Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/a3efaaf2-e770-3131-8f1b-61cf9f1e627a.roa
File:                     a3efaaf2-e770-3131-8f1b-61cf9f1e627a.roa (raw, json)
Hash identifier:          Nwv7m4cwm0TObgvXH2Px+1wOuOfGcOZ5t7YdAe5Xssg=
Subject key identifier:   EF:05:D5:47:48:0D:F3:B9:CD:9D:89:42:BF:09:AA:33:8A:2A:DF:37
Certificate issuer:       /CN=69686900-f201-4b2c-a1c7-afb725abe47f
Certificate serial:       010D0C9F4328584EA7916B521E0C56835DA1E130
Authority key identifier: 46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/a3efaaf2-e770-3131-8f1b-61cf9f1e627a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     29951
IP address blocks:        209.63.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:6b:52:1e:0c:56:83:5d:a1:e1:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69686900-f201-4b2c-a1c7-afb725abe47f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=86183fe7-9205-4a80-8154-9c9e029a3899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:27:43:19:95:2a:69:17:40:4e:ca:51:da:14:
                    73:bf:04:6d:f1:76:de:b0:85:25:35:22:78:ec:9d:
                    ee:14:ed:42:20:21:47:e5:3a:42:f9:9c:e2:46:af:
                    0b:ed:04:de:8e:ad:d6:22:85:98:3d:5a:21:ba:47:
                    f3:58:e6:1c:45:d5:75:7d:ea:cc:8c:87:c6:88:b1:
                    a2:09:59:2c:e1:61:c9:1b:d2:f0:10:80:38:64:4d:
                    89:24:8c:10:ec:91:76:31:0c:f6:6b:10:f8:1e:ea:
                    d1:eb:c7:af:b1:c8:6d:1b:59:94:fe:8a:2c:83:79:
                    ee:99:4a:5c:5f:af:b6:5c:43:52:eb:4d:74:d5:eb:
                    22:81:e6:bb:89:c8:98:88:c1:ac:02:84:31:fe:d9:
                    53:24:b6:ec:77:a9:7e:90:83:5d:73:03:3a:08:5b:
                    c9:c1:28:8b:5c:03:ef:52:ce:19:54:66:0a:9c:f3:
                    f1:e4:6a:cb:da:6c:21:27:5e:18:3c:11:88:f5:fe:
                    33:69:70:7c:81:30:99:d0:dd:8e:4d:02:0c:2c:89:
                    b4:c1:3c:86:09:fe:c2:c4:7e:e4:de:73:ae:78:42:
                    ab:69:cc:81:3a:e9:06:7f:11:c7:8d:80:d3:1a:7f:
                    61:45:d1:d7:4c:a4:6e:14:47:e1:1f:6e:16:ed:0f:
                    80:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:05:D5:47:48:0D:F3:B9:CD:9D:89:42:BF:09:AA:33:8A:2A:DF:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/a3efaaf2-e770-3131-8f1b-61cf9f1e627a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl

            X509v3 Authority Key Identifier:
                keyid:46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.63.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:53:4c:df:a4:3b:9a:a4:61:ec:05:25:c4:3d:79:4a:20:0d:
         09:13:7a:c5:f1:80:f4:e0:87:40:10:1c:a2:f8:51:07:b5:0c:
         ab:7e:1b:7d:a7:35:ef:b7:b7:f1:b9:27:02:b7:ce:35:91:7b:
         67:c5:b5:a4:39:c8:81:a0:10:25:53:0d:3a:fc:ce:31:55:b4:
         a8:98:e5:7c:eb:b6:2e:30:14:c7:8a:de:ef:45:24:00:47:5c:
         b0:0b:ec:fd:aa:3b:dc:30:a5:6a:16:cf:7a:e1:af:e8:8e:b2:
         19:d6:7f:37:2a:8a:78:24:bc:d4:fe:5f:0a:11:90:92:7b:cb:
         7e:9a:1e:73:fc:34:b0:3d:2e:c8:6a:76:5a:ad:3e:81:4e:55:
         a8:84:c4:15:34:7b:88:b9:2a:d7:6a:3c:b7:1c:89:6c:f0:08:
         68:be:80:27:3b:2a:bb:42:a1:dc:7a:19:83:6a:27:39:ee:ad:
         74:a7:4a:7c:36:5a:7d:fb:6d:7f:f6:5c:fa:1f:d3:c4:3f:54:
         37:0a:5d:2c:b8:37:4a:6d:ee:fa:6c:1c:b0:a4:4d:c4:96:16:
         e3:2f:20:bd:db:c6:f0:78:45:40:01:7f:a7:8b:da:72:08:32:
         fc:32:1a:2a:0a:f6:3e:d4:41:8e:c4:62:87:ad:ff:4c:50:c0:
         2a:40:ea:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:49:23 2026 by rpki-client