:a8:9e:5e:fe:9f:8f:8b:16:6c:8e:73:0a:67:01:b9:26:bb:
         4f:bb:d3:c0:b7:f5:60:2f:fa:cd:42:d2:5a:b9:a7:0b:da:36:
         dc:1a:21:35:61:fe:bf:91:0f:56:49:7d:c9:d0:db:1e:ad:11:
         81:67:84:1d:1a:d7:87:d1:af:ec:d4:c5:5c:dc:b7:63:0a:7e:
         1b:f6:bf:18:d6:b5:55:0b:a0:69:19:3f:53:97:39:db:6f:5c:
         12:8c:1a:f6:08:5a:b5:1f:fd:5f:79:01:94:a8:e5:2c:5e:86:
         7d:61:df:6f:1c:57:6c:b3:6c:92:50:d8:4d:25:b1:d0:ec:3c:
         2a:c5:03:0d:e9:09:3d:9a:e8:c4:ad:d0:8f:87:0f:a1:ce:20:
         40:c2:93:f6:c7:18:10:a0:8f:e4:9a:24:4d:aa:da:8d:ea:d3:
         8a:76:85:be:55:88:97:9d:f4:aa:16:85:51:18:51:40:da:4e:
         09:a0:7f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:43:05 2026 by rpki-client