Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9400a101-2acc-45af-84ab-b8e868c728bc/70e12009-48a5-32a3-9e38-9bb500709370.roa
File:                     70e12009-48a5-32a3-9e38-9bb500709370.roa (raw, json)
Hash identifier:          IU4qNChNAQEIzep5IKdZxsPh0OzbVf8+dLYisx9IaaQ=
Subject key identifier:   0A:F5:B6:F8:1F:74:0A:B3:0D:02:08:99:D4:56:5B:A5:A7:AE:90:48
Certificate issuer:       /CN=9400a101-2acc-45af-84ab-b8e868c728bc
Certificate serial:       010D0C9F4328584EA796F7D803E54FBB3BE19440
Authority key identifier: AE:B4:E4:86:C7:30:D4:65:63:AC:78:A7:38:CB:1D:A3:D5:97:B6:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9400a101-2acc-45af-84ab-b8e868c728bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9400a101-2acc-45af-84ab-b8e868c728bc/70e12009-48a5-32a3-9e38-9bb500709370.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     400520
IP address blocks:        204.124.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9400a101-2acc-45af-84ab-b8e868c728bc/9400a101-2acc-45af-84ab-b8e868c728bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9400a101-2acc-45af-84ab-b8e868c728bc/9400a101-2acc-45af-84ab-b8e868c728bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9400a101-2acc-45af-84ab-b8e868c728bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:f7:d8:03:e5:4f:bb:3b:e1:94:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9400a101-2acc-45af-84ab-b8e868c728bc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1d5bc36d-007d-4ce3-b5f0-97127f3b8739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d8:b4:d1:93:08:8e:34:51:31:5e:b4:73:e9:
                    d2:3e:b9:74:9d:9e:b7:4f:97:85:be:86:bb:9a:cb:
                    64:9a:35:ad:6f:07:90:9c:4d:2e:82:b5:7e:4c:4e:
                    d5:65:3e:7d:fe:86:93:11:03:6a:2c:a6:6d:46:a3:
                    0a:cb:80:dc:a8:a8:6b:ed:e8:93:97:6c:0f:f4:12:
                    22:88:d1:f8:cd:e5:89:78:3a:97:c8:f5:6f:33:9b:
                    77:1f:b9:cc:fb:d5:54:90:37:9e:75:0f:04:93:bc:
                    12:c1:40:09:9b:3f:7b:dd:03:61:2b:bb:65:9f:f6:
                    71:78:e1:55:50:0f:56:8e:46:87:9c:74:85:4e:b4:
                    f8:3f:f2:7e:bd:93:18:12:96:89:f1:b2:f0:c7:a9:
                    25:06:35:a1:a8:2f:18:66:c4:6b:31:b1:db:ac:f1:
                    a9:73:43:ba:df:8f:f7:e5:99:77:da:8c:33:a7:fa:
                    eb:99:1b:9c:b9:1b:11:57:f1:69:3a:c4:ef:d3:70:
                    ab:01:b7:29:06:e7:db:a2:91:43:c8:28:05:46:c6:
                    90:5e:9d:ad:35:95:30:c5:95:c5:46:8b:49:cd:82:
                    66:6c:d5:f5:fb:e7:17:90:14:3b:55:78:58:55:cc:
                    1f:17:c6:5c:45:aa:5e:e8:9b:2f:32:87:52:97:4d:
                    56:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F5:B6:F8:1F:74:0A:B3:0D:02:08:99:D4:56:5B:A5:A7:AE:90:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9400a101-2acc-45af-84ab-b8e868c728bc/70e12009-48a5-32a3-9e38-9bb500709370.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9400a101-2acc-45af-84ab-b8e868c728bc/9400a101-2acc-45af-84ab-b8e868c728bc.crl

            X509v3 Authority Key Identifier:
                keyid:AE:B4:E4:86:C7:30:D4:65:63:AC:78:A7:38:CB:1D:A3:D5:97:B6:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9400a101-2acc-45af-84ab-b8e868c728bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.124.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:01:6c:a3:29:d3:17:e8:d4:21:6a:91:de:2e:3d:0f:ee:21:
         02:4f:ef:0b:98:63:4a:4d:0f:fe:f0:35:f0:ac:d7:c6:6a:25:
         0d:22:61:f7:9b:1d:d8:41:c3:2b:8b:dd:94:5a:32:6c:33:d1:
         45:d4:1d:ca:81:eb:8d:66:3a:6f:02:9e:f0:19:1e:cd:b6:cb:
         db:2b:9a:9e:ec:c2:3f:45:57:d6:03:0e:8f:84:4b:5f:49:32:
         21:11:5e:ab:32:f7:98:33:4c:89:44:a1:55:a1:9e:cb:75:c7:
         1d:82:d3:54:76:52:8b:86:d7:94:1a:4b:e0:f6:59:3f:7c:1d:
         99:0c:04:ba:55:6f:22:79:27:dc:e7:b8:a1:bc:7b:a7:8b:d5:
         6a:26:20:a9:32:db:5c:0b:99:9c:e0:bf:ba:87:af:26:da:1a:
         de:af:8c:c5:ac:18:31:d6:83:39:68:aa:ea:87:2e:80:81:5e:
         10:15:0c:64:21:d2:25:9d:38:b3:92:3e:d0:53:e9:c3:33:68:
         71:27:ad:9e:03:5f:5b:c5:e4:de:25:eb:bb:9c:ed:4e:07:9e:
         fd:42:86:3c:fa:a9:b9:3f:4b:bf:11:60:e9:d9:00:9f:dc:f4:
         51:14:7b:32:1b:ae:b5:0f:65:b1:af:e4:15:f8:4b:53:b1:bd:
         9b:34:ec:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 20:36:42 2026 by rpki-client