Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/2c11259a-f9d0-312c-a546-57c810ca6a5b.roa
File:                     2c11259a-f9d0-312c-a546-57c810ca6a5b.roa (raw, json)
Hash identifier:          jfl47S1okYXb0qTkqzFFyKx8GO83IxImH57anIlSdCU=
Subject key identifier:   A7:55:44:72:72:C7:D1:94:4C:74:CC:1B:01:B6:CE:D5:A5:C4:60:F8
Certificate issuer:       /CN=4279ddf8-3e66-45cf-8955-452fbe652c0c
Certificate serial:       010D0C9F4328584EA7948064BF8B87CE6826B700
Authority key identifier: CA:A2:64:1B:A7:B7:4C:7E:8A:60:83:4F:0E:42:BB:78:A4:50:F0:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/2c11259a-f9d0-312c-a546-57c810ca6a5b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     27425
IP address blocks:        209.137.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:80:64:bf:8b:87:ce:68:26:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4279ddf8-3e66-45cf-8955-452fbe652c0c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e21f9a0a-3187-4c46-a902-48da905d14d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:73:9d:13:5c:9f:2d:3f:81:7b:10:89:0f:62:
                    d5:b8:b3:a1:ae:d5:6c:9e:b0:d0:ef:75:45:61:c8:
                    f8:0e:9a:9d:5c:a7:c6:a6:2a:c2:be:e0:4a:81:85:
                    2f:7b:8c:c2:b5:4c:a2:ed:7c:bb:d8:be:c9:a6:f6:
                    1e:db:5f:59:81:59:96:31:8c:ba:34:16:d9:31:d7:
                    6c:2f:3f:bb:d2:c3:b1:e4:95:cf:22:b8:a9:55:9c:
                    fd:fa:08:aa:a1:d7:e1:9d:6b:d4:08:cf:39:51:94:
                    7d:42:b2:14:7a:4c:bd:25:69:f2:84:9a:2d:84:5f:
                    8c:30:60:e7:14:5b:8a:b0:86:57:20:e1:b9:51:18:
                    ec:d2:e7:a9:25:ee:ae:64:5c:c1:c6:81:07:f5:59:
                    a1:59:1e:f7:82:80:94:74:49:63:f0:be:00:aa:ec:
                    32:cd:dc:33:ce:45:f2:ab:dc:0b:66:25:c7:ee:56:
                    a5:94:22:c8:cb:74:76:86:21:fc:7d:c4:a0:52:9d:
                    a0:2f:08:81:d5:b5:4b:32:0c:c4:5f:45:4b:b7:e8:
                    56:c6:bc:5c:a4:1a:14:42:3d:94:3a:a7:76:13:d2:
                    4e:d3:3e:a4:c1:33:95:a8:c7:13:9f:4d:80:4f:df:
                    5d:2e:16:a9:44:35:b5:b9:5a:77:7c:02:3a:b2:a2:
                    f6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:55:44:72:72:C7:D1:94:4C:74:CC:1B:01:B6:CE:D5:A5:C4:60:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/2c11259a-f9d0-312c-a546-57c810ca6a5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c/4279ddf8-3e66-45cf-8955-452fbe652c0c.crl

            X509v3 Authority Key Identifier:
                keyid:CA:A2:64:1B:A7:B7:4C:7E:8A:60:83:4F:0E:42:BB:78:A4:50:F0:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4279ddf8-3e66-45cf-8955-452fbe652c0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.137.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:bf:82:77:4d:66:cc:d2:a6:7a:57:47:72:27:2f:12:b2:e8:
         49:e9:21:51:52:ae:a1:5b:7a:a8:bf:2c:76:57:a8:41:98:3c:
         13:a2:30:24:f4:36:98:52:49:32:a2:ec:81:fd:33:6a:ef:83:
         ff:e4:56:6b:69:3e:44:7e:25:76:d2:b8:01:0e:15:a1:6a:75:
         cf:83:5d:f1:ac:d0:88:f0:ae:27:4d:c8:4f:9a:0c:89:b7:fe:
         85:93:a1:e4:84:ba:61:42:c0:98:16:53:1a:0d:fe:ff:43:76:
         75:17:ea:de:94:66:de:7b:cf:30:5d:f6:f1:cf:43:53:98:9c:
         a1:0c:11:41:e2:ab:bf:9d:bf:59:3e:1b:be:1a:a5:f8:3f:e9:
         ed:68:1e:f4:34:bd:c4:b8:eb:fd:c6:bf:ec:98:a7:89:e6:29:
         48:75:df:85:2b:6d:83:d6:2c:25:3e:fc:5b:81:98:4c:3f:3a:
         4a:a8:3e:b0:4d:96:52:58:a9:dd:74:45:1f:bf:42:e2:e2:c0:
         de:06:9b:86:f5:e9:d2:fb:45:55:74:72:c1:ef:a9:6a:37:11:
         91:7d:da:06:fc:da:d3:6e:9d:4c:f8:78:40:c4:26:62:3e:a6:
         ee:77:7a:cb:f9:bf:66:d0:53:30:97:4b:81:54:01:de:7a:86:
         de:63:8f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:49:23 2026 by rpki-client