Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/5a2c7a03-706c-3753-821e-9e8765fd223c.roa
File:                     5a2c7a03-706c-3753-821e-9e8765fd223c.roa (raw, json)
Hash identifier:          fxcnO3s6rLZbqGHdwBmtfdtxf57TmqX8gABrf2Cuj7U=
Subject key identifier:   18:63:BE:78:0A:25:2A:04:27:59:F6:25:B1:B6:04:32:6F:2C:F4:DB
Certificate issuer:       /CN=e4233913-8c3d-4df4-bd7d-495f7afba2ac
Certificate serial:       010D0C9F4328584EA78847131E32176144DE48C0
Authority key identifier: 23:E9:67:A1:5B:A9:96:F3:5E:F7:44:E1:D1:D6:08:7E:0E:EC:60:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/5a2c7a03-706c-3753-821e-9e8765fd223c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     10930
IP address blocks:        209.251.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/e4233913-8c3d-4df4-bd7d-495f7afba2ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/e4233913-8c3d-4df4-bd7d-495f7afba2ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:47:13:1e:32:17:61:44:de:48:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4233913-8c3d-4df4-bd7d-495f7afba2ac
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4924a028-4624-4388-95e6-5eaa177db6b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:07:fd:7d:6a:c1:a2:be:9d:4c:d1:51:52:a8:
                    87:b9:3c:3c:67:de:ac:be:7e:ee:aa:c2:70:f0:61:
                    d6:2e:c2:4a:af:49:da:a4:b4:2f:c9:c5:ab:fc:95:
                    56:77:a0:ff:14:bb:4a:b1:2f:0a:00:2f:cd:8b:12:
                    17:0f:d1:a1:a2:2f:75:73:08:ab:45:07:f8:7b:cf:
                    97:1e:ed:6c:12:6e:46:e4:39:e8:d2:7c:6e:18:53:
                    a7:11:97:45:0b:ae:08:2b:d0:07:de:94:01:be:15:
                    44:ac:fa:a0:c7:6c:d3:0f:75:20:3e:93:3b:62:78:
                    fe:fc:d3:ca:29:9e:5b:c2:e2:63:d7:4d:48:a0:45:
                    2a:fb:8c:33:f2:c7:48:a7:5b:dc:ed:81:c2:d8:62:
                    0c:15:5d:52:75:1e:3e:fc:37:49:f7:9b:41:7f:ce:
                    64:7b:5b:05:43:eb:63:bb:ba:59:64:bc:6f:bf:a4:
                    4b:dc:78:e5:31:52:4a:a6:54:f5:f2:bd:fb:5f:21:
                    46:b3:20:bc:8f:c9:88:37:8d:42:80:93:d0:b3:ec:
                    28:d7:bc:a4:6a:0c:c6:9d:a6:db:e8:09:dc:94:58:
                    da:8d:32:15:95:6d:67:44:f2:3b:50:ab:0a:e8:99:
                    9d:57:ad:08:fc:e3:fc:62:af:05:f1:2a:7f:6e:8a:
                    40:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:63:BE:78:0A:25:2A:04:27:59:F6:25:B1:B6:04:32:6F:2C:F4:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/5a2c7a03-706c-3753-821e-9e8765fd223c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac/e4233913-8c3d-4df4-bd7d-495f7afba2ac.crl

            X509v3 Authority Key Identifier:
                keyid:23:E9:67:A1:5B:A9:96:F3:5E:F7:44:E1:D1:D6:08:7E:0E:EC:60:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4233913-8c3d-4df4-bd7d-495f7afba2ac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.251.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:55:a7:35:6f:fa:19:1d:a9:9a:41:5c:58:e7:29:eb:8c:ab:
         83:00:72:fa:65:9c:e7:85:38:33:e4:03:73:1a:19:6a:02:09:
         69:61:45:4a:10:a8:5d:ad:ec:7c:71:ff:b2:08:e1:4e:f1:1c:
         25:c5:f4:41:9d:4a:76:5b:f3:c3:34:c0:16:6c:6d:f9:9f:48:
         22:9a:75:14:27:64:bf:1a:99:f0:c4:4c:59:69:13:a3:6e:09:
         29:b5:05:11:2f:61:bc:69:4d:69:70:9b:7e:e3:fd:e3:06:d6:
         8f:23:75:d7:30:24:65:7f:ad:04:58:74:99:55:bd:46:88:05:
         f3:bc:54:fb:0e:19:4b:e2:88:91:93:d9:f7:30:36:bc:0c:d5:
         c1:c6:73:1b:81:9f:63:90:a0:ae:82:79:a6:e0:ef:bb:f1:be:
         99:64:da:8a:17:0b:4f:84:06:3c:fd:aa:e4:1d:e0:a0:5a:9b:
         6f:17:28:84:3c:0a:6a:f1:ae:a8:7c:3f:6b:3d:85:f9:52:e6:
         37:93:0c:8f:6b:1a:1e:40:d0:3e:f9:5b:73:03:a6:7c:66:c7:
         4d:95:53:6c:a3:43:e2:1c:7d:2b:74:7f:ac:78:ff:48:af:e9:
         fc:ea:6a:4d:26:2a:8b:3e:b6:bd:a1:d2:6d:01:19:a0:05:81:
         b9:6d:37:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 06:54:18 2026 by rpki-client