Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/c1a9e4d0-551e-36ec-a5d4-c83c37e8cd0b.roa
File:                     c1a9e4d0-551e-36ec-a5d4-c83c37e8cd0b.roa (raw, json)
Hash identifier:          BoAMeYFfjNvVunLkSGREiun+tAhagGunpBWgi3CsW8k=
Subject key identifier:   3A:52:B9:5A:65:6C:D9:CE:DF:60:52:F3:A4:85:85:86:07:3E:BD:2C
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584EA3D351AC7FAF7E5FA9D69D00
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/c1a9e4d0-551e-36ec-a5d4-c83c37e8cd0b.roa
Signing time:             Mon 27 Jul 2026 17:11:03 +0000
ROA not before:           Mon 27 Jul 2026 17:11:03 +0000
ROA not after:            Sun 25 Oct 2026 17:11:03 +0000
asID:                     46606
IP address blocks:        209.34.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a3:d3:51:ac:7f:af:7e:5f:a9:d6:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Jul 27 17:11:03 2026 GMT
            Not After : Oct 25 17:11:03 2026 GMT
        Subject: CN=eec75b49-6bf1-4b28-a048-07e1f6ecb9ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:75:af:b6:1e:9b:a6:d4:ba:31:05:b5:f1:d3:
                    15:0c:d1:ee:aa:41:8c:03:92:f7:af:a6:69:2a:8f:
                    09:9f:60:db:ca:6e:b6:3c:29:76:e2:f4:36:d7:75:
                    ef:04:44:5f:87:41:fb:81:8f:6f:44:4f:ac:b0:11:
                    62:07:8c:2a:b4:32:47:d1:9b:ae:43:b6:32:0d:68:
                    c2:95:1e:b6:11:b7:47:ec:b3:f6:a9:bf:97:f4:3c:
                    08:84:2f:e8:71:fd:f3:b5:97:ed:ad:47:66:f9:50:
                    c8:0f:3d:19:3b:c3:03:e5:84:20:23:93:bb:72:02:
                    a2:cf:c4:de:8a:5c:03:af:aa:05:01:a2:6b:1e:56:
                    8b:d4:71:04:c5:c8:b2:41:54:08:00:e2:c9:d7:b7:
                    96:b5:00:f1:55:a7:82:b1:4b:c5:19:ac:70:10:a7:
                    59:a1:dd:1a:e8:fd:30:3d:45:f2:07:a7:da:e4:a4:
                    7b:7e:93:b2:73:30:49:98:c4:94:98:3f:31:f6:92:
                    9f:08:f3:2d:c5:ed:b2:32:56:ba:a8:ed:14:c4:b5:
                    07:43:bc:32:8b:81:45:89:7c:6c:1b:8e:35:f6:d4:
                    f5:d0:be:7e:ff:af:0d:d9:03:e7:aa:97:1d:8d:49:
                    f7:fb:41:12:7b:fb:b4:16:16:b2:01:e1:5a:5a:12:
                    07:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:52:B9:5A:65:6C:D9:CE:DF:60:52:F3:A4:85:85:86:07:3E:BD:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/c1a9e4d0-551e-36ec-a5d4-c83c37e8cd0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.34.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:d3:3e:c7:04:bf:bb:95:9e:3a:16:01:c7:07:2b:e9:a8:5f:
         cf:85:c5:e8:0c:4b:56:35:ad:0d:62:3f:0c:96:97:56:dd:4a:
         f2:67:e8:37:fd:91:2e:a6:9c:9b:e9:f7:5b:0f:51:ba:23:05:
         5c:2d:cb:00:f4:2e:b2:60:4b:ca:74:be:d4:29:c4:3b:37:30:
         ac:f1:bd:9c:50:63:2e:ba:3f:22:01:7f:a8:41:53:aa:95:14:
         d1:e6:1f:b8:a1:24:55:a7:15:20:00:61:e7:86:87:7e:cc:35:
         e7:6c:8c:24:e1:45:94:37:e5:49:08:0c:35:86:0d:05:d4:ce:
         65:6f:24:c9:9c:4f:d2:2a:4e:a3:e9:23:69:12:c7:4f:70:fb:
         df:1b:49:20:97:3e:9e:7b:2b:4f:35:6c:05:f7:82:67:5c:22:
         6a:a3:93:0f:1b:6e:ba:84:f3:03:2b:9e:f0:cc:56:d5:32:0b:
         5e:ba:6f:ab:df:3b:3b:d4:8f:0d:56:18:74:13:f9:3a:61:1b:
         db:e8:64:42:05:65:c8:52:5f:53:43:96:d8:30:19:cf:09:00:
         de:64:b4:c5:7b:a2:ad:b9:c5:87:c3:7f:40:68:a5:b2:84:b3:
         89:95:a8:9d:e2:3a:a0:33:dd:3d:00:15:cd:83:b2:5d:9e:16:
         58:85:60:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:16:02 2026 by rpki-client