Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/24ee7603-c18e-3075-87a3-2e79abe90370.roa
File:                     24ee7603-c18e-3075-87a3-2e79abe90370.roa (raw, json)
Hash identifier:          hVv/Abu5yYKgM7ExCeGvFu1l6FcnUoRACk+rlVxwxjQ=
Subject key identifier:   7B:CA:72:C9:D6:1E:CD:01:2E:2B:38:CE:A0:67:8C:BB:8E:AA:6D:E7
Certificate issuer:       /CN=8ad56193-8e33-4786-9a64-949338fc325a
Certificate serial:       010D0C9F4328584E885A43F99CACBA5EC595C9C0
Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/24ee7603-c18e-3075-87a3-2e79abe90370.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     14618
IP address blocks:        209.114.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:43:f9:9c:ac:ba:5e:c5:95:c9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=e56e7317-c0e0-482c-9995-4c990986e6ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f1:c4:a6:18:a4:4e:66:e9:61:88:26:c3:e3:
                    96:71:7b:1a:a6:b2:5d:57:ce:b3:56:4e:0f:c8:47:
                    fe:1f:c5:35:f9:a4:28:45:54:37:2d:99:22:66:6b:
                    71:b9:e0:d9:ae:0e:33:77:26:8c:88:19:f6:00:79:
                    bb:fe:af:a1:ce:56:17:e2:d3:32:00:4b:7a:89:a7:
                    d0:bd:47:c6:03:6e:96:43:d6:54:d6:5a:a6:b7:19:
                    6b:38:37:12:a4:13:66:4e:bf:59:02:a8:2d:0b:59:
                    56:db:80:23:1a:64:ba:e3:ad:65:59:4c:2c:a1:1e:
                    c1:45:3f:aa:49:31:24:5d:40:98:eb:53:9a:f1:03:
                    d7:df:0c:ec:02:90:58:8c:8b:86:9b:a3:6f:93:9b:
                    ea:cb:a5:49:27:aa:98:6d:e0:de:12:15:d4:7b:b5:
                    67:83:24:37:f4:30:4c:10:55:52:85:59:4b:7d:ce:
                    32:9c:e7:da:01:84:be:50:ca:79:77:7d:32:78:5b:
                    cc:f0:07:40:f7:43:67:54:a1:77:24:59:fb:e3:89:
                    33:f8:88:c4:e9:49:64:cc:e3:ef:43:88:d3:2e:2f:
                    bc:21:05:45:9e:78:e3:e2:27:74:ef:81:fc:f8:f5:
                    f5:b3:36:00:fd:a0:4c:8a:4d:fb:66:8d:9c:81:c9:
                    6e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:CA:72:C9:D6:1E:CD:01:2E:2B:38:CE:A0:67:8C:BB:8E:AA:6D:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/24ee7603-c18e-3075-87a3-2e79abe90370.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl

            X509v3 Authority Key Identifier:
                keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.114.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:c1:e3:c4:20:38:36:17:5b:6f:47:79:37:a8:f4:20:73:58:
         aa:a7:ef:2a:15:d9:d6:7a:87:b4:9e:90:0b:f2:62:83:62:35:
         7c:2f:9a:58:57:aa:62:9e:62:51:4f:be:6b:df:98:90:22:2b:
         a0:38:25:aa:67:56:3f:ca:18:29:b5:39:6b:40:74:62:be:28:
         81:38:c7:98:de:da:dc:1e:a0:21:a8:97:9d:21:d6:9e:31:41:
         be:bd:3b:10:c6:3f:0f:70:06:ec:6d:d6:9d:82:df:0e:cf:57:
         14:57:ea:5f:5f:25:93:54:74:63:78:35:3e:21:19:ea:eb:ab:
         dc:de:cc:19:f8:39:b7:64:24:b9:ba:52:7a:4c:9a:60:19:cb:
         83:06:96:74:40:78:4f:7b:67:d2:5a:97:d6:54:51:af:b0:52:
         57:1d:10:f1:5b:61:7b:e9:69:71:b8:23:7a:d2:ac:29:56:c6:
         8a:23:84:36:c2:a8:e6:65:3f:27:80:5f:4e:12:9f:57:58:49:
         db:ec:41:79:50:15:fb:df:59:5a:7b:57:19:65:49:07:0c:e4:
         bc:1b:2e:4a:5b:63:c1:2b:01:c0:40:da:7d:4a:2c:30:ae:dd:
         af:f5:9e:e7:d0:63:1f:49:7d:8e:01:6b:49:ef:84:09:dc:93:
         fa:c3:e1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:31:52 2026 by rpki-client