Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/39d667cb-bca1-38d9-9e7e-422a1b94b668.roa
File:                     39d667cb-bca1-38d9-9e7e-422a1b94b668.roa (raw, json)
Hash identifier:          c7Yr8dNQih3lQtuYA4/uxgiYQIdu/ng6CiA8Xg0RPRY=
Subject key identifier:   D4:BF:F1:CF:15:E4:D0:62:EB:0B:79:D7:43:AF:5E:C1:28:FF:7D:8A
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584EA3D2F6D9CE94E5770EF2FC00
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/39d667cb-bca1-38d9-9e7e-422a1b94b668.roa
Signing time:             Mon 27 Jul 2026 17:10:20 +0000
ROA not before:           Mon 27 Jul 2026 17:10:20 +0000
ROA not after:            Sun 25 Oct 2026 17:10:20 +0000
asID:                     198949
IP address blocks:        209.34.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a3:d2:f6:d9:ce:94:e5:77:0e:f2:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Jul 27 17:10:20 2026 GMT
            Not After : Oct 25 17:10:20 2026 GMT
        Subject: CN=3b9c06af-5851-4524-b4c2-d270ef1aa4c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b7:01:ee:f6:8d:36:d3:4d:12:c4:60:6c:fc:
                    26:30:06:d2:d3:79:1c:bc:86:1c:3b:63:79:7f:ad:
                    b2:4a:74:c6:27:3e:cc:93:a6:c8:41:da:35:52:4d:
                    a6:0f:0d:23:41:c8:3f:f2:4a:d0:fe:14:3a:65:db:
                    b0:27:d6:a1:dc:95:65:79:e6:e3:a9:40:c6:c9:05:
                    fe:4b:d6:22:ed:64:a5:1d:2c:08:bc:ae:11:30:1d:
                    91:e1:03:53:c9:dc:ed:96:89:1e:85:3f:f1:73:6f:
                    63:7b:4f:02:cf:d7:db:99:9a:63:ec:7e:19:43:cc:
                    23:02:35:19:dc:9b:7b:e6:25:d4:65:59:18:3e:83:
                    94:76:08:fa:48:f1:11:64:eb:2e:cb:e0:5f:a0:2c:
                    dd:c7:4b:77:8d:e2:46:65:a7:2b:60:4e:81:93:76:
                    22:22:ae:c8:25:47:db:f8:67:21:7b:74:f5:c0:2f:
                    f7:e6:7e:ae:36:e8:77:9a:cf:0f:01:80:c5:48:83:
                    c3:7d:40:5f:f2:aa:be:58:1e:19:44:bb:5b:80:ca:
                    9f:47:73:20:c3:04:51:0e:83:da:e6:b1:7a:cb:3b:
                    ea:1b:3b:11:29:e6:68:53:a5:36:5f:5f:c4:87:ff:
                    cc:07:bf:0e:4e:5a:cb:96:1c:c2:de:5b:de:39:ea:
                    fb:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:BF:F1:CF:15:E4:D0:62:EB:0B:79:D7:43:AF:5E:C1:28:FF:7D:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/39d667cb-bca1-38d9-9e7e-422a1b94b668.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.34.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:c9:c4:f7:ed:79:60:48:3a:18:52:dc:fd:7e:3d:20:06:9e:
         79:be:fc:49:9d:52:64:1d:0f:f5:22:5b:df:4a:57:95:41:0d:
         8d:fb:6a:ae:dd:0a:18:76:5f:1e:34:4c:af:2c:17:2d:59:89:
         59:d5:6b:a0:53:fd:1d:72:9f:6d:fc:41:57:6e:d0:22:fe:97:
         d8:81:a4:48:50:96:5f:ec:1c:e1:1b:48:bd:73:c3:81:23:94:
         e7:39:6d:8f:28:fd:93:07:b1:6d:e3:e0:55:38:82:d1:d5:dd:
         6e:e0:13:e6:14:b7:29:3c:5a:69:e4:7a:2b:90:2e:95:99:59:
         14:1a:70:93:31:0d:14:ad:46:3c:eb:f3:65:8f:49:be:f4:1f:
         f1:a8:8b:4d:89:3b:bd:d6:ad:ae:45:3d:ff:76:dd:2c:44:10:
         a7:fb:b8:b7:76:e7:9a:f9:30:93:2a:db:77:76:47:10:06:eb:
         08:17:91:a6:5a:48:2b:3f:52:a3:fc:71:9a:46:c1:e9:c3:6d:
         f4:df:de:9a:ca:e6:2a:8c:5d:c7:01:c8:2b:2e:4a:15:73:c2:
         f1:3d:08:84:1d:1e:b0:57:f6:84:3b:97:a7:fa:19:e6:c2:0e:
         bd:e7:95:4e:2f:e1:97:23:3e:df:d9:28:54:d8:4a:ac:ec:8e:
         68:c4:6d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:06:59 2026 by rpki-client