Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/a9ea7dee-72c8-3f0e-bd32-d30199b38096.roa
File:                     a9ea7dee-72c8-3f0e-bd32-d30199b38096.roa (raw, json)
Hash identifier:          wDaZ0ROd3I7l/94SWbhcnSSk1qxMhGFqwzaWdWYCLxk=
Subject key identifier:   C3:23:BC:8D:AF:58:F9:8E:50:FF:23:3E:2F:10:7B:B6:8D:88:39:83
Certificate issuer:       /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Certificate serial:       010D0C9F4328584E6144B8F4EE75467C4872FA88
Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/a9ea7dee-72c8-3f0e-bd32-d30199b38096.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     16509
IP address blocks:        209.169.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:b8:f4:ee:75:46:7c:48:72:fa:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=db1c665f-273b-43cd-958a-96e3b616d0ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c8:01:77:3c:f2:bb:27:70:90:f1:e7:8c:e2:
                    67:b6:1b:46:e5:c8:fd:51:aa:2c:c0:aa:85:5e:34:
                    2e:78:ad:bf:de:a3:42:af:e7:68:db:1d:81:34:2e:
                    6e:67:ec:5d:f0:7e:7b:cb:75:ee:63:58:ca:79:e9:
                    ee:99:1f:77:53:ac:7e:de:b5:bd:51:48:96:b7:69:
                    16:97:f7:81:62:4d:d6:88:dd:e3:93:c5:c7:0d:de:
                    7a:6f:c4:56:ab:e8:6a:e7:b4:2a:1c:f0:ae:fd:84:
                    c1:0d:8f:94:c2:5a:36:4e:98:83:ec:dc:a9:75:2c:
                    99:41:3c:d5:68:00:72:25:6a:db:d0:bc:4e:44:c2:
                    15:af:1e:67:62:00:e9:38:6a:4a:f4:ca:78:b6:14:
                    aa:34:4a:21:c5:e1:af:b1:3f:e6:41:1a:fb:67:0e:
                    77:a1:52:4b:38:e0:a3:d2:e5:d3:9a:7b:6c:1a:cc:
                    5a:4f:a6:7a:cb:f8:36:71:70:ae:e8:9f:33:6e:93:
                    e6:de:87:57:f9:f0:fd:ef:79:ee:5b:63:a1:39:b7:
                    22:1d:ce:cf:d5:65:cb:d5:1a:66:38:10:54:d5:99:
                    70:d4:2a:30:8b:26:b6:09:90:16:e9:64:fd:fc:51:
                    30:fd:9d:a6:ab:10:d7:11:b1:5b:e7:d2:95:c6:bf:
                    10:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:23:BC:8D:AF:58:F9:8E:50:FF:23:3E:2F:10:7B:B6:8D:88:39:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/a9ea7dee-72c8-3f0e-bd32-d30199b38096.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl

            X509v3 Authority Key Identifier:
                keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.169.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:55:31:9b:4f:41:96:99:12:49:4b:78:3a:ee:40:a2:67:77:
         47:eb:c4:a8:72:30:0a:01:b8:71:b9:65:38:05:e5:68:da:a2:
         32:97:36:b2:24:20:07:94:68:c7:48:d8:f5:7e:fb:44:96:4b:
         5d:66:20:f4:cf:28:ca:28:92:5e:c0:0c:b7:fc:b9:fb:ef:86:
         9a:16:a7:62:32:e0:fe:06:f8:1c:0e:d7:ce:9b:31:47:47:de:
         7a:61:c6:64:f6:95:22:65:89:41:28:9f:cc:60:92:dd:31:73:
         a4:09:8d:60:c9:f2:14:a0:81:43:c3:c1:67:9a:55:7b:2a:e3:
         9b:9f:ca:ba:9f:a8:14:d6:3b:eb:9b:e3:49:05:21:78:f2:2d:
         60:7f:fe:df:35:75:41:f6:86:e1:7e:5c:47:a3:f2:47:be:e9:
         d7:b5:53:3a:1a:82:bf:4a:ff:60:c9:ac:cb:7d:a1:99:89:43:
         6b:fb:29:84:6f:ea:cd:83:f0:08:40:c4:95:85:72:f7:99:f6:
         c2:65:1b:1e:e7:b9:fe:48:7b:37:54:7b:37:09:e8:75:fb:3a:
         76:dc:04:ba:70:7d:a4:ae:9f:27:5a:84:ae:f0:ff:6e:d4:94:
         f6:88:78:a1:79:76:d1:31:53:a0:eb:0b:74:37:10:f8:9d:c1:
         e1:b1:e0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:10:55 2026 by rpki-client