Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7615a4ec-11ec-3f44-8346-c74759146169.roa
File:                     7615a4ec-11ec-3f44-8346-c74759146169.roa (raw, json)
Hash identifier:          JOuybfi686WhRzn1h4qtugCVrp+CUBWLQUev2Gibcns=
Subject key identifier:   D5:D9:5E:AF:96:AD:AB:C7:8A:56:24:CC:42:57:E6:D5:90:7A:16:DC
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EA796F4D155BB6EAD30866110
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7615a4ec-11ec-3f44-8346-c74759146169.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     13335
IP address blocks:        204.4.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:f4:d1:55:bb:6e:ad:30:86:61:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=457e315d-d17e-472c-962d-50f4127b35f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:62:c0:35:c6:d1:d9:a2:98:9f:f0:92:88:c3:
                    7c:41:b8:1d:87:7c:6f:53:5b:4f:00:f3:90:76:fa:
                    72:c3:cf:6d:b8:4e:57:c6:d1:64:df:87:23:33:37:
                    9e:b4:29:8d:22:51:94:fc:34:fd:22:22:c1:7e:4e:
                    ff:93:ac:4b:5f:33:13:ac:33:2f:48:95:b6:57:7a:
                    88:e7:b2:77:db:09:bb:24:ca:cb:3e:ff:26:8e:f6:
                    fb:b4:f6:d9:35:ce:98:40:d9:98:8b:9b:06:ef:0e:
                    5d:e6:95:fa:c4:c5:31:09:30:82:38:9a:24:3a:e9:
                    ad:47:97:e3:4e:58:1b:09:49:e7:82:a0:aa:03:7b:
                    7f:03:44:09:80:30:22:04:21:82:d3:14:14:62:0a:
                    39:ff:2c:ca:9e:50:c3:39:73:de:55:ba:c0:75:67:
                    99:c7:c3:55:57:7f:0e:64:38:f3:f0:03:c6:12:31:
                    a5:99:bc:d3:a1:20:bc:12:1c:20:40:54:56:88:b6:
                    2a:59:2e:54:25:83:ac:bf:00:ed:b0:4e:88:93:6a:
                    11:d8:19:10:23:0a:70:56:eb:98:68:f8:0a:14:bc:
                    aa:c7:1b:b9:91:e2:bc:54:38:21:c2:65:e3:2e:f9:
                    db:41:3d:57:50:96:8f:c6:3f:79:3e:d7:48:77:f6:
                    a0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D9:5E:AF:96:AD:AB:C7:8A:56:24:CC:42:57:E6:D5:90:7A:16:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/7615a4ec-11ec-3f44-8346-c74759146169.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.4.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:b9:b4:24:1f:22:98:aa:f7:49:e1:2a:a4:00:5e:46:53:1e:
         65:88:04:5b:c8:ab:df:0e:31:b8:a4:25:c5:43:57:97:ba:d4:
         da:17:5b:0a:f3:a3:21:06:11:46:d9:9b:60:8a:ff:ba:d2:86:
         ce:4d:c8:2a:d9:34:6e:1f:0f:32:01:c5:db:6d:87:5f:f6:fc:
         24:fb:cc:ce:d7:e6:b1:9f:ce:34:48:d8:50:4b:b1:d4:52:13:
         bf:b1:88:53:fb:2f:72:5b:fc:3b:38:00:93:3f:c6:4a:fe:7a:
         cc:d0:dc:86:1a:79:bc:85:04:e4:5a:eb:b3:a9:02:de:3f:72:
         16:f8:f6:60:2a:79:f1:84:a2:95:c0:13:05:2b:f5:12:5b:09:
         a9:3f:c2:90:f2:37:0d:5f:e2:b8:96:06:be:20:4e:57:76:df:
         7e:d3:41:e0:cb:4b:62:0e:2d:e5:c7:0b:42:8e:5c:50:4a:53:
         34:d3:c7:27:1d:bb:0a:22:54:f3:9a:b0:2f:41:7d:84:44:29:
         9c:27:be:cd:04:35:c5:4e:1c:a9:f6:6e:92:f4:bb:65:ef:ac:
         96:6f:6c:de:f1:74:e0:65:41:b6:4f:bb:e2:25:bb:a1:14:2b:
         06:ef:2b:7d:f1:f1:53:40:44:fe:33:f5:6d:c0:88:7e:dd:bb:
         4f:32:ce:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:13:00 2026 by rpki-client