Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/0a103c16-125c-3702-b4d5-3731cb1418dd.roa
File:                     0a103c16-125c-3702-b4d5-3731cb1418dd.roa (raw, json)
Hash identifier:          xs6Onttt68NO4bQCdylpRi4HEoExGoNQjecVo9dhD6Q=
Subject key identifier:   6D:FD:6C:5F:57:C1:28:06:07:B1:88:0A:40:68:9E:80:CB:55:37:33
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F4328584D7F9A80F59768101FA3F24140
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/0a103c16-125c-3702-b4d5-3731cb1418dd.roa
Signing time:             Tue 14 Apr 2026 01:00:24 +0000
ROA not before:           Tue 14 Apr 2026 01:00:24 +0000
ROA not after:            Mon 13 Jul 2026 01:00:24 +0000
asID:                     394437
IP address blocks:        209.173.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Apr 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7f:9a:80:f5:97:68:10:1f:a3:f2:41:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Apr 14 01:00:24 2026 GMT
            Not After : Jul 13 01:00:24 2026 GMT
        Subject: CN=1dcc3fe6-533e-46aa-8d96-881705bfb2ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:09:48:ae:e3:02:50:99:ab:e8:21:ec:f8:83:
                    45:ab:ac:86:1e:f6:0b:84:d4:a6:4d:36:ff:47:00:
                    8a:39:64:6a:f0:e0:28:73:32:2e:cc:18:60:5d:1a:
                    a7:9a:d9:ba:61:27:74:33:41:3c:63:fb:97:80:44:
                    b5:6e:06:93:34:0f:e1:e6:82:83:77:2f:27:8e:25:
                    0b:14:4d:18:9d:16:7d:58:b1:40:4e:dd:d1:f6:67:
                    53:5b:e4:44:45:23:61:6c:bb:e3:0b:85:7c:a6:2e:
                    92:dc:2b:2b:90:60:0f:7d:76:9e:7e:ff:80:7c:d5:
                    80:28:2c:24:fe:3e:be:e1:1f:9a:ea:57:33:8b:79:
                    0b:bf:2c:98:71:9e:11:12:08:4b:e9:cb:5c:59:8d:
                    e7:7d:2d:a9:ce:3a:f2:8c:37:82:2f:76:06:37:ee:
                    ef:e0:61:e2:94:49:22:5e:bd:1e:c5:f9:bc:ad:c6:
                    40:97:2a:10:59:c3:17:ef:a2:63:f9:84:69:b4:b0:
                    99:31:e3:02:05:22:04:d7:8e:66:af:f1:75:2b:51:
                    63:f2:c0:62:01:7f:3b:ad:b3:ea:85:ec:e2:74:7b:
                    05:a4:46:9b:2a:99:c4:c6:82:9a:cd:64:ad:a7:70:
                    a3:00:a0:d4:b2:4f:e7:82:a3:75:90:e6:06:7e:66:
                    21:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:FD:6C:5F:57:C1:28:06:07:B1:88:0A:40:68:9E:80:CB:55:37:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/0a103c16-125c-3702-b4d5-3731cb1418dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.173.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:f5:98:31:46:49:74:fd:b0:e2:b5:68:07:23:d1:5a:75:25:
         b7:45:b4:cf:08:06:8c:a8:03:30:ac:1b:d8:28:9b:73:9b:73:
         83:0f:16:ff:63:07:7d:67:a2:2d:d9:44:fb:5f:fc:32:69:7c:
         59:23:0a:70:c4:00:53:68:80:45:91:c6:a3:3f:69:66:5a:1c:
         17:ed:0b:14:a6:09:21:cd:dd:bd:a1:b7:4c:eb:70:6b:1b:b0:
         8e:f3:8f:2d:b2:48:d3:8b:49:e4:4d:49:0a:9d:9b:b8:87:44:
         c1:ab:b9:e3:40:5c:95:f7:22:6a:3f:20:73:33:a0:7d:96:90:
         0a:75:57:f4:6c:d0:bb:1a:eb:85:56:90:fe:b7:67:05:85:6a:
         15:69:2c:3c:3c:be:d0:a8:5d:c7:c2:78:3b:a4:fe:f6:96:26:
         dd:74:9c:38:ae:89:81:ab:a9:22:da:88:9a:65:72:6f:08:10:
         d2:c5:39:95:cc:48:fb:38:48:82:a0:e8:c6:ce:10:47:9e:8f:
         46:5a:20:d2:19:6a:3a:f0:12:4e:3b:62:b8:d7:c5:c4:79:9e:
         cb:1d:37:40:47:0b:44:40:ff:2a:c6:eb:4c:d9:52:ad:e2:5d:
         e8:ac:b5:a1:62:84:b9:1f:f3:d5:3c:4d:82:a6:71:ba:4c:d7:
         08:ca:12:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 11:22:58 2026 by rpki-client