Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/2ce4302b-9df1-39e3-9959-d08bcbf85835.roa
File:                     2ce4302b-9df1-39e3-9959-d08bcbf85835.roa (raw, json)
Hash identifier:          XCBKHPpLZ5QuKAKsw+xMLWEbbybQg5xyRmELKDOwr4w=
Subject key identifier:   0C:41:88:13:07:72:2F:40:9F:0C:52:75:29:73:40:DD:84:30:2C:3A
Certificate issuer:       /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Certificate serial:       010D0C9F4328584E2AD464FC98049A9176802000
Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/2ce4302b-9df1-39e3-9959-d08bcbf85835.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     16509
IP address blocks:        209.169.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:64:fc:98:04:9a:91:76:80:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=4b9ac37d-d894-4223-999d-73be0e0c86f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:70:99:89:13:8e:f2:00:be:e0:75:6a:65:a0:
                    4e:90:68:85:cb:c0:13:0d:00:1f:bb:2d:28:5c:b2:
                    9f:05:6d:b3:c7:87:8a:65:89:f3:2d:be:91:bb:5c:
                    cb:89:34:6f:69:9e:0d:2c:60:d3:1e:4b:6e:af:97:
                    de:3f:61:27:40:62:73:1c:f7:a2:e5:c4:d1:8c:f1:
                    37:15:f5:60:a1:6a:ea:be:b2:f6:4e:d4:ad:b6:1c:
                    fa:29:3a:2a:6f:35:cb:ef:a8:c6:0d:cc:e1:5c:f4:
                    56:29:3a:3c:09:51:d6:10:f0:33:eb:8e:65:d7:3f:
                    af:5f:ee:7d:1e:04:ca:f7:fa:61:9f:b9:89:58:b9:
                    6a:d2:95:1b:d4:0a:33:24:05:20:d0:7f:97:ed:47:
                    13:b6:33:3c:ec:ee:d8:28:72:8c:5e:2d:bc:3e:ac:
                    7a:2b:c3:15:bd:9f:ae:03:e0:ee:a6:56:12:99:2b:
                    a0:29:86:ac:c5:28:ec:ae:9f:b8:6d:00:f6:f5:d4:
                    6b:57:a2:de:2a:44:18:6b:8b:06:7b:c8:19:56:da:
                    80:a3:5a:b9:b1:59:d5:65:dc:88:02:36:cd:92:17:
                    39:a6:2e:31:21:43:df:6e:8e:44:1a:8c:b7:5f:5c:
                    6c:fe:66:19:70:4b:05:f6:1e:3c:31:bc:b2:13:02:
                    76:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:41:88:13:07:72:2F:40:9F:0C:52:75:29:73:40:DD:84:30:2C:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/2ce4302b-9df1-39e3-9959-d08bcbf85835.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl

            X509v3 Authority Key Identifier:
                keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.169.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:f6:2a:11:58:60:cc:3e:44:e9:85:0c:bf:e7:09:7c:f1:91:
         5d:3d:5b:54:dd:1e:4a:3b:31:64:8e:b9:a6:bd:2f:9b:07:9b:
         bb:d1:16:a3:b5:05:f2:26:31:70:9d:c6:6a:d6:89:12:a3:31:
         62:2b:03:0d:af:1f:98:40:e6:23:38:6f:10:a4:3d:b1:dd:cf:
         2b:2b:3b:ea:8d:f0:1a:46:d1:2b:95:af:b1:2c:26:3b:fa:cd:
         c0:b8:44:5c:c2:57:ac:bd:4d:2b:2d:96:6f:c4:e6:e7:f0:8e:
         6a:df:be:02:47:e7:d7:57:a0:9d:21:9e:50:c8:be:bb:6c:35:
         b9:a1:d1:e3:ab:d3:ee:91:c0:4c:ef:eb:94:04:71:28:e8:0d:
         6c:50:e5:4e:14:e2:32:47:a4:99:66:6a:58:eb:86:68:79:99:
         4e:db:ab:b3:dd:ac:d4:74:4a:d0:86:f0:45:b2:88:bf:72:ad:
         64:92:30:89:51:92:00:0c:71:6a:d8:b6:a7:a9:7b:ae:9b:33:
         80:f2:01:96:b2:d5:56:7d:d8:67:e2:a1:ee:70:a0:a3:75:60:
         66:8e:25:ca:28:ec:28:d3:33:96:10:bd:44:22:f3:9c:0b:9f:
         66:d2:75:c5:69:14:43:40:c1:44:96:03:5f:d9:a9:10:7e:e8:
         35:98:f3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:11:38 2026 by rpki-client