Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695/ca10f6ee-236c-3990-9aa6-b5221dab876b.roa
File:                     ca10f6ee-236c-3990-9aa6-b5221dab876b.roa (raw, json)
Hash identifier:          23anpllXcENQ6f+8diqlrHpy+QjpB7SsBR4RXDCekzI=
Subject key identifier:   38:73:3A:B3:D9:0C:E8:AF:5A:74:79:DD:B7:A1:59:84:E2:6C:B3:C8
Certificate issuer:       /CN=37cfb708-8bc0-4a74-971e-28d677315695
Certificate serial:       010D0C9F4328584E6D4B924AD2AFC1ECD4602300
Authority key identifier: AD:56:82:21:E8:9F:5E:3B:60:94:2F:89:79:58:A0:E6:12:08:E8:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695/ca10f6ee-236c-3990-9aa6-b5221dab876b.roa
Signing time:             Wed 08 Jul 2026 04:23:53 +0000
ROA not before:           Wed 08 Jul 2026 04:23:53 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     395439
IP address blocks:        209.204.0.0/18 maxlen: 18
                          209.204.0.0/19 maxlen: 19
                          209.204.0.0/24 maxlen: 24
                          209.204.1.0/24 maxlen: 24
                          209.204.2.0/24 maxlen: 24
                          209.204.3.0/24 maxlen: 24
                          209.204.4.0/24 maxlen: 24
                          209.204.5.0/24 maxlen: 24
                          209.204.6.0/24 maxlen: 24
                          209.204.7.0/24 maxlen: 24
                          209.204.8.0/24 maxlen: 24
                          209.204.9.0/24 maxlen: 24
                          209.204.10.0/24 maxlen: 24
                          209.204.11.0/24 maxlen: 24
                          209.204.12.0/24 maxlen: 24
                          209.204.13.0/24 maxlen: 24
                          209.204.14.0/24 maxlen: 24
                          209.204.15.0/24 maxlen: 24
                          209.204.16.0/24 maxlen: 24
                          209.204.18.0/23 maxlen: 23
                          209.204.20.0/22 maxlen: 22
                          209.204.24.0/24 maxlen: 24
                          209.204.25.0/24 maxlen: 24
                          209.204.26.0/24 maxlen: 24
                          209.204.27.0/24 maxlen: 24
                          209.204.28.0/24 maxlen: 24
                          209.204.29.0/24 maxlen: 24
                          209.204.30.0/24 maxlen: 24
                          209.204.31.0/24 maxlen: 24
                          209.204.48.0/20 maxlen: 20
                          2605:7bc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695/37cfb708-8bc0-4a74-971e-28d677315695.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695/37cfb708-8bc0-4a74-971e-28d677315695.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6d:4b:92:4a:d2:af:c1:ec:d4:60:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37cfb708-8bc0-4a74-971e-28d677315695
        Validity
            Not Before: Jul  8 04:23:53 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=ce279e9c-1645-4abb-9442-92518b663afc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:04:ed:8e:44:67:74:f8:36:4b:f4:f4:d0:7d:
                    78:8e:e4:30:20:e8:88:9c:4c:5f:bb:33:b0:8c:86:
                    18:21:db:b4:94:22:da:ea:6a:91:5e:bf:08:31:5f:
                    42:13:32:a0:dc:06:81:d4:76:4a:d0:26:91:9c:2e:
                    22:9c:28:4e:bb:63:5c:fd:b2:96:e9:ba:cc:df:c7:
                    41:ee:23:a0:be:3f:98:1a:63:c6:cc:7f:44:ef:1b:
                    d6:0b:44:be:6f:f0:b9:68:03:94:b3:fa:9e:f5:4d:
                    fb:2b:9a:86:cd:bf:55:aa:fa:26:1b:01:59:22:cb:
                    c6:ab:dd:7e:34:68:ab:88:80:d7:16:fb:64:6d:49:
                    cb:1f:c2:b5:61:4d:c0:57:95:3a:92:4d:1a:17:93:
                    13:12:01:9e:ca:71:a4:ba:9b:44:11:21:66:ad:e5:
                    5e:60:89:7d:5f:84:af:1c:71:1e:e3:df:46:df:9e:
                    d3:f6:ee:e5:53:3b:8e:cb:c1:66:41:9b:ab:45:66:
                    b1:87:bc:fc:b9:9d:2a:e4:e7:a5:2d:76:dc:16:3c:
                    fb:20:f3:5a:95:78:a1:6a:1f:84:e3:e6:43:34:fb:
                    c9:7a:67:d1:88:e6:08:32:c4:35:4c:cf:44:26:ad:
                    47:2b:b1:57:23:7f:76:c6:0b:45:43:58:5a:37:71:
                    c7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:73:3A:B3:D9:0C:E8:AF:5A:74:79:DD:B7:A1:59:84:E2:6C:B3:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695/ca10f6ee-236c-3990-9aa6-b5221dab876b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695/37cfb708-8bc0-4a74-971e-28d677315695.crl

            X509v3 Authority Key Identifier:
                keyid:AD:56:82:21:E8:9F:5E:3B:60:94:2F:89:79:58:A0:E6:12:08:E8:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.204.0.0/18
                IPv6:
                  2605:7bc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:f4:22:00:84:e0:bc:70:c2:6b:d9:68:03:34:c7:d9:02:8d:
         cd:5b:f6:50:55:40:bf:1c:c3:0e:43:b4:26:10:86:fe:08:bb:
         19:f4:cb:2a:4b:e2:a8:27:6d:97:bd:c4:5b:49:97:86:f1:10:
         3b:79:ac:7f:11:dc:59:f6:65:4e:0d:7e:51:77:fc:97:a7:8b:
         2b:7f:cc:8a:f9:0b:c8:e9:0d:78:37:8e:ab:b1:ee:26:eb:aa:
         9e:68:f6:40:ff:f0:3b:66:f7:a9:bf:d9:c6:1e:5d:eb:b9:83:
         4f:4d:9a:29:0f:72:e5:0f:46:76:77:b4:62:fd:fb:63:6f:4f:
         dd:ac:7f:3c:ba:89:fa:8c:7a:c4:4f:a9:34:b2:4c:3c:1e:5b:
         a1:32:b8:a6:16:41:6e:5e:6d:79:d9:70:9a:25:53:42:f0:0c:
         76:89:2e:aa:7e:48:b6:a8:d4:ae:e1:b6:62:39:0a:02:a6:4e:
         d6:3a:91:4f:92:2d:4d:18:80:83:17:a7:28:50:fa:56:31:6c:
         bf:a3:75:26:9c:0d:0c:59:23:5d:88:24:51:4f:74:a9:ea:37:
         1d:ba:e5:bc:df:99:0e:ef:e6:70:1a:51:cc:66:ac:0d:58:f7:
         22:62:c9:63:3f:6e:5a:15:9b:78:7b:af:ba:53:6a:4d:be:60:
         82:95:3f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:04:12 2026 by rpki-client