Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c6224d1-4f4d-4087-bfe1-c2ddd598c739/68010b61-636f-32ed-a7cb-339dc56bca5b.roa
File:                     68010b61-636f-32ed-a7cb-339dc56bca5b.roa (raw, json)
Hash identifier:          zRViW8qrxhrMZWiTp7sVpooyOHrUacMP5eYun7GDi8c=
Subject key identifier:   2F:45:BE:36:26:BB:37:AC:A0:8B:03:92:94:18:3A:26:4D:CE:77:EC
Certificate issuer:       /CN=2c6224d1-4f4d-4087-bfe1-c2ddd598c739
Certificate serial:       010D0C9F4328584EF9E20A0CE709B54DFB0A1F80
Authority key identifier: E5:47:7E:F8:9C:A0:78:73:EC:08:E1:C6:42:E6:C1:BE:41:A9:1D:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c6224d1-4f4d-4087-bfe1-c2ddd598c739.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c6224d1-4f4d-4087-bfe1-c2ddd598c739/68010b61-636f-32ed-a7cb-339dc56bca5b.roa
Signing time:             Thu 27 Aug 2026 13:00:12 +0000
ROA not before:           Thu 27 Aug 2026 13:00:12 +0000
ROA not after:            Wed 25 Nov 2026 14:00:12 +0000
asID:                     32787
IP address blocks:        204.209.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c6224d1-4f4d-4087-bfe1-c2ddd598c739/2c6224d1-4f4d-4087-bfe1-c2ddd598c739.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c6224d1-4f4d-4087-bfe1-c2ddd598c739/2c6224d1-4f4d-4087-bfe1-c2ddd598c739.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c6224d1-4f4d-4087-bfe1-c2ddd598c739.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f9:e2:0a:0c:e7:09:b5:4d:fb:0a:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c6224d1-4f4d-4087-bfe1-c2ddd598c739
        Validity
            Not Before: Aug 27 13:00:12 2026 GMT
            Not After : Nov 25 14:00:12 2026 GMT
        Subject: CN=0673a608-4f05-41bd-8c58-7e08bb93bc84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7e:d0:6b:89:bf:fd:3f:ef:60:27:84:59:bc:
                    6c:44:ee:ce:0b:b0:9e:69:b7:03:c2:6b:81:c1:40:
                    11:1c:2b:55:e6:52:83:38:6a:ce:91:60:37:e1:e2:
                    a3:f0:ca:b8:b7:70:a5:40:0a:03:7a:ea:f0:ca:e8:
                    d4:34:21:b3:d1:56:cf:05:d2:b6:93:4b:3e:02:2b:
                    b4:16:be:00:59:64:eb:df:3c:80:08:36:54:8e:9c:
                    89:cb:0e:0f:56:29:2a:fd:9e:1e:c2:77:29:f0:86:
                    9b:67:61:3d:fb:5e:0c:22:65:59:fa:c2:cd:0f:9e:
                    90:57:a2:89:6d:a1:1d:ae:1c:86:15:54:4f:66:7a:
                    6c:06:52:df:e0:c0:ce:a8:1a:d9:59:f8:69:fb:58:
                    ae:03:30:c0:81:61:04:9c:46:ac:04:e3:8b:2f:6f:
                    31:fe:c1:9a:5e:35:0a:52:53:d8:43:ef:3a:85:98:
                    61:b5:29:97:25:0b:fa:8e:5d:14:59:0f:7c:d9:14:
                    22:84:7d:bc:06:9b:86:41:0f:bc:43:af:aa:a7:af:
                    f3:4c:26:ff:0b:b2:f4:22:63:cc:f5:67:af:bf:86:
                    f5:90:4f:ba:0d:77:4c:2c:62:5b:3b:54:c1:d4:66:
                    44:f0:57:e6:1c:33:05:d9:6c:a6:dd:f7:45:e0:34:
                    a5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:45:BE:36:26:BB:37:AC:A0:8B:03:92:94:18:3A:26:4D:CE:77:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c6224d1-4f4d-4087-bfe1-c2ddd598c739/68010b61-636f-32ed-a7cb-339dc56bca5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c6224d1-4f4d-4087-bfe1-c2ddd598c739/2c6224d1-4f4d-4087-bfe1-c2ddd598c739.crl

            X509v3 Authority Key Identifier:
                keyid:E5:47:7E:F8:9C:A0:78:73:EC:08:E1:C6:42:E6:C1:BE:41:A9:1D:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c6224d1-4f4d-4087-bfe1-c2ddd598c739.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.209.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:5d:1d:9c:8a:03:54:5b:ca:14:57:ec:f7:42:f7:77:0d:68:
         60:d4:5c:7a:82:54:77:ca:b2:69:70:fa:27:31:0b:47:a9:24:
         21:f0:ee:55:45:ae:bd:96:bf:3d:ec:2d:67:9a:fe:e8:de:89:
         6b:53:3a:bc:b1:7f:b8:7e:69:84:b8:3f:6c:9f:ba:df:16:87:
         dc:45:f3:ea:79:19:0a:f1:08:64:d0:09:3a:82:7b:27:ea:c0:
         f3:4d:ef:82:dc:84:1f:b1:0a:b8:ff:ba:2a:a0:f9:72:84:24:
         58:39:5e:c6:ca:4a:00:50:fc:c6:88:6a:f6:03:7a:1b:78:89:
         e7:b0:36:31:cd:10:75:2c:fd:9c:a4:fa:9a:cd:a2:3b:63:3a:
         62:f4:3e:8e:7d:a2:c6:73:6a:fb:45:44:26:36:45:32:3d:89:
         8e:25:37:72:f1:b9:2d:d2:57:c9:7b:f1:e0:56:12:f0:46:21:
         02:3f:f5:0c:70:50:c5:ba:32:58:ba:f0:e2:bf:44:90:1f:38:
         6a:51:4f:56:ef:c6:b4:af:b2:39:80:e1:3e:6c:ae:b2:21:4d:
         8a:6d:f2:0f:ff:a8:31:2a:a3:5c:07:d6:ea:ab:92:2f:41:51:
         51:fe:5e:ee:a4:35:68:d0:d4:b0:57:36:51:e3:57:b3:66:b0:
         7a:78:c8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:11:04 2026 by rpki-client