Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/3c3f1331-082e-3016-8d90-383739e6a21b.roa
File:                     3c3f1331-082e-3016-8d90-383739e6a21b.roa (raw, json)
Hash identifier:          hIMv98Y0lP+7erw4Vhlv8BFUJ6mTCEUVHpFoX2W/UHA=
Subject key identifier:   C0:85:35:84:80:39:90:63:BE:DD:42:E9:84:AA:70:16:60:A3:58:68
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F4328584EE38CA9DEB7AB80EC1FF8F240
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/3c3f1331-082e-3016-8d90-383739e6a21b.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     16509
IP address blocks:        207.202.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:a9:de:b7:ab:80:ec:1f:f8:f2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=7a36c986-20a6-4516-9976-88f1c0b13e4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4e:09:37:ba:60:fa:0d:02:cf:b4:b7:65:3a:
                    60:5f:e9:f4:84:59:39:4b:74:c4:59:14:58:76:8a:
                    3d:db:f1:4f:a6:55:61:28:fc:1f:38:d4:1b:92:0e:
                    c2:0d:84:aa:c0:aa:f4:ae:f0:34:e1:9e:cf:d4:71:
                    f2:36:cf:2d:73:63:5e:09:8a:98:fb:8f:c9:af:46:
                    61:28:70:ac:0b:e0:e6:90:17:d2:2a:99:12:37:d1:
                    9f:c6:87:8c:3e:21:8d:43:b2:7e:17:a6:ae:29:c0:
                    13:26:7a:18:cf:4f:21:fb:fe:30:4d:52:b2:5c:94:
                    17:71:c6:61:91:ee:8b:7b:a3:ce:ce:3f:5a:da:6d:
                    7f:8b:7c:a4:2a:98:7a:18:bc:05:74:14:7f:d2:77:
                    e4:95:cf:47:f2:12:8e:d1:8f:66:94:d4:7c:22:15:
                    e6:db:93:4f:ea:96:c1:76:16:98:cd:9e:14:0e:0b:
                    35:29:26:6c:b1:79:8a:e1:a3:3c:2b:2d:5d:5f:74:
                    ea:e9:5a:78:33:d9:95:a6:4f:2d:e1:4b:14:d9:08:
                    02:7d:34:1a:ed:c3:24:0c:9f:23:89:a8:43:2d:53:
                    47:3a:80:21:de:fa:92:84:e3:d9:0f:41:b1:cb:a5:
                    3e:ab:86:d3:8b:32:d0:d4:ba:6c:8a:9b:45:f7:1c:
                    81:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:85:35:84:80:39:90:63:BE:DD:42:E9:84:AA:70:16:60:A3:58:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/3c3f1331-082e-3016-8d90-383739e6a21b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.202.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:54:4a:16:dc:06:68:4d:4f:12:1f:4a:3b:35:d6:e3:03:fe:
         94:a5:d3:33:1a:ff:33:bb:bc:86:49:bc:d9:72:4b:d2:f2:59:
         ff:35:47:b2:d4:ce:41:25:1c:e9:c2:54:df:53:b8:6c:e6:24:
         2d:b5:9c:1e:0a:f2:1f:40:35:45:12:ce:5f:f0:b2:f1:56:b7:
         87:87:62:91:2f:ce:68:74:9b:2f:99:96:41:4e:8e:02:bd:5a:
         f4:1d:a8:77:e1:b1:d7:47:d4:f3:59:02:c0:ea:b7:93:96:ed:
         81:fe:71:9c:6a:c0:2a:51:66:7e:9d:16:eb:75:a4:96:61:97:
         85:8f:a7:b8:b5:73:39:4e:eb:93:8f:d2:90:b2:19:2a:19:c8:
         67:05:4c:58:ce:99:03:9a:bc:48:ed:5b:ea:47:84:e0:e1:2c:
         23:f1:35:35:15:1c:1b:61:1d:41:fc:6d:58:d4:be:81:15:0f:
         ab:db:2f:73:bf:16:25:e0:d5:e3:8f:2a:2e:67:7e:c5:56:80:
         b6:12:6e:c9:13:45:94:40:8f:55:44:d5:b7:e7:46:6e:ba:fb:
         20:8a:11:80:21:0d:03:dd:a7:55:18:08:e7:ff:b3:90:11:21:
         d1:5a:ca:34:a6:f6:5e:ab:8e:75:f1:38:d3:a8:23:1b:df:6e:
         5a:13:a0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:51:14 2026 by rpki-client