Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/96f9a3d4-5ecc-3130-b037-1af04b1e15a6.roa
File:                     96f9a3d4-5ecc-3130-b037-1af04b1e15a6.roa (raw, json)
Hash identifier:          S3rZWjUz1RCxA1gEMZ3LZ9K/xtMROA+tw3WKvUgrYGw=
Subject key identifier:   B8:B7:45:F0:BE:EE:D0:9D:A5:28:50:19:EC:42:03:3E:01:38:1A:BC
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584EA79A5A576D0D13BE9E583B70
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/96f9a3d4-5ecc-3130-b037-1af04b1e15a6.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     395096
IP address blocks:        209.53.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:5a:57:6d:0d:13:be:9e:58:3b:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e615cd77-9fff-4ba4-9227-67e4f4cc12c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e7:ea:16:ab:77:07:41:a7:3b:45:f1:31:d8:
                    fa:83:58:62:e6:ed:33:fb:66:77:a7:ae:1d:4e:ea:
                    ed:f8:c9:06:7c:81:93:a3:95:23:11:b8:3d:5d:cd:
                    45:2c:41:70:6f:93:05:9b:be:c2:06:2e:14:16:a2:
                    ec:56:56:af:c6:43:94:cc:85:c5:b2:05:21:19:f3:
                    72:e1:cf:3a:0d:43:6d:3a:e2:9d:1f:00:24:26:09:
                    04:cf:2d:f5:95:7d:f3:58:3c:33:76:da:e1:c7:84:
                    89:7b:26:a9:d8:89:f7:6b:b5:74:fc:97:55:e9:13:
                    9e:2c:2c:fa:26:3f:dc:d5:42:c9:8b:4b:74:03:8d:
                    db:7a:96:98:e9:55:26:8f:33:ee:83:dd:a8:96:f8:
                    29:23:f4:81:ce:33:33:ba:9c:a0:d9:0d:e4:e7:48:
                    74:b1:8c:0e:11:19:ef:67:51:31:61:89:ca:1d:10:
                    c1:d4:59:a8:61:99:97:a5:94:fd:30:4a:1e:7f:17:
                    cf:bc:d0:74:50:c5:1c:d3:bc:a5:cd:2f:81:ca:7d:
                    62:0c:e6:a7:eb:93:24:b0:cd:f1:89:4c:a8:f2:62:
                    8a:85:52:de:88:5d:bc:77:94:c8:a0:b1:f7:c1:e6:
                    b1:b5:c1:6b:6a:1a:9f:6b:18:86:50:70:6f:a5:03:
                    e6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B7:45:F0:BE:EE:D0:9D:A5:28:50:19:EC:42:03:3E:01:38:1A:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/96f9a3d4-5ecc-3130-b037-1af04b1e15a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.53.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         df:2d:7e:29:87:72:e0:e8:0b:6e:e7:d5:65:2c:75:3c:70:75:
         57:72:ab:01:35:05:16:5a:42:dd:ed:a8:00:97:97:1c:4b:55:
         47:03:b6:0f:8b:b2:f1:42:cd:52:22:ae:79:b8:c8:e7:80:04:
         06:dc:6e:6b:51:b6:10:24:bc:c1:d8:1c:44:3d:fc:24:7c:8b:
         32:51:6f:74:06:b3:98:f1:84:a8:93:92:8c:1a:1b:8d:3d:ae:
         21:4f:50:a8:db:20:37:ab:e7:88:8b:68:f0:52:d1:dd:18:fa:
         15:8b:02:bb:42:10:fe:71:4b:0e:29:5f:52:44:07:1d:51:1a:
         39:18:99:9b:71:69:15:c1:5c:f7:c5:85:04:91:f1:19:7b:b5:
         35:68:66:2a:95:99:ba:b6:1a:76:e0:35:8c:de:4d:97:1c:6e:
         d7:6e:63:b0:0e:0d:3e:fb:76:0b:ea:42:e5:c4:97:b1:c4:3c:
         a9:66:1f:19:c2:67:4b:3b:85:89:73:d7:8f:ad:ee:e2:13:09:
         69:84:18:ca:61:09:48:29:a5:ec:5f:70:87:17:e8:cc:29:f3:
         2e:20:83:e6:63:5f:39:a6:41:d9:d1:78:91:cf:0d:ba:70:b8:
         b4:02:75:7f:41:23:cb:09:fc:b9:35:63:be:8f:e5:03:6c:47:
         2f:94:d5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:29:26 2026 by rpki-client