Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/639c1735-1cd0-355a-a116-4129dc8f68b1.roa
File:                     639c1735-1cd0-355a-a116-4129dc8f68b1.roa (raw, json)
Hash identifier:          ESyRdWrCD/4SdCC9sx9CcBOhOwLQiYG92p4fqRYsJ68=
Subject key identifier:   09:8E:EE:7F:D4:D6:26:09:A8:B0:C4:B3:B7:F2:FF:F1:6B:E2:D9:E4
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F4328584E5A49F717D2E68FF3C2963700
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/639c1735-1cd0-355a-a116-4129dc8f68b1.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     20471
IP address blocks:        209.124.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:49:f7:17:d2:e6:8f:f3:c2:96:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=b4cd9a72-3fb5-48ff-8bd2-3909914065f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8a:66:64:e3:87:b2:fc:23:89:e1:e0:87:0c:
                    65:bc:e4:f1:8b:7e:28:69:34:bb:17:cc:26:2b:70:
                    77:e0:bc:6b:56:98:22:e7:f1:47:cf:c8:8e:ef:91:
                    8d:7a:ff:f8:bd:e2:5d:19:28:36:2c:33:52:5a:64:
                    7b:9f:7e:6c:16:52:d6:12:69:04:a3:63:3f:b3:19:
                    b4:57:7a:b5:8b:9e:89:1c:2a:2b:37:ef:3c:6c:3f:
                    66:80:eb:b0:45:32:ad:f9:fa:3b:1a:3a:2e:d4:ad:
                    a2:cb:06:03:ea:89:60:00:29:f6:b3:21:f1:42:83:
                    4c:71:cc:22:3d:03:95:05:29:8f:36:cf:05:11:7a:
                    23:27:c5:3a:9f:14:96:30:56:3d:04:d5:8e:5c:9b:
                    08:98:d4:35:93:56:d4:ed:80:e2:bf:5a:93:f3:7a:
                    dd:25:8b:67:05:76:6f:fd:f5:13:e5:0a:0f:1d:53:
                    0a:93:dd:fc:3b:b5:5e:8e:cb:9d:eb:40:b6:91:2b:
                    e7:ae:9b:bb:ce:14:cd:f9:59:8c:08:b4:d2:3d:59:
                    cb:31:cd:3c:5b:fe:30:0d:ae:09:82:82:a9:ea:9e:
                    ac:a7:b2:88:a5:04:77:cd:b8:ac:78:e5:f0:03:a6:
                    16:7a:b3:25:21:de:43:90:1e:9e:a1:5b:e7:11:9f:
                    fa:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:8E:EE:7F:D4:D6:26:09:A8:B0:C4:B3:B7:F2:FF:F1:6B:E2:D9:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/639c1735-1cd0-355a-a116-4129dc8f68b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.124.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:9b:93:cc:0d:72:ad:f6:7d:9e:ef:b5:55:7b:5f:c9:9d:9c:
         9a:bf:d0:28:04:e1:4b:b2:d2:b7:76:dc:45:64:06:9c:ec:01:
         93:e0:bf:20:bf:b1:2e:20:cd:7b:fe:bb:d8:80:82:73:61:6d:
         f1:7d:bb:6d:dd:12:23:b2:72:e1:11:c3:79:92:76:60:40:02:
         28:56:31:db:2d:b3:45:89:14:d6:9a:e9:f5:25:92:e2:81:e9:
         5f:c5:ab:6e:9e:cd:92:9d:27:91:4d:1e:cf:61:b2:6d:94:6d:
         af:23:d6:75:2d:8b:13:73:bc:87:f4:14:08:a7:36:e2:a2:aa:
         1d:f0:73:97:f3:6c:b4:16:41:e0:ac:db:19:52:df:6c:3c:0f:
         ac:d2:89:62:af:6d:61:a7:78:d2:12:bc:7a:5f:e2:be:bc:0d:
         92:00:7d:30:09:89:e3:92:28:f6:96:b4:5f:69:c8:99:28:ed:
         7c:91:1d:b6:84:ec:e3:e5:1b:80:59:38:61:30:6e:c6:20:06:
         db:fe:62:68:60:7f:9d:b1:79:66:b5:74:d8:a6:0b:d6:13:59:
         40:a4:f9:94:9c:44:1c:7b:db:97:01:4c:59:44:41:60:f2:2c:
         8b:d0:38:7e:f9:f1:66:a6:f3:bf:46:c2:7f:0b:52:0d:6c:96:
         c8:6b:bb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:26:49 2026 by rpki-client