Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/ccf497be-cbcc-307b-9ef2-ee4087be2b48.roa
File:                     ccf497be-cbcc-307b-9ef2-ee4087be2b48.roa (raw, json)
Hash identifier:          pT1l9fCBwlI6p+G0PJaTZCojj36AiEvAdgomgu1oujk=
Subject key identifier:   30:2A:E1:48:C6:BF:BB:58:D4:EE:DB:E6:4C:D1:1C:E2:33:D6:15:51
Certificate issuer:       /CN=f2bc6b7a-b8f5-4109-b7af-8975e2444d75
Certificate serial:       010D0C9F4328584EA787760AB9F8002760712F80
Authority key identifier: 58:74:A0:D7:3F:5C:F6:7C:EA:E0:36:90:47:16:07:B8:01:5B:F8:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/ccf497be-cbcc-307b-9ef2-ee4087be2b48.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15296
IP address blocks:        204.209.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:76:0a:b9:f8:00:27:60:71:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2bc6b7a-b8f5-4109-b7af-8975e2444d75
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5b3e40e7-cd4a-4d33-af59-63e97ae2183e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:59:64:fa:93:9e:9a:fb:24:f9:68:fa:ec:c7:
                    1a:65:78:20:7c:6f:ef:24:35:5f:10:42:03:29:30:
                    f3:9d:87:03:aa:a4:bd:c4:58:c3:5d:08:b5:7a:89:
                    aa:7a:dc:81:1d:5c:a2:cf:85:02:85:12:00:09:68:
                    78:d4:59:d3:66:c2:c8:fb:90:73:1b:a2:72:3b:02:
                    e9:ba:3d:06:53:4b:a6:16:9e:37:2d:1e:86:ce:f8:
                    9d:e6:a4:72:53:5c:ae:d3:ed:db:a7:5d:24:81:05:
                    c8:e3:24:89:62:21:cb:58:a4:17:11:e2:42:d4:40:
                    ab:fd:b9:58:28:4b:dd:7b:db:63:8f:41:eb:be:d5:
                    51:41:60:04:31:55:30:f6:5b:1b:07:98:23:c8:b4:
                    a9:c2:c5:e0:53:59:ca:d7:36:61:dc:17:a5:12:b4:
                    0c:2e:2b:c5:ca:88:9c:0e:06:de:8b:bc:81:74:4a:
                    13:7d:45:69:0d:ae:ad:18:41:e1:0f:bb:b0:dd:ad:
                    54:4c:56:67:1d:06:f8:52:e3:b4:58:c6:48:cb:a5:
                    1a:f2:9b:6a:c2:e6:f1:b9:d8:91:7c:98:84:fe:b1:
                    2e:b0:ec:c9:b4:4d:e7:9e:d3:97:19:c7:79:79:59:
                    82:0f:e9:22:b9:72:9a:3b:00:b3:6c:3d:fb:64:75:
                    35:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:2A:E1:48:C6:BF:BB:58:D4:EE:DB:E6:4C:D1:1C:E2:33:D6:15:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/ccf497be-cbcc-307b-9ef2-ee4087be2b48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.crl

            X509v3 Authority Key Identifier:
                keyid:58:74:A0:D7:3F:5C:F6:7C:EA:E0:36:90:47:16:07:B8:01:5B:F8:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.209.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:91:90:23:88:49:db:64:28:b6:5d:bd:05:27:ae:78:45:f9:
         b8:27:bb:e7:ce:c0:82:f8:2e:49:9f:77:89:83:97:36:28:93:
         49:c7:15:be:d2:4b:26:09:17:04:0c:ca:26:b3:5a:24:0d:aa:
         ad:a2:c1:6a:78:0a:9e:2c:4d:6b:d7:59:8c:c3:6f:b4:b2:82:
         0b:43:f5:dd:8f:fc:77:a7:f5:0c:12:83:b1:66:a0:fb:38:1a:
         ff:5b:9b:c8:19:e6:e1:19:56:d7:9b:c0:df:da:f7:11:ac:28:
         a5:95:57:d4:0d:07:d6:f1:71:60:8e:e0:1d:94:b3:6e:29:a2:
         da:a4:d8:2a:9d:cb:eb:e2:fa:04:55:69:d7:29:cb:34:89:0b:
         ab:13:8c:3d:b8:24:3f:4b:67:27:cf:a9:50:71:a2:8c:ca:91:
         53:ca:b4:18:97:a4:f2:2e:55:6e:0c:e7:f7:01:a4:65:9e:0e:
         db:69:55:47:7f:05:29:62:3e:6f:4f:74:73:e2:a3:d6:dd:46:
         6f:e7:26:0d:cf:30:ea:a9:9f:f0:77:95:2e:62:f6:1c:9b:5b:
         b9:21:1a:82:f2:94:48:55:33:21:20:65:c7:e0:73:a5:79:99:
         92:51:6f:f2:ba:43:fd:8f:f1:84:29:6c:12:88:72:1e:0c:bb:
         82:25:ff:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:21:02 2026 by rpki-client