Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/b6b453e7-5d2f-37fc-93ba-dac96781d0b3.roa
File:                     b6b453e7-5d2f-37fc-93ba-dac96781d0b3.roa (raw, json)
Hash identifier:          T33Npj0KLlVqtou9+zEpfWbwKke/s5ErthtcQ5u6qd4=
Subject key identifier:   88:76:14:4E:5F:57:62:D3:8F:53:D2:93:0F:D4:C3:B0:B5:1A:17:57
Certificate issuer:       /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial:       010D0C9F4328584EA79A0DD9202538664C303180
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/b6b453e7-5d2f-37fc-93ba-dac96781d0b3.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     11404
IP address blocks:        209.236.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:0d:d9:20:25:38:66:4c:30:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=634ff38b-0fb3-423f-885a-32f9bcd75d5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:31:f3:53:3a:7c:8f:81:25:ad:10:f3:48:2e:
                    d8:c0:7e:3c:12:34:fa:bf:24:cc:43:e4:cf:79:5b:
                    5a:f6:85:7b:9a:76:a8:9d:53:8c:1e:3c:e3:b8:5f:
                    df:b8:13:22:3d:9f:22:b2:af:2c:59:f6:81:58:c5:
                    02:d9:be:37:0a:0d:ea:d1:49:cd:63:98:75:fe:94:
                    72:2a:50:b0:2a:96:cc:d8:d3:e8:6c:06:4e:62:5e:
                    a8:83:bc:6a:6a:39:2a:57:0f:6c:a1:d8:f9:dc:44:
                    aa:7a:7c:c8:64:20:f7:e4:42:a8:67:73:aa:b5:57:
                    d9:7b:4a:70:14:a1:79:09:6b:6e:6b:f9:1b:31:41:
                    dc:cb:8a:68:37:ec:a5:12:4f:64:77:a7:3b:05:8c:
                    a9:2e:51:70:99:b6:1f:f2:4a:ae:fb:75:b4:b6:63:
                    93:0d:f4:c7:33:ff:2b:7d:bf:9e:44:b7:9d:e4:04:
                    51:e6:27:e8:d8:e1:71:00:b7:9f:91:fd:e8:d6:c2:
                    d0:35:78:7d:0d:93:06:43:ba:c7:a2:45:e9:06:a5:
                    e4:22:28:33:b2:64:5b:f6:46:66:fb:dc:cb:48:07:
                    9d:f9:cf:5f:da:7b:ae:54:16:3c:61:3d:7a:a1:e5:
                    68:de:24:d2:6b:ff:d7:e3:97:20:3a:d9:a0:14:15:
                    94:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:76:14:4E:5F:57:62:D3:8F:53:D2:93:0F:D4:C3:B0:B5:1A:17:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/b6b453e7-5d2f-37fc-93ba-dac96781d0b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl

            X509v3 Authority Key Identifier:
                keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.236.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:3c:f8:30:81:04:71:4f:a1:d3:68:73:7b:99:34:59:e8:47:
         20:d3:8c:c6:43:9a:af:3e:63:f5:50:0f:2a:68:01:40:9d:8d:
         ef:39:ae:ca:66:bc:79:65:db:2e:ae:8d:78:9c:26:93:90:17:
         de:77:94:b2:fe:3e:68:b2:91:2c:13:1d:9e:3d:64:30:d4:ad:
         05:0a:17:04:6b:59:3f:c5:09:fc:36:35:69:90:69:cc:75:80:
         28:5f:f6:43:cf:c8:9f:af:67:91:40:94:65:19:fa:c3:0c:9e:
         95:13:e0:bc:ba:c9:fe:69:b6:f0:28:7d:f7:06:fd:4d:46:e9:
         9d:e2:e4:e6:eb:b0:9c:ad:01:90:ac:5a:a7:36:6b:1f:56:65:
         56:d0:65:ea:db:fd:ff:cb:52:f9:b2:c7:f8:df:98:93:57:09:
         f0:40:f6:57:f5:7c:a3:c8:c5:ed:dc:bc:29:f6:ad:22:1b:6d:
         c2:ba:51:eb:c7:3d:16:50:10:7d:f0:00:88:ea:f1:84:f8:19:
         23:d0:19:43:2f:04:b4:6e:6f:40:25:10:33:59:f0:19:57:2e:
         86:af:cd:07:b9:c7:30:85:1c:2d:78:28:89:f9:54:bc:3b:05:
         6d:07:73:55:c7:3d:4b:6c:83:17:f4:13:c4:6b:cd:b1:76:5e:
         f5:eb:39:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 6 06:43:54 2026 by rpki-client