Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee/339c2a74-2946-3eea-b96c-e0a5daeb337d.roa
File:                     339c2a74-2946-3eea-b96c-e0a5daeb337d.roa (raw, json)
Hash identifier:          G/Q2OZHWwBnxDZ1XGzCxG/9hATp+gSM5QJcjELbRXzw=
Subject key identifier:   B6:D3:B6:7A:C6:89:62:28:14:E3:98:D7:1B:0F:18:BC:68:B3:96:30
Certificate issuer:       /CN=03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee
Certificate serial:       010D0C9F4328584E3764840662AF9CFD8686AA80
Authority key identifier: 08:C8:1D:91:33:1A:4C:6E:FB:89:78:75:38:B0:AF:2E:2B:95:FB:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee/339c2a74-2946-3eea-b96c-e0a5daeb337d.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     15830
IP address blocks:        209.196.248.0/24 maxlen: 24
                          209.196.249.0/24 maxlen: 24
                          209.196.250.0/24 maxlen: 24
                          209.196.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:84:06:62:af:9c:fd:86:86:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=dbd51f42-0af8-4a7d-b2ea-56a343b6dece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:53:06:4c:6b:da:da:cf:c6:13:5e:18:ad:be:
                    9a:d9:ba:85:a1:5b:9c:7e:46:4b:55:06:0e:f8:2e:
                    2c:50:20:bc:ea:51:22:25:08:90:9e:e9:0d:7d:b0:
                    2f:78:2c:17:a9:9a:70:3f:c3:eb:23:a5:e8:57:ed:
                    5d:36:56:e7:9e:51:5a:4a:4e:30:0a:1e:74:f7:2a:
                    79:89:3c:72:a9:b5:c2:3d:d8:32:24:c4:d3:39:f8:
                    30:78:4f:f1:39:4f:41:28:02:ed:9d:f3:ee:00:28:
                    07:cb:31:f5:98:28:13:84:82:48:78:b0:80:12:8b:
                    41:31:18:ba:60:4e:b0:6c:81:8c:12:88:1d:de:5e:
                    a3:bf:eb:8b:8b:b9:46:76:97:da:15:54:32:a9:14:
                    fd:d2:22:c2:f1:5a:2c:43:1f:79:95:47:c7:c4:af:
                    76:0d:ca:62:a3:c3:92:39:b1:10:4d:30:8d:ee:8d:
                    a3:53:92:17:d0:8c:67:df:9d:b9:6f:1a:74:c5:b7:
                    12:84:a3:e5:f2:fb:54:7e:ac:6e:ff:f2:76:64:c9:
                    3c:22:d4:26:3d:02:84:42:a1:44:85:f9:0d:a6:e7:
                    81:6b:3b:7a:bd:24:0e:28:82:c0:66:6b:34:d2:a6:
                    62:22:3b:3f:d0:5d:a1:a4:24:a1:91:4e:78:6c:10:
                    bb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D3:B6:7A:C6:89:62:28:14:E3:98:D7:1B:0F:18:BC:68:B3:96:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee/339c2a74-2946-3eea-b96c-e0a5daeb337d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee.crl

            X509v3 Authority Key Identifier:
                keyid:08:C8:1D:91:33:1A:4C:6E:FB:89:78:75:38:B0:AF:2E:2B:95:FB:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/03490ae3-41cd-4e9a-8dce-3c9c7f7a10ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.196.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:49:0f:d4:02:79:88:d7:f9:46:3f:6b:16:29:60:86:06:8b:
         53:30:03:c7:47:7f:e4:a8:9f:33:2b:d6:e5:77:b9:70:9a:9d:
         38:ee:37:18:18:a8:58:52:9e:2e:96:56:0e:b7:33:7b:5b:39:
         49:58:d5:59:f5:c7:2d:b0:b4:27:ba:4d:c5:b7:86:e5:61:a0:
         aa:6a:20:1f:fb:8f:6d:98:b6:0c:da:b4:3e:98:17:e1:c9:dd:
         92:2a:c8:af:2c:aa:ce:97:84:a4:15:b6:dd:bb:26:d0:8d:17:
         a7:38:8f:ef:49:ab:eb:fd:05:62:1f:5f:48:1d:0b:bb:85:26:
         41:f7:ae:b0:af:80:2d:c6:a2:7e:b3:9c:f5:59:13:06:ae:a7:
         01:c5:d8:0b:ad:ab:0a:7d:a4:32:27:ef:54:0a:eb:cc:47:e4:
         4b:bd:f7:b4:24:16:f6:42:e3:1c:b5:30:1e:2c:cb:16:4a:d2:
         33:2c:9d:3f:86:96:79:41:1c:55:e8:bf:bb:70:11:72:fb:a3:
         7e:39:5d:37:aa:e4:e4:43:fc:e3:8d:41:b4:52:b3:26:8d:86:
         17:4d:86:42:8e:11:1f:d7:5b:2e:38:45:a7:94:59:30:6a:62:
         bc:f3:cd:c8:7d:f0:ae:ff:3a:41:e8:77:22:3d:be:67:9f:d6:
         20:ad:48:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 19:10:04 2026 by rpki-client