Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/2ca386fe-1d13-3ae4-b6c6-e4dd0b5d73d3.roa
File:                     2ca386fe-1d13-3ae4-b6c6-e4dd0b5d73d3.roa (raw, json)
Hash identifier:          Cn84EXZm1s8d0haIRNMkKJJR2mz3maOtjpd5SSRGo3g=
Subject key identifier:   C7:52:65:42:CE:2D:2A:26:E1:39:CD:BB:35:AA:19:76:9F:58:5B:19
Certificate issuer:       /CN=01fc1815-34ef-424d-8258-506f8b486e35
Certificate serial:       010D0C9F4328584E2AD44C27E9B85490CA674CC0
Authority key identifier: 51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/2ca386fe-1d13-3ae4-b6c6-e4dd0b5d73d3.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     17378
IP address blocks:        208.38.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:4c:27:e9:b8:54:90:ca:67:4c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fc1815-34ef-424d-8258-506f8b486e35
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=deefb09d-da86-4a0a-ba3c-e59f7e7dc8f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fb:0e:ea:43:d2:cf:4f:95:54:49:79:85:84:
                    f7:dd:fd:03:c9:43:72:f5:53:a7:53:92:0b:52:cb:
                    69:8e:f6:08:6d:1b:ac:a8:94:78:58:3f:af:18:cc:
                    f8:15:6c:5f:5e:2b:c7:bc:70:ec:0d:3e:94:7d:d1:
                    15:ef:7a:b2:26:f0:cd:7a:c0:b4:2d:52:95:08:82:
                    bc:48:4f:5e:d0:c1:48:4f:12:95:84:7a:41:fd:3a:
                    6a:27:fd:8d:e7:f8:e7:31:46:fe:3e:cb:ad:79:6b:
                    d4:49:5d:b3:81:6f:45:c4:c0:23:c6:26:c8:c8:e1:
                    59:d1:f4:42:a4:0b:3f:70:c5:b1:60:94:3e:39:67:
                    22:a5:72:bc:68:bb:3e:4c:71:e3:41:a4:e0:cb:77:
                    c4:79:90:15:4a:38:f6:78:05:9c:b1:7b:a1:cd:d5:
                    5b:4b:b5:9c:32:a7:22:85:9c:32:be:3b:7b:03:46:
                    ab:f3:a6:e2:1c:e3:dc:5c:6b:66:2f:e7:cc:14:47:
                    b6:36:b6:38:40:29:c1:66:0d:e6:89:de:1b:5b:38:
                    ea:fc:02:04:c9:5b:6a:58:6d:75:4e:5c:09:55:33:
                    55:bc:7d:ab:25:1f:6b:68:df:6a:c7:96:af:50:39:
                    31:04:be:6a:75:f0:d9:53:81:35:76:ac:a7:0b:3b:
                    99:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:52:65:42:CE:2D:2A:26:E1:39:CD:BB:35:AA:19:76:9F:58:5B:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/2ca386fe-1d13-3ae4-b6c6-e4dd0b5d73d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl

            X509v3 Authority Key Identifier:
                keyid:51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.38.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:8f:58:52:13:c1:5b:e4:cf:4b:c5:de:72:fd:54:3e:9d:a7:
         a0:2d:68:cd:19:f2:1b:9b:67:6d:e2:55:e0:ee:10:5f:a9:21:
         fd:ee:da:53:ef:e5:92:1e:1a:ff:5d:af:5d:09:6a:75:3b:8d:
         86:cb:a5:f5:ab:14:f7:65:65:43:95:df:5f:66:2f:ff:80:99:
         f1:d3:54:20:20:d4:32:8b:a5:c8:69:31:b3:07:0e:e4:e6:f3:
         bb:2a:d9:83:e8:b9:3a:50:77:fb:02:08:6b:68:11:c2:16:b3:
         c4:8d:87:36:3c:aa:e3:b5:fa:f5:33:01:72:8c:25:4e:f0:98:
         b9:ed:7f:39:6a:a1:8a:77:50:07:a6:84:64:6e:a9:cf:dd:eb:
         5c:c7:5d:c1:71:96:79:3f:78:e5:da:42:34:f1:75:ac:12:ba:
         61:94:cb:fc:62:dd:76:88:ed:17:2b:bf:50:cd:2c:87:fa:81:
         34:9b:b1:fd:a5:5a:3f:ed:fb:e4:ef:cc:85:28:e5:2f:03:fd:
         f9:ee:51:ab:2c:3e:0f:9b:46:e3:f8:37:11:4f:ec:3c:29:d7:
         0c:f9:67:2c:01:f5:30:f5:56:f7:e1:b9:d7:f0:f0:f9:76:f6:
         0b:b5:e1:22:9a:e5:4f:72:80:97:c9:9e:3f:95:e8:87:5e:c5:
         2f:c9:25:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:47:21 2026 by rpki-client