Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3ae5afd1-4b28-3855-ae6b-9ba719158fad.roa
File:                     3ae5afd1-4b28-3855-ae6b-9ba719158fad.roa (raw, json)
Hash identifier:          0fMN0KyPwIM5yirOjbfMKnpWYFCPqXJspDSKGgQ8Tro=
Subject key identifier:   CD:0F:4A:7B:47:D4:9A:53:2D:20:05:FD:B3:A4:27:59:7D:49:F8:07
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328584EB416FBAEB66357AA8328AA80
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3ae5afd1-4b28-3855-ae6b-9ba719158fad.roa
Signing time:             Sun 02 Aug 2026 13:00:12 +0000
ROA not before:           Sun 02 Aug 2026 13:00:12 +0000
ROA not after:            Sat 31 Oct 2026 13:00:12 +0000
asID:                     9009
IP address blocks:        24.235.20.0/24 maxlen: 24
                          24.235.21.0/24 maxlen: 24
                          158.115.240.0/24 maxlen: 24
                          158.115.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b4:16:fb:ae:b6:63:57:aa:83:28:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Aug  2 13:00:12 2026 GMT
            Not After : Oct 31 13:00:12 2026 GMT
        Subject: CN=61a4cc7f-3903-44bf-ae1f-c0c4a47583fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:42:00:ff:c1:d4:9f:a9:83:a0:0e:b1:35:dc:
                    6f:72:f7:b1:0e:e3:76:7d:05:34:7d:1d:17:f1:c7:
                    ea:f4:aa:77:7c:de:ca:bb:b4:8d:39:d2:9a:d4:31:
                    0c:92:06:5a:db:be:63:f5:7e:bc:85:fe:2a:a0:18:
                    68:55:fa:0a:4e:09:29:c5:5f:d7:a0:11:17:6e:3f:
                    15:2d:2f:e8:69:36:dc:13:01:38:82:f7:5a:90:69:
                    35:ad:19:db:31:32:52:e9:b1:f6:23:bf:ea:59:20:
                    4b:0b:4a:2b:d9:90:06:27:44:a7:6a:0d:fe:8d:75:
                    a4:66:f2:79:40:dc:56:75:eb:cf:91:05:40:d9:ff:
                    87:31:6c:82:9c:24:b9:1c:78:47:27:65:55:84:3c:
                    10:02:cf:6f:62:4b:f9:b2:bd:3f:8d:da:54:93:9c:
                    c3:f6:59:db:55:62:1b:4b:c7:73:28:c9:d0:1b:be:
                    21:20:f6:b6:12:c8:5c:94:5b:9b:dc:d0:7f:5c:93:
                    a4:e8:71:cf:6f:3a:60:0b:20:65:48:6c:13:3b:0b:
                    19:d0:a2:55:87:63:61:ac:52:77:5c:8c:2d:11:a8:
                    a5:39:c6:73:0c:8e:e8:c1:f8:b6:e2:58:22:f7:e2:
                    01:43:66:82:ab:a5:4b:e6:68:85:58:7e:e8:1d:c1:
                    73:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:0F:4A:7B:47:D4:9A:53:2D:20:05:FD:B3:A4:27:59:7D:49:F8:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3ae5afd1-4b28-3855-ae6b-9ba719158fad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.235.20.0/23
                  158.115.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:ea:08:d6:73:34:d1:90:f8:d4:cd:38:63:ee:bf:f5:f5:fd:
         0e:f5:be:11:e0:1e:1b:00:00:ae:be:36:ba:9d:fb:e5:7b:e8:
         16:10:4e:17:23:df:a4:4a:c6:91:b1:b3:7f:d3:d3:d2:38:05:
         e2:dc:3e:f3:f9:00:a6:61:eb:82:9b:ee:04:03:17:96:4c:f6:
         a4:fe:78:92:21:de:72:0a:8b:29:f9:59:2b:2b:bd:ed:49:6a:
         44:71:f2:0b:b2:b9:bc:a1:64:56:74:f3:d8:79:37:cc:55:5c:
         c8:90:84:4c:18:59:33:19:56:8c:6f:46:02:65:a8:19:48:89:
         cd:a0:12:a5:a8:d6:15:a5:88:ff:1d:99:ba:0b:0d:ea:b0:37:
         2e:64:8d:ce:11:cc:6a:a9:c0:29:bd:25:d5:a6:4c:02:97:88:
         13:18:be:cb:3f:2e:e8:c8:e9:00:d9:13:d5:f2:af:e2:e3:fd:
         7b:05:51:d2:a9:6a:79:91:23:f7:6d:50:66:58:1c:32:77:84:
         45:c8:3e:cc:2f:bb:70:b9:16:59:c7:80:65:e5:64:c6:3e:8c:
         a2:44:ce:3b:11:dc:a6:8c:6c:0b:51:a1:18:75:ab:ae:0d:b6:
         bf:d2:4e:43:48:8b:bc:83:19:99:ac:01:5f:6a:a2:13:b9:9e:
         75:3c:5c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:57:08 2026 by rpki-client