Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1530aa6d-5709-3ddd-a1fe-8dfd7e22687e.roa
File:                     1530aa6d-5709-3ddd-a1fe-8dfd7e22687e.roa (raw, json)
Hash identifier:          r5QZ5/a4QjATg6A/qRsYTDqRb8rTB3QRmtaft86LDlA=
Subject key identifier:   2B:27:1C:FA:FC:7B:D4:BD:12:A6:77:70:47:DA:B4:B6:AB:3E:3C:5F
Certificate issuer:       /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Certificate serial:       010D0C9F4328584DD4C082807A51FA7733030F00
Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1530aa6d-5709-3ddd-a1fe-8dfd7e22687e.roa
Signing time:             Thu 14 May 2026 13:00:31 +0000
ROA not before:           Thu 14 May 2026 13:00:31 +0000
ROA not after:            Wed 12 Aug 2026 13:00:31 +0000
asID:                     197640
IP address blocks:        209.107.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:c0:82:80:7a:51:fa:77:33:03:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
        Validity
            Not Before: May 14 13:00:31 2026 GMT
            Not After : Aug 12 13:00:31 2026 GMT
        Subject: CN=935d7d60-9627-4a1a-8b3c-d1857b158882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:35:35:cd:fd:b5:30:e9:d1:ca:c1:b0:5b:68:
                    c8:1d:b5:a7:ea:a4:c1:db:00:23:b2:d5:a0:8d:2b:
                    a6:29:2a:14:fa:3c:bf:06:d6:eb:9d:93:7c:f9:c9:
                    8a:5d:e6:8e:69:85:44:14:1d:46:04:a2:cf:65:b9:
                    a7:05:0d:67:a0:8a:92:df:e8:1b:56:92:f2:1c:6f:
                    2b:43:54:5c:99:0a:fd:16:fb:a7:7c:4e:68:a0:65:
                    9d:c0:f3:ff:64:c1:fc:da:f6:e7:32:d4:7a:a4:bf:
                    f7:9e:fd:89:cb:cd:4e:04:59:14:84:2d:ad:47:11:
                    d7:7d:23:e2:cb:08:c1:ee:5e:db:63:4c:b1:13:38:
                    b9:69:e2:43:82:f2:92:b1:f6:8b:36:94:e8:65:c5:
                    45:cc:07:77:dd:1d:e0:ec:0b:cd:5b:07:cc:18:57:
                    97:6e:17:26:d8:6b:64:70:e0:0c:6f:65:2b:14:19:
                    14:34:a6:94:cb:2b:9f:39:dd:8b:a1:cb:41:df:ae:
                    a1:b0:38:bc:ad:36:87:da:0b:92:0b:e9:48:b0:03:
                    a1:73:e0:c8:1d:e1:72:4d:59:fd:c8:d0:27:fe:4e:
                    44:ae:a2:59:36:c4:2b:c9:95:a7:35:ad:be:9e:64:
                    b7:ce:3d:48:11:44:48:3d:7f:4d:81:58:25:61:89:
                    02:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:27:1C:FA:FC:7B:D4:BD:12:A6:77:70:47:DA:B4:B6:AB:3E:3C:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1530aa6d-5709-3ddd-a1fe-8dfd7e22687e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl

            X509v3 Authority Key Identifier:
                keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.107.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:a4:e8:e7:39:f1:b2:83:0e:2e:d8:7e:69:ba:dd:91:c4:53:
         c9:5c:cf:59:c7:f0:a0:46:16:de:c6:c2:43:a8:08:97:02:62:
         a9:84:76:fb:77:64:c3:c6:ee:59:a2:aa:f9:9a:e2:3f:b3:f8:
         66:68:a4:1b:98:c2:39:bb:6b:1e:65:5b:8e:1c:b9:5e:c6:d9:
         64:4c:1d:bb:9a:e0:c8:c2:b8:7a:ff:fa:47:ae:4a:24:df:2a:
         a9:83:b5:e3:ea:c0:4c:ab:e5:6e:8e:8f:5d:ba:56:0b:39:e2:
         50:de:d5:d6:f7:c0:bc:da:87:79:6b:b7:31:fb:03:84:e0:a9:
         53:07:70:c1:99:ee:d5:51:e2:10:9e:03:47:3a:7a:cf:1c:09:
         8d:4f:18:14:92:24:df:8e:e4:fa:6d:91:94:2c:f2:39:3b:08:
         37:b4:2f:7a:c1:fd:74:ee:27:c5:8f:4d:6e:56:fe:c0:d7:e7:
         8e:21:cc:18:a8:77:3d:ca:ac:ed:36:e4:5d:07:7e:bc:8b:a5:
         08:13:a0:b7:ff:24:ff:ee:8a:fc:49:21:f7:8b:e7:06:29:52:
         29:0d:e6:fb:3c:ca:42:b9:55:1b:a0:d8:a3:70:3d:90:c5:60:
         ce:dd:c1:f8:c4:e6:60:ed:b1:79:6a:06:f0:e6:b3:60:af:9a:
         10:59:78:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:11:22 2026 by rpki-client