Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/40385235-f792-3e3f-8a68-b1affa65f084.roa
File:                     40385235-f792-3e3f-8a68-b1affa65f084.roa (raw, json)
Hash identifier:          RRBHx5lJn4RqwTDg7DzI6zUKyAvO9V+S+FAxDPV0Hx4=
Subject key identifier:   F2:E1:F9:4B:FB:40:56:EC:B7:AE:25:E1:3B:94:C6:E1:B4:38:50:B4
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584E18AEEE56CD7317C2402D7400
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/40385235-f792-3e3f-8a68-b1affa65f084.roa
Signing time:             Sun 07 Jun 2026 21:00:12 +0000
ROA not before:           Sun 07 Jun 2026 21:00:12 +0000
ROA not after:            Sat 05 Sep 2026 21:00:12 +0000
asID:                     397422
IP address blocks:        209.237.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:18:ae:ee:56:cd:73:17:c2:40:2d:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jun  7 21:00:12 2026 GMT
            Not After : Sep  5 21:00:12 2026 GMT
        Subject: CN=32fe736c-0618-4899-8ca0-528dab3d47f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2e:06:60:6c:15:dc:8d:08:a4:f8:5b:4d:b4:
                    62:28:ec:6e:4d:24:d9:06:e0:79:98:9d:2f:b5:37:
                    f7:24:e8:3d:66:2e:3d:3b:e9:fc:49:09:db:82:3d:
                    ad:c1:9f:24:70:82:e9:86:1d:0f:7a:71:75:fd:a5:
                    5f:b5:78:35:6f:86:24:15:10:50:10:9a:9c:d3:28:
                    21:2c:bc:d1:51:04:b5:16:51:f3:98:f2:61:bb:9f:
                    7e:5b:e3:dd:0c:1f:6b:b6:4a:77:52:13:3d:ca:ff:
                    85:b3:2f:e7:76:61:03:81:6a:49:63:25:92:96:e6:
                    b5:07:77:12:1c:7e:09:37:f8:15:dd:b7:cc:3d:15:
                    41:35:bc:33:33:47:a9:24:5b:64:a2:1b:af:a7:1a:
                    6c:ae:e3:93:43:0f:ee:89:a8:2c:bf:a8:9e:f2:c6:
                    a7:4a:e1:4e:4f:1f:58:74:78:78:fe:1c:15:d2:2e:
                    9e:36:9f:ac:13:33:5b:7c:5c:93:bc:19:34:dc:37:
                    2c:af:bb:8f:1d:84:fb:b5:2b:65:d6:1f:b6:ed:6d:
                    00:7e:54:28:bc:33:ab:93:9d:cd:7e:fc:2a:cb:26:
                    9c:02:93:6e:d8:bb:b3:93:3a:16:6a:52:1f:2a:fd:
                    03:0e:57:9d:f0:a9:2a:56:77:a5:41:e0:17:2b:6d:
                    ed:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E1:F9:4B:FB:40:56:EC:B7:AE:25:E1:3B:94:C6:E1:B4:38:50:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/40385235-f792-3e3f-8a68-b1affa65f084.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:ef:dc:60:d7:49:97:df:2d:69:c6:0d:ae:52:fa:27:29:4b:
         bf:db:79:78:9d:da:70:3e:5f:db:10:6d:41:59:23:ef:46:8a:
         8b:06:99:21:04:90:52:7b:cb:d7:41:f0:d7:d3:5d:a1:cc:1a:
         ed:93:46:13:e3:8e:96:6c:6c:a2:88:f5:8e:0a:c6:32:0f:56:
         01:9f:2c:43:d0:75:69:3b:f9:46:f5:a6:d1:1f:ef:95:5b:99:
         5f:32:6a:87:b5:0b:c6:93:1e:b1:0a:56:46:70:00:cc:f6:89:
         48:75:dc:15:a5:48:51:71:2d:0b:bc:c8:86:7e:38:da:0b:84:
         92:59:00:e5:c7:fe:b7:3d:b3:e2:74:52:50:55:4d:9b:e6:2b:
         f1:82:e2:17:6c:69:b3:77:59:b7:5e:db:6c:f1:80:49:0f:0a:
         a2:2c:b1:93:9a:ac:96:ca:b5:26:8a:72:2b:70:d1:77:c2:d3:
         93:1a:a5:5d:ed:1f:88:f0:6f:9d:ae:4c:af:de:0e:4c:02:f2:
         ed:5d:22:6b:37:03:51:d2:2a:78:c3:5d:07:c0:8b:9c:33:b6:
         25:23:4a:d2:67:7a:42:98:57:28:dc:eb:08:51:ff:49:ab:d2:
         10:38:3e:dd:85:51:71:98:6d:18:d3:6e:47:c0:d0:dc:cf:87:
         73:33:16:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:49:57 2026 by rpki-client