Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/8c3395c2-9a5f-3f88-a2fb-3702c8f75c9f.roa
File:                     8c3395c2-9a5f-3f88-a2fb-3702c8f75c9f.roa (raw, json)
Hash identifier:          kIbebTC/OTSxqeBvE9Lxo8rJuQUCnAHliYNRiFLvkOY=
Subject key identifier:   90:C7:27:B0:16:6F:7F:FE:31:26:F7:E8:EE:C1:EE:F9:46:17:08:91
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584E18AEEE619F7F57016FEBBA40
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/8c3395c2-9a5f-3f88-a2fb-3702c8f75c9f.roa
Signing time:             Sun 07 Jun 2026 21:00:12 +0000
ROA not before:           Sun 07 Jun 2026 21:00:12 +0000
ROA not after:            Sat 05 Sep 2026 21:00:12 +0000
asID:                     397422
IP address blocks:        209.237.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:18:ae:ee:61:9f:7f:57:01:6f:eb:ba:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jun  7 21:00:12 2026 GMT
            Not After : Sep  5 21:00:12 2026 GMT
        Subject: CN=bcf93e30-87fe-42d0-bd92-69d08c716c71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cd:5d:8e:5f:d1:a8:42:72:2e:60:3c:c1:9b:
                    5d:f5:c3:9f:f2:2e:8a:e4:22:7e:8f:12:f4:0a:f7:
                    41:7c:5c:4c:cd:aa:ec:92:03:b1:c9:4b:72:5a:1f:
                    9d:65:22:2c:d1:7b:da:ad:4a:3b:99:a5:68:f2:ce:
                    a7:20:f9:35:f8:33:cc:d1:ce:3b:65:af:d8:35:39:
                    e5:ca:87:8b:97:6c:df:f5:89:62:4d:b7:38:27:89:
                    ba:a7:96:e6:ee:79:ce:fc:2a:ad:60:2b:80:d9:f1:
                    24:73:9a:28:3e:c6:3e:b3:d1:df:2b:b4:85:03:96:
                    41:18:c9:09:52:35:9d:83:a6:bf:72:d5:26:e8:22:
                    c3:58:96:0c:da:75:78:7e:55:d1:a8:f0:c9:62:a7:
                    de:c0:ed:76:dd:4f:25:f5:27:75:f8:9d:3b:09:33:
                    0e:a8:db:0f:b2:e9:2a:58:1e:71:9f:6a:3f:cf:9a:
                    80:05:05:ae:a6:f9:81:99:35:ab:0a:f3:08:d4:7b:
                    72:dc:d7:e3:c3:bd:0e:d8:8f:dc:cd:90:a2:f4:2c:
                    0f:80:5f:ad:6c:c4:9a:1d:26:1e:81:66:cf:14:24:
                    ed:12:9d:f6:23:9f:7b:e6:86:1f:9a:51:4a:e2:2d:
                    d2:10:b4:58:9f:ea:6c:b3:52:e6:8e:52:19:b7:03:
                    e9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:C7:27:B0:16:6F:7F:FE:31:26:F7:E8:EE:C1:EE:F9:46:17:08:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/8c3395c2-9a5f-3f88-a2fb-3702c8f75c9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:95:07:7a:20:9b:39:55:83:f1:0b:c0:85:20:b2:74:43:93:
         09:65:f5:ae:46:b2:b0:0d:9d:e0:b9:5f:2d:df:cd:e0:3e:03:
         b9:60:1f:91:a8:a6:ee:3d:3e:c6:b0:a2:1b:bf:e8:2f:7f:4b:
         57:d3:50:6c:ef:b9:4e:a9:44:a6:c9:03:56:64:ba:f2:e6:95:
         a6:da:e8:86:53:2a:6d:6f:1f:b4:ba:70:7c:a3:0e:39:0d:87:
         3e:26:80:ee:72:b7:f3:51:5a:e6:c1:3e:6d:77:9b:00:ef:99:
         df:92:31:07:5e:da:6a:58:fe:3b:df:d3:35:35:ff:4b:91:1f:
         e1:64:4f:eb:46:3c:02:74:0d:4f:8c:91:df:38:65:c9:21:b7:
         4a:69:9e:a4:f3:0c:12:26:24:b8:89:01:49:cd:9b:c9:45:8b:
         47:ea:b4:1a:43:9d:6f:ef:b2:82:33:4a:1e:ed:e1:7e:33:bc:
         52:4c:19:28:f3:aa:d2:7e:e2:b6:39:c7:95:6c:33:87:b2:a5:
         d8:be:a1:73:52:46:e2:7e:97:a8:ed:0e:e2:4f:cd:a3:2b:7c:
         d0:50:15:8f:28:2b:7e:cf:17:77:fc:db:2f:a8:24:68:f7:95:
         f6:7b:40:68:6a:2b:48:4a:30:30:f9:16:93:d7:bf:f1:1a:54:
         98:13:86:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:14:40 2026 by rpki-client