Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/36ecdcdf-ce76-3b31-9428-db1f5815dbe3.roa
File:                     36ecdcdf-ce76-3b31-9428-db1f5815dbe3.roa (raw, json)
Hash identifier:          emLq5Al4RAQQ/HzR4RojQyzHWwceu1iVZsSjv53BPT8=
Subject key identifier:   5A:1F:8C:D1:EB:61:02:CE:D3:53:B8:82:7F:05:46:E1:82:12:E9:7C
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584E8DA233BCE0CA6B31D5ED9180
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/36ecdcdf-ce76-3b31-9428-db1f5815dbe3.roa
Signing time:             Sun 19 Jul 2026 18:24:18 +0000
ROA not before:           Sun 19 Jul 2026 18:24:18 +0000
ROA not after:            Sat 17 Oct 2026 18:24:18 +0000
asID:                     40411
IP address blocks:        204.195.93.0/24 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:a2:33:bc:e0:ca:6b:31:d5:ed:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Jul 19 18:24:18 2026 GMT
            Not After : Oct 17 18:24:18 2026 GMT
        Subject: CN=de74f465-765a-44e7-90c3-15c85d9eb01b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:28:c6:6e:e0:55:b7:9c:3f:94:3f:60:e3:40:
                    c0:73:0e:0a:08:39:ad:fc:02:f9:b6:45:b6:d5:da:
                    1f:95:b1:ba:6e:49:7b:03:06:b0:83:f6:96:b1:26:
                    fe:e0:0b:a6:71:b3:50:9f:ce:85:57:d0:62:4a:e3:
                    25:22:51:e2:92:04:4f:7f:de:81:d9:78:bc:b0:e0:
                    e6:f4:b9:a3:73:87:bf:c0:76:dd:37:9d:d7:dc:db:
                    1a:bd:da:df:65:e0:0c:b8:df:43:a1:57:ff:f5:25:
                    00:af:22:b1:56:d1:93:42:73:a1:b2:ef:ad:f3:38:
                    af:cc:b1:f0:1e:b8:47:98:3a:38:53:fe:d8:86:dd:
                    f1:28:a6:54:3b:98:7b:d8:82:20:dd:cd:40:2a:13:
                    a4:a3:b5:58:7f:aa:e1:f1:bc:72:ea:cd:31:ee:0a:
                    d6:5e:e9:3f:46:38:a5:ee:57:7e:f8:ef:14:ce:2f:
                    27:70:c2:ec:b1:31:10:27:23:ae:00:ee:e9:29:1e:
                    c3:3f:31:77:1d:91:20:04:e2:58:bd:21:31:ab:18:
                    7e:17:54:45:96:cf:a8:6d:7e:e6:72:da:b8:1f:f0:
                    52:88:09:10:9b:29:2a:c1:37:89:7b:61:54:84:2b:
                    94:be:b3:60:f8:b7:8f:03:fe:b1:b0:95:3f:d8:66:
                    ad:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:1F:8C:D1:EB:61:02:CE:D3:53:B8:82:7F:05:46:E1:82:12:E9:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/36ecdcdf-ce76-3b31-9428-db1f5815dbe3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:b1:42:8b:bd:87:0e:11:76:df:d8:69:27:04:44:43:a7:cd:
         08:a6:1e:8e:e0:8d:38:e5:7d:3f:3e:30:b1:cf:f9:f6:29:f7:
         53:d2:56:77:3a:7f:da:c4:96:43:5c:65:92:10:db:b5:dd:b5:
         5d:89:fc:f6:a4:f5:56:8f:fc:5b:1f:61:9f:ae:37:2a:20:86:
         ac:bd:96:70:8a:e7:52:65:a1:b1:0e:7c:42:56:b4:b8:ed:26:
         7f:89:c5:26:41:16:2d:a0:27:59:fb:9e:bf:d4:57:14:d6:a5:
         b1:83:7e:d7:c2:3d:a3:89:b0:32:60:46:d1:19:c3:83:35:a0:
         87:32:8f:3a:57:1d:d0:62:8b:15:2b:15:cd:4a:e4:78:8b:c8:
         30:8c:8f:ab:66:92:54:b3:d4:71:ca:80:5c:26:3c:a8:2a:c4:
         8b:f5:02:cc:ad:82:40:c7:0b:9f:a8:a1:e5:26:37:3d:1d:aa:
         b1:14:97:49:13:25:e3:a6:25:ec:0b:07:18:c2:3f:ff:f4:cc:
         58:d4:73:0c:8c:75:50:49:e1:17:8a:e1:26:8f:22:e1:fc:5c:
         a7:ac:c8:c4:af:2f:5e:18:9b:4c:14:b3:3a:0f:7d:66:60:0a:
         67:5e:ba:6c:e1:f9:60:b9:4f:e4:c7:24:34:07:5e:e9:86:3f:
         90:3a:21:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:37:36 2026 by rpki-client