Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0c2cf33d-b9e7-3cc5-bd1a-1dc9e54adf2f.roa
File:                     0c2cf33d-b9e7-3cc5-bd1a-1dc9e54adf2f.roa (raw, json)
Hash identifier:          P85CTzacYu/ckpeMlfGQMjxUfEmVEhiQ//Iikx5UqD8=
Subject key identifier:   1F:D3:9A:85:F7:D2:BE:EB:72:22:29:4B:A5:9E:FE:D2:91:CB:EB:98
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584F4973FDD7EA777DF815979B00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0c2cf33d-b9e7-3cc5-bd1a-1dc9e54adf2f.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     852
IP address blocks:        207.219.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 01 Nov 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:fd:d7:ea:77:7d:f8:15:97:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6297f7a8-ec77-4b48-9381-d88d9b16a8f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a7:42:d5:e2:fe:cb:32:cc:68:3a:03:a2:9a:
                    1c:e3:2a:53:91:dd:87:7a:8a:e1:cc:84:21:3c:66:
                    5e:e5:c7:a2:55:69:bc:d1:c8:5c:82:57:3a:52:24:
                    bb:97:a1:06:c7:c2:82:a6:b8:e2:f2:a5:c7:e8:40:
                    9e:40:68:b4:e5:62:29:bd:71:6b:55:5d:71:fa:9b:
                    8e:c3:c6:ad:92:2d:be:56:5c:59:3c:20:e9:26:bc:
                    73:b4:4d:1c:d2:fb:81:bc:62:63:f4:8e:aa:9a:7d:
                    1b:db:0c:ea:fd:ad:a2:c6:39:e0:d4:01:82:85:37:
                    e1:38:0c:d6:c2:45:b7:71:6a:14:c9:dd:a0:10:45:
                    9b:49:7a:10:fa:54:57:13:f8:7d:5f:1e:03:11:dd:
                    66:42:54:78:1a:e3:23:c4:17:d7:9b:d9:3f:02:e1:
                    9e:a5:8e:af:ba:4e:f6:7c:9b:6c:8d:eb:ab:b9:15:
                    ad:3a:19:ed:fd:a3:f4:c7:a4:d3:e5:c8:59:29:61:
                    d8:2b:b8:5a:d3:73:30:71:33:64:fa:2b:0c:7a:78:
                    a8:dc:9d:1e:37:2e:5e:50:25:ae:d6:61:b7:54:9f:
                    72:6e:86:ac:e5:70:0f:04:61:92:65:1a:c9:04:e2:
                    2e:8c:91:63:e5:f3:91:28:b8:8e:b0:35:57:5f:fd:
                    12:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D3:9A:85:F7:D2:BE:EB:72:22:29:4B:A5:9E:FE:D2:91:CB:EB:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/0c2cf33d-b9e7-3cc5-bd1a-1dc9e54adf2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.219.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:48:36:1d:f1:4d:9f:8c:c4:cf:50:5b:d6:23:d4:98:af:e3:
         cc:ee:64:0b:70:49:b9:0d:10:3b:cd:f2:6c:21:a2:43:f8:4d:
         f4:f0:74:b2:ff:15:23:a4:77:a9:f0:b9:34:fa:4f:e4:8e:62:
         cd:17:90:ef:5f:46:f7:b6:e8:7d:fc:64:ea:a7:16:c6:3a:84:
         7b:cd:17:73:b7:26:29:44:f5:d1:12:e4:1b:60:62:01:ad:54:
         62:54:1c:47:4d:22:20:3a:95:e4:9e:11:38:dc:05:92:68:32:
         77:82:1e:13:c7:e5:85:b1:f3:9f:b5:d5:cc:a6:49:88:8e:a0:
         cf:91:73:f3:91:96:74:e4:c9:17:64:55:b0:82:9d:7a:20:0f:
         53:4f:c0:6b:62:49:97:22:61:0a:03:24:00:ee:0d:01:72:2a:
         8f:8a:7d:ec:38:ec:17:4e:01:39:19:92:a7:96:ae:31:25:e5:
         50:d8:74:62:7b:e9:cf:52:3b:d9:8f:07:79:3b:95:3f:9d:3b:
         bf:f0:34:ea:1e:e2:b9:49:a7:71:e0:1d:6f:31:60:9b:88:1b:
         66:ba:ba:42:8c:31:35:4d:08:be:24:6c:e0:69:36:2d:7b:1f:
         15:4e:35:56:18:8e:7e:b7:75:3a:8c:77:e7:ea:d8:1d:bb:a3:
         ab:53:09:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:41:38 2026 by rpki-client