Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/07dfbd1d-6e11-4871-b406-d40f36507b8f/24e4d917-8ff5-3760-82f7-bfd1b8429d47.roa
File:                     24e4d917-8ff5-3760-82f7-bfd1b8429d47.roa (raw, json)
Hash identifier:          sjdPQhgoqADgHtT/dDE1kD00GMZZXzif/WBaxIBIlU8=
Subject key identifier:   FB:63:BC:3F:48:7F:BA:EE:B7:BD:B3:20:45:60:AF:79:58:B6:37:89
Certificate issuer:       /CN=07dfbd1d-6e11-4871-b406-d40f36507b8f
Certificate serial:       010D0C9F4328584E3A2F19EABF3355D38BF15880
Authority key identifier: 86:CE:D4:C7:12:D5:B5:AA:1C:73:9D:66:FB:29:D7:E4:BF:61:4A:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/07dfbd1d-6e11-4871-b406-d40f36507b8f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/07dfbd1d-6e11-4871-b406-d40f36507b8f/24e4d917-8ff5-3760-82f7-bfd1b8429d47.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     33229
IP address blocks:        170.39.24.0/23 maxlen: 23
                          170.39.27.0/24 maxlen: 24
                          2602:fd2f:10::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/07dfbd1d-6e11-4871-b406-d40f36507b8f/07dfbd1d-6e11-4871-b406-d40f36507b8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/07dfbd1d-6e11-4871-b406-d40f36507b8f/07dfbd1d-6e11-4871-b406-d40f36507b8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/07dfbd1d-6e11-4871-b406-d40f36507b8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 24 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:19:ea:bf:33:55:d3:8b:f1:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07dfbd1d-6e11-4871-b406-d40f36507b8f
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=5af6093b-3038-4b19-8d5d-20d0a17af8c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0c:75:ce:dc:d8:9e:02:ac:1b:56:b9:c5:b4:
                    71:e2:4f:ea:6a:23:57:ca:ba:41:0e:9c:13:2a:27:
                    e1:4f:d0:d8:08:e7:2e:99:b6:44:9e:f2:fc:78:ae:
                    4a:56:f2:2f:d8:96:9b:17:d8:f8:1a:f4:b3:76:ae:
                    34:1c:51:bb:de:ce:b0:5d:a1:f3:6f:05:9f:b3:06:
                    83:ca:3b:0a:7d:60:a6:0b:ff:6d:96:91:6f:09:54:
                    9f:5f:3e:99:d1:7e:a7:5d:1c:fc:3a:79:3c:30:6a:
                    6c:5d:02:d7:90:7a:ac:ae:57:25:bf:5f:58:29:0a:
                    30:93:91:4f:1b:b0:6b:e3:43:47:30:a0:8c:c0:ad:
                    43:ab:72:31:68:08:db:82:e2:81:d4:a1:50:b9:3a:
                    09:bc:19:85:ac:ca:57:0a:87:ef:50:8d:72:ba:31:
                    36:52:04:ed:5d:86:d9:7b:94:03:27:3b:1f:7c:c2:
                    80:38:6d:98:8b:84:92:bd:39:53:a7:8b:8c:f4:05:
                    11:4e:57:54:65:7d:b8:0e:8c:db:e5:ed:fb:07:fa:
                    d6:ca:3c:f6:ea:67:70:19:77:c4:a2:43:b3:2e:f8:
                    f4:9c:8d:64:be:ac:13:b4:ca:1b:bd:5e:6e:7c:9e:
                    92:0f:eb:6a:38:23:c8:bf:fb:fd:a0:39:f4:46:88:
                    5b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:63:BC:3F:48:7F:BA:EE:B7:BD:B3:20:45:60:AF:79:58:B6:37:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/07dfbd1d-6e11-4871-b406-d40f36507b8f/24e4d917-8ff5-3760-82f7-bfd1b8429d47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/07dfbd1d-6e11-4871-b406-d40f36507b8f/07dfbd1d-6e11-4871-b406-d40f36507b8f.crl

            X509v3 Authority Key Identifier:
                keyid:86:CE:D4:C7:12:D5:B5:AA:1C:73:9D:66:FB:29:D7:E4:BF:61:4A:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/07dfbd1d-6e11-4871-b406-d40f36507b8f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.24.0/23
                  170.39.27.0/24
                IPv6:
                  2602:fd2f:10::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:8d:4d:f6:4f:24:79:34:b8:ec:97:e5:e8:6b:d9:6e:ad:a2:
         7a:71:4e:42:23:69:f3:18:60:a6:92:8f:bf:f5:34:8f:20:b5:
         34:de:30:b0:8f:8c:79:f8:4c:62:79:c1:05:d7:18:bf:4e:01:
         03:1c:2b:60:44:72:da:bf:ec:cf:08:da:f7:42:2f:7a:21:ef:
         60:60:b7:a6:ce:62:f9:6e:7f:9b:7b:a0:05:a7:42:99:d8:36:
         89:ca:b0:0c:e0:63:d0:3a:47:bb:9b:4d:d4:67:d7:94:4d:91:
         e4:55:80:2a:ae:0c:75:54:52:4b:be:a3:a8:48:75:d2:da:5f:
         d5:ee:be:21:14:ed:c5:bf:74:fb:f0:74:79:98:5d:1a:30:3d:
         c4:a4:18:9c:f3:0e:41:ae:af:21:14:42:5b:4d:20:20:b9:f7:
         66:44:0c:97:d0:34:b6:6a:7e:d3:bc:cc:d6:37:c7:ec:5f:be:
         7b:e4:fe:66:cc:42:e5:2b:93:7a:a4:33:16:6b:cb:a5:c2:06:
         60:6f:ba:24:5d:ac:83:5d:43:80:f7:62:7d:42:3b:b7:01:82:
         ec:81:50:f7:23:72:e1:0b:f1:67:df:62:dd:15:1d:7e:7c:62:
         02:93:c8:65:71:f5:0a:a9:fd:39:d7:f5:d5:e1:5d:ba:82:88:
         fe:8d:d4:42
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 22 22:57:33 2026 by rpki-client