Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/d9629c7f-da06-3d57-82bb-be6b10d9d261.roa
File:                     d9629c7f-da06-3d57-82bb-be6b10d9d261.roa (raw, json)
Hash identifier:          fu1GAFZmN8cN65R9htdqCq3kBqH6ddISDBUvZip7/ws=
Subject key identifier:   0C:47:0B:CB:F1:AB:95:91:36:76:7B:60:8C:31:4B:8F:1D:A5:AA:BB
Certificate issuer:       /CN=0c2f5a4c-917e-4b90-8022-391847ae5699
Certificate serial:       010D0C9F4328584EA79B59D6A6598986B1806080
Authority key identifier: 2A:77:D3:04:F0:E9:28:8C:9E:75:87:0C:E3:FC:5F:DD:14:0B:77:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/d9629c7f-da06-3d57-82bb-be6b10d9d261.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     205610
IP address blocks:        204.235.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/0c2f5a4c-917e-4b90-8022-391847ae5699.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/0c2f5a4c-917e-4b90-8022-391847ae5699.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:59:d6:a6:59:89:86:b1:80:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c2f5a4c-917e-4b90-8022-391847ae5699
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b78eedc9-3a8c-4f53-afd8-7f88a7c24ca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:60:c2:4d:3e:2c:10:6d:20:d6:ec:49:11:68:
                    b3:7a:90:1f:f1:93:fa:f2:61:3d:85:96:99:36:7c:
                    47:af:de:bf:5d:94:73:97:42:1c:46:c3:74:d5:e6:
                    0d:f4:47:7b:41:7d:cd:7a:e9:dc:17:8e:88:6a:c6:
                    98:e8:12:95:03:65:6d:d1:d1:4c:a1:01:e2:3f:64:
                    57:72:a1:86:85:db:17:23:ff:d7:ed:ae:07:b0:f7:
                    d7:99:df:51:8d:05:95:e4:bc:5a:55:1f:3b:55:f9:
                    41:d4:eb:cd:fb:af:09:42:1a:35:dc:73:27:42:81:
                    c0:5e:6d:9a:d1:fa:fb:c1:c6:87:4b:a3:ee:f1:7a:
                    23:a6:d9:2b:34:2d:cc:7d:7b:e6:43:b9:29:e1:24:
                    7b:c8:94:ba:e7:52:55:8c:cf:2b:20:ce:19:d8:c9:
                    68:a5:40:54:94:b0:e0:22:ad:30:cf:48:90:2d:06:
                    68:51:df:36:71:b0:b6:0f:1e:d4:a0:be:27:7e:42:
                    28:08:67:ef:39:bc:d6:7e:30:c7:1c:d9:71:ac:07:
                    72:47:43:5a:d4:89:73:eb:30:b8:7b:13:65:ee:0c:
                    5c:da:da:c6:40:8d:a6:b1:61:4a:f9:41:a8:3b:32:
                    ba:7c:90:39:af:3a:99:1a:62:eb:06:92:c7:34:7b:
                    d5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:47:0B:CB:F1:AB:95:91:36:76:7B:60:8C:31:4B:8F:1D:A5:AA:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/d9629c7f-da06-3d57-82bb-be6b10d9d261.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/0c2f5a4c-917e-4b90-8022-391847ae5699.crl

            X509v3 Authority Key Identifier:
                keyid:2A:77:D3:04:F0:E9:28:8C:9E:75:87:0C:E3:FC:5F:DD:14:0B:77:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.235.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:7e:f8:6c:54:6a:56:eb:54:b8:9f:2f:73:29:22:c7:5f:34:
         20:e3:d4:49:c3:1e:48:ac:1d:20:eb:00:10:cd:3a:60:d5:4e:
         a7:12:72:d5:45:5e:19:44:3e:17:35:45:96:b9:eb:33:b3:28:
         7a:b2:79:1b:72:94:9e:4a:63:9d:4d:99:c4:e9:bd:fb:72:99:
         fa:e7:76:b4:45:52:fe:b4:0f:d9:f7:b3:82:23:2c:86:be:61:
         33:ff:2b:f9:db:da:fb:a3:98:28:04:01:53:b7:49:f1:cd:66:
         19:86:39:57:f3:a1:70:b0:8a:99:cf:a7:98:68:f0:c8:0a:c5:
         8e:c5:b9:24:36:79:0b:5a:63:11:95:70:15:fd:88:35:19:97:
         1f:14:bf:3d:e9:04:27:39:21:21:1b:5d:26:87:f5:dd:d0:e9:
         31:af:50:c5:11:f4:91:a7:ac:85:34:b9:d3:6f:d5:ef:3d:e7:
         17:36:c2:c9:e3:26:5a:78:b2:06:c9:e2:f2:6b:8d:f5:68:4c:
         e7:5d:6c:4c:3f:8f:e4:69:02:fb:9b:5b:b2:0e:20:c8:35:9e:
         cf:1c:6b:26:d8:c0:56:70:b1:23:ca:59:05:0e:5f:67:83:93:
         9f:c4:ee:42:07:a7:0b:80:a2:9d:94:90:f2:ff:08:35:2c:33:
         59:bd:16:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:31:25 2026 by rpki-client