Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/6f477233-abe1-3ee6-ba8a-3e08779866d7.roa
File:                     6f477233-abe1-3ee6-ba8a-3e08779866d7.roa (raw, json)
Hash identifier:          ObGxwBaUxk2PuauaHEva3kQogqba4rYYL65nePx23CU=
Subject key identifier:   A3:15:9B:D6:BF:5A:41:3C:74:6E:B3:07:D9:5F:58:65:B8:18:D9:F9
Certificate issuer:       /CN=e3370a8c-7e39-490d-985a-a478ce54459f
Certificate serial:       010D0C9F4328584EFF777DD3629A33A6D7895200
Authority key identifier: E2:EA:0B:45:2F:E9:FE:F4:5E:6C:DF:17:7E:C8:03:62:5C:45:52:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/6f477233-abe1-3ee6-ba8a-3e08779866d7.roa
Signing time:             Sat 29 Aug 2026 13:00:12 +0000
ROA not before:           Sat 29 Aug 2026 13:00:12 +0000
ROA not after:            Fri 27 Nov 2026 14:00:12 +0000
asID:                     4393
IP address blocks:        204.52.234.0/23 maxlen: 24
                          209.251.198.0/24 maxlen: 24
                          209.251.200.0/24 maxlen: 24
                          209.251.208.0/23 maxlen: 23
                          209.251.210.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/e3370a8c-7e39-490d-985a-a478ce54459f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/e3370a8c-7e39-490d-985a-a478ce54459f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ff:77:7d:d3:62:9a:33:a6:d7:89:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3370a8c-7e39-490d-985a-a478ce54459f
        Validity
            Not Before: Aug 29 13:00:12 2026 GMT
            Not After : Nov 27 14:00:12 2026 GMT
        Subject: CN=59e52ee2-d0bf-47ad-8480-ffa2083a8e61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7b:51:7c:0e:ae:a1:a0:ab:2a:29:c6:77:69:
                    ba:0a:2f:3d:92:4d:43:3b:42:31:aa:b2:ea:01:50:
                    f1:79:32:b8:5b:c1:f3:f2:dd:af:45:ce:c8:4f:29:
                    85:db:98:48:d5:c8:f6:7e:aa:40:1a:51:de:e6:f9:
                    1f:be:7d:e7:5b:59:82:3c:90:79:cc:f9:f4:03:19:
                    7c:32:fb:30:1e:b8:60:af:a4:ab:a6:d6:1e:a5:50:
                    2e:d2:b6:08:25:a6:01:7d:f3:04:e3:ee:b1:39:68:
                    8b:da:97:fa:0c:24:95:5f:a8:da:b2:46:ad:74:6f:
                    bd:33:78:4e:a0:2f:74:9e:43:66:0b:f0:e0:91:f9:
                    ad:45:5f:03:29:c5:75:e5:81:66:2f:cd:3c:1f:90:
                    f3:c4:db:f3:68:c7:a6:3c:1a:0c:22:f1:4f:69:11:
                    9f:58:64:aa:bd:c7:8e:76:b3:90:f8:70:32:e5:e6:
                    b7:58:b4:b5:43:c5:33:a3:e8:b0:3a:39:bb:54:e5:
                    d2:7a:e5:36:85:75:a2:88:3c:45:dd:1a:d7:40:6f:
                    74:63:6e:5e:45:dc:c4:91:55:73:a0:9f:d7:8c:24:
                    f9:7a:c8:2d:8b:0d:2a:77:12:c2:f8:5a:6e:ee:09:
                    66:51:17:d4:30:fd:08:7e:db:c8:d8:9f:77:b6:fc:
                    57:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:15:9B:D6:BF:5A:41:3C:74:6E:B3:07:D9:5F:58:65:B8:18:D9:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/6f477233-abe1-3ee6-ba8a-3e08779866d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f/e3370a8c-7e39-490d-985a-a478ce54459f.crl

            X509v3 Authority Key Identifier:
                keyid:E2:EA:0B:45:2F:E9:FE:F4:5E:6C:DF:17:7E:C8:03:62:5C:45:52:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e3370a8c-7e39-490d-985a-a478ce54459f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.52.234.0/23
                  209.251.198.0/24
                  209.251.200.0/24
                  209.251.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:de:01:17:28:47:ea:12:6c:df:e6:c3:e3:04:5b:23:08:4a:
         e0:f0:5d:c2:99:0a:76:e7:0e:db:c5:de:d9:06:20:1d:cf:d4:
         f7:3c:d2:80:50:f3:e1:f3:c7:29:3d:c0:70:f9:0b:05:e7:0a:
         0e:86:b1:d8:4c:54:db:db:3d:6d:49:68:86:9a:6a:96:93:81:
         b6:e8:3b:1f:21:a3:43:33:e3:33:60:59:eb:ec:27:16:95:47:
         92:ca:d7:4f:d0:5b:cf:b6:1c:07:c2:68:9d:f3:91:22:83:55:
         38:d8:30:cf:2c:c1:35:68:70:d3:ad:f5:86:99:ae:57:52:e1:
         c2:72:d7:a9:58:25:03:3f:5e:3b:fc:46:f5:28:9c:da:e5:2e:
         e4:9f:ba:00:32:07:83:a6:3d:d6:5d:d1:21:a9:13:a5:2a:e1:
         7b:35:3a:a4:ee:b7:4b:f0:65:9d:88:15:17:76:2a:23:28:12:
         99:6c:4c:a8:52:69:22:cf:67:30:7d:23:be:46:7b:4a:68:32:
         44:a1:8d:8d:38:20:dc:15:3f:60:04:ed:ed:53:99:d6:b4:a3:
         8a:1e:82:e6:b6:f8:29:79:16:f1:4d:5e:63:3d:34:a9:7f:26:
         a5:34:56:d6:c1:49:5a:1c:a0:be:df:80:3d:d2:5b:64:3d:93:
         8e:6f:0e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:12:04 2026 by rpki-client