Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/232df44e-b887-3f97-af2f-cc7a9b0db57e.roa
File:                     232df44e-b887-3f97-af2f-cc7a9b0db57e.roa (raw, json)
Hash identifier:          EDRb244t7J11tNkhUL97h/1zDI9cnh8IbYqxNivOxSI=
Subject key identifier:   5C:D8:19:C2:D0:FA:C9:1A:C3:6E:0F:A1:CE:06:1E:91:CE:40:D9:35
Certificate issuer:       /CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
Certificate serial:       010D0C9F4328584EA795EE55BCB54E3EDF65FCE0
Authority key identifier: F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/232df44e-b887-3f97-af2f-cc7a9b0db57e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6315
IP address blocks:        198.60.109.0/24 maxlen: 24
                          2607:24c0:2000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:ee:55:bc:b5:4e:3e:df:65:fc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ae09727a-ddc9-482a-a939-ce614f9b475f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c1:6e:5a:fd:97:ec:59:26:92:67:77:3d:5d:
                    21:9b:ac:f2:92:f7:33:2a:30:f7:a5:24:e3:32:e6:
                    a2:1d:5e:d1:f8:45:67:58:33:5f:12:f3:b9:94:eb:
                    92:2a:d2:4a:2e:99:ff:ac:24:25:38:af:1b:75:7d:
                    ce:6b:2d:e5:94:a9:75:ef:29:59:c6:8e:41:dc:4f:
                    25:92:91:a3:60:40:f9:10:35:d3:ce:57:4f:92:86:
                    52:80:8e:7d:71:bb:08:cd:e2:8c:f3:e8:bb:e2:b7:
                    1f:8a:6c:4f:4b:e7:ac:2d:7b:17:c4:70:fd:a4:26:
                    cd:08:ac:29:db:c5:ab:d4:8d:f8:b1:bd:b4:d2:63:
                    d1:62:8c:da:7e:17:9c:18:d6:a9:a0:41:e2:a0:de:
                    a4:95:ef:a9:eb:48:e0:7f:e9:35:da:0a:10:ce:10:
                    ef:79:cb:f7:8f:10:cb:d2:aa:11:44:fb:09:23:d6:
                    a9:2e:f1:74:17:31:46:07:41:0b:1a:b6:fe:e2:a5:
                    26:b1:81:ae:c5:d7:e7:fc:96:cd:b2:e6:c5:bb:02:
                    ec:f2:80:03:ea:5f:fb:cc:c5:ba:e0:a5:7e:92:53:
                    7c:d5:11:f1:28:d1:06:4c:2a:13:93:ce:20:16:8d:
                    2a:63:86:13:35:6a:33:4e:53:41:ae:e7:e0:36:70:
                    6c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:D8:19:C2:D0:FA:C9:1A:C3:6E:0F:A1:CE:06:1E:91:CE:40:D9:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/232df44e-b887-3f97-af2f-cc7a9b0db57e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl

            X509v3 Authority Key Identifier:
                keyid:F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.60.109.0/24
                IPv6:
                  2607:24c0:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:23:f9:40:c4:93:3d:05:d9:6a:dc:df:6b:69:b7:81:ea:e7:
         5f:49:ce:b1:e0:7d:cf:1a:98:e1:1f:5b:d6:64:ef:bd:37:0f:
         0c:e8:f3:27:73:6c:33:1b:74:71:db:e1:b7:78:8b:fa:e4:53:
         90:d6:86:e0:13:80:b3:fb:30:26:2e:50:07:a4:13:ad:39:65:
         b0:8c:d5:1f:16:8c:2b:eb:cc:5e:de:b2:6b:8a:7a:5d:3a:a8:
         9d:b1:f1:b9:a0:84:ba:57:dc:0e:e7:45:16:c2:b3:f1:e8:69:
         d6:df:d2:07:1f:de:4f:85:15:e5:b6:f3:f6:89:98:90:ff:08:
         20:e5:01:47:11:44:4a:27:f5:70:c0:85:36:19:33:cb:be:6e:
         a8:00:33:ad:76:04:77:2e:3c:72:1e:20:52:d4:49:7b:0c:89:
         62:67:0e:e5:da:33:25:12:ae:d3:18:ba:b3:20:45:b1:b1:7b:
         b6:95:d3:76:e1:4e:83:9f:00:c5:9d:a0:da:66:0b:1c:ee:f9:
         be:d6:74:0f:fc:ed:21:bf:b2:b3:d7:56:db:40:ea:8d:b0:5f:
         8e:1c:5b:d6:8a:6e:b0:97:60:93:d9:3c:62:7b:dd:ac:e2:ac:
         03:bc:21:f1:38:cc:37:bf:46:9e:7a:f8:00:21:8a:2c:12:c9:
         a4:fb:a9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:12:43 2026 by rpki-client