Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/0a4a278a-43d9-34d7-b741-e7725dd4623c.roa
File:                     0a4a278a-43d9-34d7-b741-e7725dd4623c.roa (raw, json)
Hash identifier:          zp+XGjwRXagoOlqpyB0toaaOyraeL9WE7D56jIOsr1c=
Subject key identifier:   84:B7:E0:61:EF:8D:3F:71:BC:08:59:EC:AB:D5:0A:9B:FD:F9:44:A8
Certificate issuer:       /CN=e8522b95-144f-483f-bbfb-bec0605ebf8c
Certificate serial:       010D0C9F4328584E5084902803810B3E1C996180
Authority key identifier: 01:1D:7C:FA:C5:58:E8:48:89:6B:20:DD:D7:D5:CF:15:D3:0E:20:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/0a4a278a-43d9-34d7-b741-e7725dd4623c.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     11023
IP address blocks:        209.251.33.0/24 maxlen: 24
                          209.251.34.0/24 maxlen: 24
                          209.251.35.0/24 maxlen: 24
                          209.251.36.0/24 maxlen: 24
                          209.251.37.0/24 maxlen: 24
                          209.251.38.0/24 maxlen: 24
                          209.251.39.0/24 maxlen: 24
                          209.251.40.0/24 maxlen: 24
                          209.251.41.0/24 maxlen: 24
                          209.251.42.0/24 maxlen: 24
                          209.251.43.0/24 maxlen: 24
                          209.251.44.0/24 maxlen: 24
                          209.251.45.0/24 maxlen: 24
                          209.251.46.0/24 maxlen: 24
                          209.251.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/e8522b95-144f-483f-bbfb-bec0605ebf8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/e8522b95-144f-483f-bbfb-bec0605ebf8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:90:28:03:81:0b:3e:1c:99:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8522b95-144f-483f-bbfb-bec0605ebf8c
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=181b1920-0768-4f5d-b17e-d92d05ba964e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:58:0f:a3:86:22:25:f8:0a:59:e3:2b:4e:f9:
                    af:91:72:c9:96:cb:e4:ae:c8:01:a4:8c:80:0d:50:
                    06:53:4c:d1:b2:a3:ec:b6:6a:05:2f:90:72:1f:bc:
                    87:33:83:8e:bb:65:d3:70:34:27:7f:13:59:75:10:
                    6e:1e:38:84:05:21:ba:8f:ff:ee:04:a4:cf:77:7a:
                    9e:f5:0a:c3:f8:18:c9:f5:69:e0:0e:6a:78:3f:df:
                    ee:aa:da:a9:4d:ab:96:ff:01:b9:fc:58:a5:3e:22:
                    f6:b2:94:90:ad:3b:2b:a0:f8:d2:65:da:d8:4e:66:
                    94:7b:11:3c:2a:7f:fe:08:e9:00:a0:03:80:e9:cf:
                    5c:66:6c:fa:5b:fd:a5:67:38:f2:c7:e7:73:db:d0:
                    4d:82:d1:61:5e:43:99:5d:d2:74:64:7a:51:c0:f5:
                    58:de:b1:41:54:ad:6a:dd:81:48:28:d4:d0:6f:1f:
                    04:bc:3e:51:18:c5:43:24:58:9b:b1:ca:8c:d9:fe:
                    c2:f3:35:9d:7e:3d:2d:0c:b7:4c:18:62:17:b2:3f:
                    f6:ed:a6:cb:df:01:1c:50:eb:3a:e4:2f:d6:ed:be:
                    9e:c8:7e:7f:c3:85:b3:50:17:e6:5c:2e:e1:c6:2f:
                    33:1f:d9:cc:f5:3d:38:e1:c4:0a:7d:a0:bf:7b:79:
                    99:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B7:E0:61:EF:8D:3F:71:BC:08:59:EC:AB:D5:0A:9B:FD:F9:44:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/0a4a278a-43d9-34d7-b741-e7725dd4623c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/e8522b95-144f-483f-bbfb-bec0605ebf8c.crl

            X509v3 Authority Key Identifier:
                keyid:01:1D:7C:FA:C5:58:E8:48:89:6B:20:DD:D7:D5:CF:15:D3:0E:20:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.251.33.0-209.251.47.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:6b:5f:ac:da:d2:bc:85:d8:14:eb:5d:7b:2b:a5:e4:37:62:
         48:bc:30:b5:65:33:04:aa:cf:15:04:d7:59:7a:5b:8f:2a:39:
         95:6e:6e:e3:62:19:b1:40:59:f0:30:19:a0:49:63:92:fd:d1:
         1f:35:cc:ee:9c:3c:a8:25:b3:e8:28:0b:c3:ea:45:d4:ac:e7:
         4e:b9:fc:06:c1:01:97:d5:74:75:ec:d9:87:b9:79:4d:bf:78:
         ad:9d:fd:c5:09:23:5b:9a:e3:9b:6d:85:56:cd:9f:35:78:3a:
         48:52:45:c7:86:a4:73:99:6c:35:91:c2:41:ef:4c:38:02:78:
         fb:a2:83:a9:e0:c3:5f:3b:9e:1e:97:6d:68:e8:31:a2:94:75:
         c7:5f:66:51:f0:42:3e:c5:8a:c7:61:ef:8e:9d:0d:4d:9a:78:
         b0:b3:47:de:8a:15:79:c5:5d:d5:06:b8:3c:fe:73:19:b9:78:
         83:b3:1b:41:3e:33:0a:6b:64:56:18:5c:5c:7f:88:f5:7d:7f:
         ec:4c:5d:1f:8a:8e:c2:ee:a8:b1:02:fa:e8:17:49:57:8c:0f:
         7d:36:f5:87:37:ab:b5:63:87:9c:3b:51:8d:04:e1:ad:b2:f9:
         1c:d0:15:5f:44:22:41:1b:3c:54:14:b3:30:c7:1a:3d:ee:51:
         70:e9:f4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 17:22:18 2026 by rpki-client