Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/c60bf8ef-c31e-35e0-96e7-c06450d00e62.roa
File:                     c60bf8ef-c31e-35e0-96e7-c06450d00e62.roa (raw, json)
Hash identifier:          rA8qZlHQOeTQ3xdRTdfVTJHZpxAVcy0bkmoic67lzdc=
Subject key identifier:   61:E2:51:A1:4C:75:70:14:72:DD:53:A3:1C:98:CE:88:D2:EB:DB:8C
Certificate issuer:       /CN=469597d0-a870-46e2-b0a1-04a71dad0b25
Certificate serial:       010D0C9F4328584EAF7C3485DAFDBD09259FE200
Authority key identifier: D9:22:F4:C1:14:0A:7F:93:24:F6:09:53:39:5C:D7:15:FD:76:7A:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/c60bf8ef-c31e-35e0-96e7-c06450d00e62.roa
Signing time:             Fri 31 Jul 2026 21:25:14 +0000
ROA not before:           Fri 31 Jul 2026 21:25:14 +0000
ROA not after:            Thu 29 Oct 2026 21:25:14 +0000
asID:                     30104
IP address blocks:        24.38.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:7c:34:85:da:fd:bd:09:25:9f:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=469597d0-a870-46e2-b0a1-04a71dad0b25
        Validity
            Not Before: Jul 31 21:25:14 2026 GMT
            Not After : Oct 29 21:25:14 2026 GMT
        Subject: CN=1bdb3ddf-6636-430a-8ebe-83fb25ad5e16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b7:b0:6a:74:7e:b4:e3:42:8c:ea:53:f0:19:
                    42:10:87:59:c3:9b:66:43:0c:a7:a2:5c:14:7d:5b:
                    c0:ae:8e:12:b2:2b:77:cd:53:9f:f6:e0:d2:5f:68:
                    53:7b:28:3b:ce:da:9a:77:10:55:85:81:b3:71:64:
                    04:7c:a5:ed:70:e4:43:5e:b7:e0:7c:9c:19:b3:66:
                    73:9b:65:2a:81:ee:65:7d:7e:e3:cb:29:fd:24:42:
                    e1:6f:25:5c:fe:5e:d7:5c:72:94:63:75:c2:f1:86:
                    67:87:b8:c1:96:b6:16:59:a8:f8:64:63:5a:1b:f2:
                    77:96:73:05:3f:44:63:9b:0b:18:45:5c:ef:34:fb:
                    23:1c:81:b7:60:39:7e:67:5e:25:0f:76:3f:11:58:
                    e3:52:d3:0d:e5:f1:c3:54:30:1e:1e:bc:4c:2a:7e:
                    6c:ed:1f:38:45:ae:9b:86:15:ec:1e:c4:56:e0:88:
                    a6:21:3e:ae:bc:00:10:ed:20:fe:00:41:a1:e0:a0:
                    00:c7:e1:78:b7:e6:a5:32:48:7c:2a:00:ed:b1:c8:
                    56:8a:52:30:9b:fc:5e:0e:5a:0e:79:d8:7b:a0:e6:
                    e9:79:e1:a8:4e:2a:23:28:1e:86:1a:6f:8f:a9:c5:
                    35:de:34:51:ff:ae:e9:39:71:40:78:37:74:4f:0d:
                    a3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E2:51:A1:4C:75:70:14:72:DD:53:A3:1C:98:CE:88:D2:EB:DB:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/c60bf8ef-c31e-35e0-96e7-c06450d00e62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.crl

            X509v3 Authority Key Identifier:
                keyid:D9:22:F4:C1:14:0A:7F:93:24:F6:09:53:39:5C:D7:15:FD:76:7A:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.38.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:13:c1:e8:45:83:c9:03:a8:b3:ae:81:f1:80:15:6d:5c:a0:
         b6:98:5d:d5:3d:da:77:27:a6:dc:82:6a:61:7d:f0:1d:08:e3:
         79:77:08:88:58:b9:f6:5a:6e:38:00:30:b9:bd:e8:65:f9:bb:
         2c:96:b0:08:a6:6e:56:69:a1:1b:88:7b:fa:43:9c:cb:31:1c:
         4b:9d:8f:4a:bb:0b:a6:ed:ee:b4:25:af:d1:b6:78:70:aa:ab:
         d6:17:f5:ed:18:de:af:93:d6:62:7d:d0:4b:ec:68:35:2d:24:
         24:e1:9a:1a:d1:68:44:d0:30:16:ca:6a:73:c7:b9:45:61:2e:
         67:b6:b8:fd:97:b2:f9:7b:48:0b:60:cd:6e:b5:03:41:cd:9a:
         fe:26:4d:38:a0:5a:a5:3a:28:cb:8d:9d:7c:9d:1a:7d:77:dc:
         ce:42:07:6e:8d:c3:3c:8b:65:d7:56:47:89:7a:3c:62:a6:6e:
         2e:f0:7f:b3:34:75:a2:9e:e2:04:6c:b2:bf:e0:eb:45:a7:0a:
         27:14:6c:67:bc:d4:94:f2:c7:70:44:13:25:7a:23:2d:ef:96:
         4e:56:ef:5e:4a:ab:e5:b4:8b:b3:c1:8c:65:e5:8c:79:1d:72:
         db:19:33:89:0e:dd:fc:94:2d:c4:8f:de:8b:1f:08:d9:66:8d:
         6b:dc:92:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 00:38:47 2026 by rpki-client