Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/25d7d3fc-8bab-49db-bccd-5054dcd6f19b/e86b2bcd-e0c6-3540-9739-11e9823e2f3a.roa
File:                     e86b2bcd-e0c6-3540-9739-11e9823e2f3a.roa (raw, json)
Hash identifier:          GA4/8lyLcX8rETc7obiD9Ymjm3K6ArAseMgsaUiuTyU=
Subject key identifier:   6A:A9:41:4C:39:CE:42:58:45:47:8C:71:4C:7F:61:D2:81:36:88:3E
Certificate issuer:       /CN=25d7d3fc-8bab-49db-bccd-5054dcd6f19b
Certificate serial:       010D0C9F4328584EA78714E4B6020E16DB67CE10
Authority key identifier: 4D:24:2B:65:21:DB:48:BF:86:5D:B8:81:7F:30:5C:5D:07:93:C0:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/25d7d3fc-8bab-49db-bccd-5054dcd6f19b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/25d7d3fc-8bab-49db-bccd-5054dcd6f19b/e86b2bcd-e0c6-3540-9739-11e9823e2f3a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     8075
IP address blocks:        209.94.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/25d7d3fc-8bab-49db-bccd-5054dcd6f19b/25d7d3fc-8bab-49db-bccd-5054dcd6f19b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/25d7d3fc-8bab-49db-bccd-5054dcd6f19b/25d7d3fc-8bab-49db-bccd-5054dcd6f19b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/25d7d3fc-8bab-49db-bccd-5054dcd6f19b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:14:e4:b6:02:0e:16:db:67:ce:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25d7d3fc-8bab-49db-bccd-5054dcd6f19b
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6ae40cd8-3d8e-4e98-9f19-3b294a9c42a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3f:dc:4c:63:05:fd:f5:0e:e6:bf:b7:d6:df:
                    54:10:ab:65:9a:9a:85:d0:34:24:75:00:31:56:e7:
                    b6:4b:78:4c:bf:84:2e:70:d5:d5:f7:c5:bd:9b:b2:
                    5a:40:34:83:4e:58:12:1f:a6:6b:2b:67:c6:51:c4:
                    80:56:e6:7f:20:ba:3d:d1:14:24:0c:27:c1:f0:31:
                    ab:67:54:b8:70:a7:48:24:a9:8a:de:6d:e0:d2:70:
                    f8:67:d8:45:c8:99:53:2d:d6:37:a3:3a:ab:7d:7c:
                    2b:2f:67:13:ac:f5:9b:6e:ce:be:c5:fe:1e:b7:cb:
                    f9:cc:c6:69:ad:5d:54:5c:d1:5a:1f:a4:8e:dd:06:
                    25:32:51:f7:73:90:f6:76:dd:50:a4:72:71:ee:c1:
                    fd:07:3d:65:40:ab:68:b4:90:69:0a:3d:31:67:9d:
                    7a:6a:be:87:43:c5:9d:62:0b:4b:75:47:a2:30:39:
                    17:37:7f:be:e8:f5:0b:5c:48:5c:dd:53:ae:34:da:
                    87:17:5e:b1:87:ec:c3:4e:b7:9b:1c:c8:bf:a7:8b:
                    2c:90:59:62:79:76:6a:4c:3b:ab:a3:0c:62:43:92:
                    c7:b2:34:96:b1:91:29:2e:2a:88:37:1c:b5:79:87:
                    1d:79:30:02:90:b5:7b:cc:97:10:71:f4:e1:a8:02:
                    03:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A9:41:4C:39:CE:42:58:45:47:8C:71:4C:7F:61:D2:81:36:88:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/25d7d3fc-8bab-49db-bccd-5054dcd6f19b/e86b2bcd-e0c6-3540-9739-11e9823e2f3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/25d7d3fc-8bab-49db-bccd-5054dcd6f19b/25d7d3fc-8bab-49db-bccd-5054dcd6f19b.crl

            X509v3 Authority Key Identifier:
                keyid:4D:24:2B:65:21:DB:48:BF:86:5D:B8:81:7F:30:5C:5D:07:93:C0:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/25d7d3fc-8bab-49db-bccd-5054dcd6f19b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.94.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:af:be:b7:45:8d:9a:9b:b7:fc:e7:e3:10:e5:eb:45:18:a4:
         03:33:54:11:74:a3:e8:1f:7e:2e:14:d7:14:91:79:5d:c7:6c:
         7f:f7:90:cb:83:bc:81:35:37:5c:5b:1e:7c:b9:18:2c:38:6d:
         b8:83:31:77:cf:bc:3c:a9:8d:47:53:2b:47:b3:96:fb:f2:92:
         57:c2:88:cd:b7:2f:93:7b:5e:1d:02:dd:61:69:d4:d9:27:24:
         5f:2e:d5:ff:9c:fe:b6:ce:1f:5a:fa:dc:63:f2:35:a7:b8:6a:
         e4:05:89:9d:19:36:79:48:84:43:8f:11:d0:83:fa:43:1a:a3:
         7d:57:6d:9f:a4:a4:da:05:e6:1d:80:97:79:8a:7f:4c:97:1d:
         23:64:2f:bf:d4:4b:c7:1c:83:56:f8:07:d0:a3:78:c5:9e:98:
         05:7c:cf:a3:db:0d:ff:39:ca:fb:10:1c:3c:0f:ce:dd:9e:e5:
         bf:bc:ce:c8:94:bf:1b:a5:94:6d:95:e4:8b:78:1b:1c:00:f0:
         2e:9f:1d:cb:cb:23:ca:ae:84:d7:70:27:de:19:ee:c5:fb:e0:
         0b:f2:e3:12:fc:af:dc:1b:a2:36:57:31:46:53:28:1b:cf:8e:
         b3:66:12:15:a0:5f:08:99:25:b6:85:79:de:71:aa:6f:2e:2a:
         2e:b9:5a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:25:55 2026 by rpki-client