Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/10347e71-7fe6-3944-aafa-f5029b5f87c1.roa
File:                     10347e71-7fe6-3944-aafa-f5029b5f87c1.roa (raw, json)
Hash identifier:          v0eJMtPgnS9dg/tWqI0e3nzzwULedbDAvc4PdtG+zVM=
Subject key identifier:   DE:AC:1C:A6:25:BD:FC:64:1A:BD:E2:5A:85:CE:BD:17:C4:26:DD:7B
Certificate issuer:       /CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4
Certificate serial:       010D0C9F4328584EA798E6D0EA8BC63736031280
Authority key identifier: 5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/10347e71-7fe6-3944-aafa-f5029b5f87c1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     398465
IP address blocks:        209.250.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:e6:d0:ea:8b:c6:37:36:03:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f96b6c65-11bb-405e-a34a-b716fcdc7dd4
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9addbcea-04ea-4456-a5bd-4373613a463a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fc:ad:8a:d0:1a:36:02:d4:dc:92:a9:3d:e0:
                    d0:90:e3:78:b4:97:3f:62:72:52:fd:31:48:b0:28:
                    c9:58:38:d8:4c:33:8d:55:ad:d5:22:aa:a5:10:bd:
                    34:c1:e2:a0:1a:bc:51:e5:ca:97:cb:cc:2a:ab:e8:
                    5f:f6:88:1c:50:d3:45:ee:02:ad:f8:a4:6c:fd:d1:
                    0f:76:48:52:80:b1:b6:82:05:4f:95:c4:e8:bb:76:
                    a7:dd:87:71:21:10:d3:9a:34:d0:32:c8:01:7c:ad:
                    81:7d:6c:b8:bb:53:b8:54:3b:41:9b:1b:67:f3:6e:
                    1b:bf:68:d1:cc:88:34:28:a2:59:b8:26:46:9a:17:
                    89:38:0c:6a:0d:20:0c:5e:21:15:5d:f4:ca:81:b2:
                    c5:e9:42:3e:0f:21:a3:6f:a8:dc:dd:70:7a:05:7b:
                    50:16:95:78:54:db:fa:2d:f0:f1:bb:2c:f2:16:51:
                    b3:f7:8a:5a:4f:30:08:67:71:93:73:79:f9:56:b3:
                    23:75:b0:76:fb:dd:46:16:01:08:00:2a:91:e6:4b:
                    43:22:da:d5:f1:99:5b:93:0b:86:67:8e:c2:65:68:
                    68:e9:89:c9:d7:e5:4e:4e:3d:1e:4c:15:60:67:81:
                    98:d7:66:bf:8b:cd:b5:c3:00:86:c6:15:27:14:dd:
                    b8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:AC:1C:A6:25:BD:FC:64:1A:BD:E2:5A:85:CE:BD:17:C4:26:DD:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/10347e71-7fe6-3944-aafa-f5029b5f87c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.crl

            X509v3 Authority Key Identifier:
                keyid:5C:0E:73:4A:20:81:BC:B0:66:7B:19:86:76:19:07:18:EE:A7:7B:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f96b6c65-11bb-405e-a34a-b716fcdc7dd4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.250.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:44:4b:7a:11:26:ba:e7:d5:da:96:4b:c1:91:0f:98:68:9d:
         ad:71:ce:e4:2c:d8:3d:17:e9:e3:49:81:2f:e0:9d:77:54:91:
         c4:f3:f8:1f:7e:9a:6a:fd:0b:c0:44:74:02:08:43:ea:14:05:
         af:c0:07:55:66:ef:98:55:e1:63:36:58:51:0e:7a:9e:7b:77:
         c3:f9:a2:4e:cb:3b:90:91:db:16:13:08:44:65:98:31:57:4b:
         4d:ac:f7:a5:f3:2d:04:fa:d2:cf:71:d8:9d:38:ca:6f:b7:6a:
         ff:6f:71:ed:36:22:4b:a0:10:f6:f1:6f:e8:41:50:28:81:60:
         79:7b:a8:75:8e:3b:af:73:e0:09:ac:b5:43:c2:0c:00:95:8d:
         61:36:eb:71:02:5e:87:9f:91:ff:8c:18:15:b2:3f:92:10:53:
         7b:b4:93:01:56:42:be:f4:37:b4:c6:e9:25:c6:99:61:ae:c3:
         61:78:b8:c2:24:77:a1:9b:2d:cd:41:18:62:0f:ab:e9:56:c7:
         12:b9:51:ec:5a:da:4f:54:2d:ec:c7:df:6b:2f:f2:a4:b2:98:
         9a:2d:4a:be:71:91:a9:7c:60:f1:05:15:dc:30:6b:02:65:30:
         38:6b:01:91:47:45:30:46:ba:87:dd:67:80:fb:e6:16:55:4f:
         07:81:ba:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 22:27:06 2026 by rpki-client