Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/f47f61b0-e92b-364c-a3d5-efaff88e099f.roa
File:                     f47f61b0-e92b-364c-a3d5-efaff88e099f.roa (raw, json)
Hash identifier:          PwXXOAtghEXnsg7pZwWgWWC24hgaMEibUxqU76bFTHQ=
Subject key identifier:   34:3E:70:04:D5:A9:63:FA:03:DB:75:8F:72:85:F0:6C:62:40:E9:FE
Certificate issuer:       /CN=259ec515-1c64-4ed2-96d4-729fb5a0107e
Certificate serial:       010D0C9F4328584EBF41AF3ACB2C8A0997AAF200
Authority key identifier: 1F:93:2E:C8:1D:51:2F:18:2F:19:68:DC:D7:24:52:D9:D4:4A:00:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/f47f61b0-e92b-364c-a3d5-efaff88e099f.roa
Signing time:             Thu 06 Aug 2026 13:00:12 +0000
ROA not before:           Thu 06 Aug 2026 13:00:12 +0000
ROA not after:            Wed 04 Nov 2026 14:00:12 +0000
asID:                     18956
IP address blocks:        209.196.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/259ec515-1c64-4ed2-96d4-729fb5a0107e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/259ec515-1c64-4ed2-96d4-729fb5a0107e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bf:41:af:3a:cb:2c:8a:09:97:aa:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259ec515-1c64-4ed2-96d4-729fb5a0107e
        Validity
            Not Before: Aug  6 13:00:12 2026 GMT
            Not After : Nov  4 14:00:12 2026 GMT
        Subject: CN=39d98558-6c38-4999-9388-a726a13d0131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3e:ab:3f:72:fc:34:bd:25:1f:90:ee:78:ff:
                    c1:e2:90:e4:b7:1d:77:01:6c:f0:8c:51:64:90:2c:
                    de:e6:28:29:23:13:5b:dc:45:72:d0:04:b1:d1:9b:
                    c2:60:8e:79:a4:da:9a:20:81:eb:85:8e:23:68:91:
                    33:82:68:f5:1e:79:23:2d:fa:79:4b:7d:ee:64:24:
                    3e:b7:28:1b:4c:d1:64:4d:78:bc:ee:bc:d5:3d:0b:
                    f5:b6:3a:58:58:5e:c9:bf:40:2f:20:41:84:7e:ad:
                    4c:49:a2:d0:22:4c:b6:dd:ad:e3:14:02:a9:eb:92:
                    19:f2:85:9f:3a:e3:af:ca:42:d7:08:e0:7d:f6:a0:
                    55:9b:2f:22:11:e1:a5:dc:3c:d9:b6:7f:c4:6d:c1:
                    d8:90:88:dd:35:6c:90:9e:92:b5:3a:9b:30:ab:52:
                    4c:f5:07:7b:95:23:3c:05:b8:9b:20:b3:80:18:c1:
                    09:18:af:74:56:0a:a9:4b:e7:37:e7:a9:8a:ed:ca:
                    cc:42:96:09:86:76:3a:e2:48:2e:3f:23:50:74:3e:
                    16:e4:51:5e:a6:cd:d2:50:92:4a:b8:71:26:63:63:
                    37:9f:41:05:9c:9f:87:31:90:63:46:ec:4d:2c:ae:
                    7f:e3:9a:d9:36:bf:a1:f1:a6:a9:0e:83:f4:11:92:
                    17:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:3E:70:04:D5:A9:63:FA:03:DB:75:8F:72:85:F0:6C:62:40:E9:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/f47f61b0-e92b-364c-a3d5-efaff88e099f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e/259ec515-1c64-4ed2-96d4-729fb5a0107e.crl

            X509v3 Authority Key Identifier:
                keyid:1F:93:2E:C8:1D:51:2F:18:2F:19:68:DC:D7:24:52:D9:D4:4A:00:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/259ec515-1c64-4ed2-96d4-729fb5a0107e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.196.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:b1:ac:6f:bb:91:15:c4:35:f0:d0:f5:c1:a9:c2:34:30:60:
         4a:e1:d1:da:22:e5:50:60:2d:95:62:00:4a:e4:ce:0a:ad:85:
         ec:d5:95:87:0c:88:28:93:90:de:a7:ee:f2:6d:9e:9f:5c:d9:
         1f:9c:ec:cf:28:f8:82:7c:c4:ce:66:52:c2:e8:ae:60:8f:d5:
         24:c3:0a:eb:1d:f7:5a:44:15:96:7b:d4:2d:c4:47:7b:3d:2a:
         6b:aa:da:b0:36:0f:cf:76:8a:1a:33:88:0b:b5:b0:00:a1:62:
         8c:f4:ec:1b:8f:97:37:70:ca:95:d6:8e:51:e5:03:c8:47:d6:
         75:e6:61:d8:ad:1d:14:e2:25:56:96:7c:5b:55:7e:1a:b8:db:
         58:4e:3b:4f:1c:20:9d:b9:8e:19:e7:30:ca:13:d6:99:df:e7:
         c0:40:63:0e:d9:f5:38:82:87:a6:50:24:6e:49:fb:2c:c4:92:
         03:ed:7e:71:23:a8:6a:a8:da:d1:07:30:68:90:54:f0:87:a7:
         8e:68:3d:8d:17:63:ce:6b:29:00:93:88:cd:d7:ad:da:77:3b:
         e6:87:45:c8:f7:2a:f9:5c:65:78:29:67:32:67:66:37:e5:1f:
         e0:3d:1c:c2:62:86:26:b8:51:5a:28:cd:84:82:3b:9e:6d:80:
         9a:24:f9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:36:38 2026 by rpki-client