Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/b24d278d-b8c4-3764-9fa8-8542fc66b2b2.roa
File:                     b24d278d-b8c4-3764-9fa8-8542fc66b2b2.roa (raw, json)
Hash identifier:          tumQLZRk6G9ejl7i+y9RGznh7Im5n7vhsFV8A8Jwh0U=
Subject key identifier:   25:6C:4C:02:D1:84:C6:44:1D:6E:9A:41:AD:9D:D4:35:89:A1:6E:40
Certificate issuer:       /CN=0c2f5a4c-917e-4b90-8022-391847ae5699
Certificate serial:       010D0C9F4328584EE7BCB7E85F1D2C9E37E87F80
Authority key identifier: 2A:77:D3:04:F0:E9:28:8C:9E:75:87:0C:E3:FC:5F:DD:14:0B:77:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/b24d278d-b8c4-3764-9fa8-8542fc66b2b2.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     53616
IP address blocks:        204.235.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/0c2f5a4c-917e-4b90-8022-391847ae5699.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/0c2f5a4c-917e-4b90-8022-391847ae5699.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:b7:e8:5f:1d:2c:9e:37:e8:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c2f5a4c-917e-4b90-8022-391847ae5699
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=a6f6a335-52b1-4700-8e17-ecb7df40c49a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ec:62:6a:53:6a:2a:cc:79:dc:1f:d3:b8:df:
                    25:17:70:9b:4f:43:25:db:1d:7f:26:b5:1c:03:3f:
                    14:97:9a:fe:10:20:4a:a9:7f:98:f9:1a:0a:d8:76:
                    e8:f9:b7:87:7a:20:63:c3:5f:19:16:a9:c9:7c:d8:
                    1c:f4:af:89:9e:3b:23:94:57:f3:f0:59:4a:af:64:
                    d9:71:7b:10:d4:4c:e4:a3:46:5c:1c:ad:25:57:49:
                    ed:21:35:96:44:00:33:35:74:c5:da:40:1d:ca:bf:
                    73:a3:5e:fd:70:36:35:b0:9a:41:e2:a6:d1:d6:b1:
                    b9:8f:a6:14:fd:8f:d3:2d:6c:0e:03:a6:1e:44:ac:
                    91:c3:c1:67:40:c1:df:7f:46:c3:1f:80:da:7b:f1:
                    25:a0:18:a8:1f:9c:fc:2c:b0:71:40:b5:ef:18:62:
                    e1:b7:32:b1:e3:9d:17:09:8d:f5:6b:fd:22:16:d5:
                    d3:68:1a:63:8c:c9:10:5f:92:8f:1e:03:5c:1e:c6:
                    d2:40:1f:ff:0b:63:0d:a8:08:b4:7f:03:a5:f8:6d:
                    f8:89:b9:da:48:ee:7a:b5:51:29:d9:f3:02:ea:a5:
                    d5:ac:89:88:7a:7b:bc:ac:a4:05:f0:a3:88:4a:19:
                    ed:1a:4c:f0:1a:5b:dd:19:85:39:4b:e7:e7:9b:c9:
                    cf:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:6C:4C:02:D1:84:C6:44:1D:6E:9A:41:AD:9D:D4:35:89:A1:6E:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/b24d278d-b8c4-3764-9fa8-8542fc66b2b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/0c2f5a4c-917e-4b90-8022-391847ae5699.crl

            X509v3 Authority Key Identifier:
                keyid:2A:77:D3:04:F0:E9:28:8C:9E:75:87:0C:E3:FC:5F:DD:14:0B:77:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.235.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:aa:c1:5e:2f:54:f3:a7:da:3b:37:2e:9d:eb:24:b1:80:50:
         f0:19:6c:cd:aa:28:f4:39:18:e5:92:b0:aa:fa:f0:20:d7:81:
         69:1e:31:a0:db:0b:21:b5:05:2e:16:af:62:ce:ce:7e:db:24:
         3f:36:68:86:7f:24:32:7a:ec:a0:b4:85:40:9e:91:63:e4:94:
         fb:1f:73:7b:6f:1f:b8:8a:b0:8d:50:64:b4:90:cd:fe:3c:98:
         4a:41:96:10:01:36:2b:e4:30:10:4f:31:ad:d0:49:0b:2c:4b:
         31:eb:d3:22:6e:0d:e9:20:8e:91:ef:76:3b:71:3a:32:ac:3b:
         60:3c:92:17:d1:0c:b1:44:4a:a3:19:81:1f:13:e6:40:07:b7:
         3d:94:fc:73:22:8e:4d:97:b3:c3:b3:41:13:20:58:02:09:11:
         71:e2:74:98:81:21:2e:14:60:05:77:03:da:80:7d:48:7c:b0:
         9b:20:72:ef:9a:4c:d1:6e:d7:f8:5f:56:1e:bf:4b:dc:14:10:
         32:7b:1d:db:e9:34:7e:71:fe:c7:d9:0f:1f:c3:cd:8c:1d:42:
         22:d0:fc:df:c4:8f:17:34:11:34:1d:a6:51:d6:3b:42:0d:38:
         13:7b:99:10:dc:8c:3e:8c:22:ff:a8:2f:6b:e3:b3:bb:73:cd:
         58:d7:c8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:07:56 2026 by rpki-client