Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/2109739e-057c-3958-a0c2-457b9c912572.roa
File:                     2109739e-057c-3958-a0c2-457b9c912572.roa (raw, json)
Hash identifier:          Rj3MChxvgepzWY2pfWgTDWddaa+DKKtQnbkg+l+O2dI=
Subject key identifier:   1A:8E:D1:B8:8B:51:4E:C3:25:BC:2A:63:78:EB:96:71:D0:3E:DC:D5
Certificate issuer:       /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Certificate serial:       010D0C9F4328584EA7876D7C1816513BFA7A6980
Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/2109739e-057c-3958-a0c2-457b9c912572.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36103
IP address blocks:        204.225.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:6d:7c:18:16:51:3b:fa:7a:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e224ce4c-9d4f-470e-9c21-0706781dd184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:93:27:b9:40:36:36:39:a6:10:d5:62:c3:dd:
                    03:7b:fd:b8:ef:58:e3:07:27:4c:1b:67:94:38:32:
                    c3:44:54:34:56:77:72:0d:cd:85:78:79:fb:e3:b0:
                    c7:94:83:4d:47:84:bf:9b:74:c5:ae:e5:db:e4:0d:
                    1d:ff:9c:47:6a:38:a6:ac:b0:d0:82:49:19:d6:ff:
                    f8:61:bd:76:2c:53:10:81:90:a7:d4:c6:38:c5:82:
                    04:8e:2f:02:c4:06:b0:2b:cf:5e:db:43:79:58:eb:
                    31:7e:18:31:03:54:6d:c1:ca:cf:cb:e9:2c:9d:4f:
                    d7:08:b7:56:89:ab:d4:a4:83:0e:e0:10:52:86:7c:
                    78:2c:d8:df:d0:f3:9a:5d:86:81:48:21:37:73:c7:
                    8b:d7:fe:75:3a:99:0e:2f:3a:4e:64:22:29:f3:78:
                    05:0d:f4:f3:f0:75:6f:fd:47:8a:79:71:44:00:51:
                    c4:5d:33:78:0e:e5:10:50:20:91:08:0e:5a:60:ef:
                    54:1f:f8:5d:6c:93:2a:8c:cf:cc:da:06:75:e1:f1:
                    3d:67:b7:a1:a9:2d:de:ff:1f:77:5b:5a:7e:db:ec:
                    71:44:75:73:d4:41:4b:0f:04:37:f8:bd:a2:c3:15:
                    0e:72:59:32:49:27:ec:cd:d1:ab:b1:26:7c:08:2f:
                    6d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:8E:D1:B8:8B:51:4E:C3:25:BC:2A:63:78:EB:96:71:D0:3E:DC:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/2109739e-057c-3958-a0c2-457b9c912572.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl

            X509v3 Authority Key Identifier:
                keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.225.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:9a:ec:f2:f3:c3:b2:5a:fc:19:d6:34:33:61:ee:12:12:53:
         6c:3d:cd:14:66:27:04:79:27:2a:ab:1d:44:12:5b:df:a3:63:
         6f:2d:09:34:d7:21:38:9a:16:7e:92:51:d5:27:29:54:e2:14:
         7d:ee:ee:ee:90:e1:03:60:1e:69:fc:4d:76:55:3e:33:c5:fc:
         59:e7:ff:c6:db:be:11:56:7f:17:0b:b3:cc:4b:5c:e6:2c:84:
         d5:d9:f1:2e:1f:45:4d:c1:d2:15:18:81:ad:b0:0d:fb:80:30:
         a0:2e:29:03:cb:04:14:1c:33:ca:48:46:09:02:a4:aa:00:80:
         53:c4:fa:1b:f1:d7:51:b5:fa:37:f7:3d:0d:82:b6:8d:ff:53:
         2c:bc:1f:95:c6:63:c7:c8:07:c8:3d:c8:81:33:bb:15:ad:8a:
         a9:b8:c4:36:ac:fe:23:28:ee:de:52:6e:49:23:7d:45:e5:f3:
         9a:d1:e4:b4:ac:47:8c:5d:ca:3c:69:ff:0c:00:39:fa:d5:76:
         6c:4a:77:c3:92:dc:e3:06:f0:37:04:77:9b:5b:ba:66:ea:1a:
         98:e8:10:e5:dd:de:51:2f:de:cc:77:35:8c:50:44:b4:c7:75:
         c8:c6:d6:68:77:3f:04:34:6c:7b:ad:6b:12:e8:10:5e:1f:a0:
         73:5d:16:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:52:15 2026 by rpki-client