Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6c180c7e-2c0e-4bf6-ba86-667507e44fae/7d2f868d-c0db-310e-8c6f-e17d36eaa76a.roa
File:                     7d2f868d-c0db-310e-8c6f-e17d36eaa76a.roa (raw, json)
Hash identifier:          iYtkfP3XSrBc/3Z20XaLunSp/p6N5WWD7ehCukRfBBg=
Subject key identifier:   AA:7A:BA:81:20:9E:47:A6:BF:C2:2C:64:0C:50:31:75:B9:4C:3F:39
Certificate issuer:       /CN=6c180c7e-2c0e-4bf6-ba86-667507e44fae
Certificate serial:       010D0C9F4328584EA7A0C181D18745F2E3B2F780
Authority key identifier: 03:53:36:1F:2B:C9:19:CF:FB:BB:C1:BC:38:AC:F6:24:14:88:A0:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6c180c7e-2c0e-4bf6-ba86-667507e44fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6c180c7e-2c0e-4bf6-ba86-667507e44fae/7d2f868d-c0db-310e-8c6f-e17d36eaa76a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     402241
IP address blocks:        204.48.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6c180c7e-2c0e-4bf6-ba86-667507e44fae/6c180c7e-2c0e-4bf6-ba86-667507e44fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6c180c7e-2c0e-4bf6-ba86-667507e44fae/6c180c7e-2c0e-4bf6-ba86-667507e44fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6c180c7e-2c0e-4bf6-ba86-667507e44fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:c1:81:d1:87:45:f2:e3:b2:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c180c7e-2c0e-4bf6-ba86-667507e44fae
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1321d7e9-2e1e-44e3-a563-097946807dc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:45:65:82:5d:ee:c3:94:96:c5:95:5c:a8:c2:
                    10:e7:ab:ec:38:d5:32:af:56:aa:b1:fb:86:00:35:
                    57:08:73:27:41:5f:d2:1b:a5:1a:b1:e4:18:3f:c7:
                    95:77:25:49:15:4b:f4:09:03:91:ef:8e:19:48:13:
                    5c:bd:c2:d2:17:b7:75:15:14:0c:89:bd:5d:73:56:
                    24:7a:5f:33:26:3b:ba:14:8c:15:ac:59:5b:48:be:
                    45:3a:d6:62:c9:32:85:fd:5d:74:92:06:36:f3:c5:
                    4e:31:77:b6:31:17:e7:4d:a7:29:b9:72:a5:6d:41:
                    9a:82:4f:93:e2:29:39:95:8a:93:49:f1:3b:43:60:
                    58:8d:15:35:55:c3:e7:5c:87:f7:29:3f:af:0d:14:
                    87:bd:3d:ac:86:82:57:b4:6b:50:63:a6:67:15:9d:
                    f7:49:30:3f:e2:39:68:33:26:a2:dc:d2:f9:42:b9:
                    28:4f:51:a2:03:1c:bf:e4:2f:8c:3f:18:d1:06:9a:
                    7a:3b:eb:d3:63:d3:bb:13:45:02:ce:37:07:f6:3f:
                    d6:83:eb:7e:5e:2a:eb:10:9f:71:34:5a:fa:c6:80:
                    0f:87:89:92:3a:8d:b7:16:35:f2:1b:19:19:65:ba:
                    4c:1d:ff:6f:12:2b:d1:10:85:ac:62:81:9e:04:32:
                    ab:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7A:BA:81:20:9E:47:A6:BF:C2:2C:64:0C:50:31:75:B9:4C:3F:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6c180c7e-2c0e-4bf6-ba86-667507e44fae/7d2f868d-c0db-310e-8c6f-e17d36eaa76a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6c180c7e-2c0e-4bf6-ba86-667507e44fae/6c180c7e-2c0e-4bf6-ba86-667507e44fae.crl

            X509v3 Authority Key Identifier:
                keyid:03:53:36:1F:2B:C9:19:CF:FB:BB:C1:BC:38:AC:F6:24:14:88:A0:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6c180c7e-2c0e-4bf6-ba86-667507e44fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.48.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:7b:f9:17:e5:36:91:2a:c4:28:50:aa:8e:1b:ab:2a:2c:a7:
         26:cf:55:c1:78:61:56:14:94:4d:81:d2:23:43:d6:0a:6e:4c:
         cf:d0:c1:f5:f2:a2:65:e6:10:18:7a:8c:3b:05:5f:36:01:ba:
         b1:b1:90:eb:e5:e1:d6:a2:9c:f4:56:0f:d7:54:4d:35:96:e8:
         6e:68:22:c3:03:d1:67:97:ac:86:38:79:03:35:f8:d1:4b:4c:
         3f:6b:10:8b:44:f1:4c:1a:13:ec:04:e7:76:fb:6c:71:17:0c:
         50:43:87:44:3c:fc:85:73:2e:e1:e8:ab:7e:7e:33:c5:c8:09:
         40:a7:f7:29:7f:2d:5f:f2:a1:4d:33:11:77:fd:36:cb:74:be:
         cd:6e:87:a8:02:05:98:b4:ce:90:93:95:b7:6d:9d:71:52:f4:
         5b:eb:8a:51:50:cb:c1:8f:52:c3:76:9d:9b:95:55:0b:37:8c:
         00:d5:3e:3f:74:db:b6:69:f5:b5:18:e4:57:e1:bd:bd:77:f4:
         60:59:18:c9:4d:29:cb:6f:84:b1:9e:d0:45:1a:38:52:4b:2e:
         a6:25:73:f5:e3:9c:4a:4f:f3:a3:cd:28:1e:a6:96:05:d7:d3:
         08:41:d0:ba:ac:7f:81:e6:f4:14:71:92:88:78:ed:34:75:cb:
         12:04:86:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 10:28:45 2026 by rpki-client