Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/f8690b69-feea-3870-a431-f819071fa236.roa
File:                     f8690b69-feea-3870-a431-f819071fa236.roa (raw, json)
Hash identifier:          EuE3yNdN6Ii9nHDybxv1EcvV9P6XBhCLPnW8GcoGAM8=
Subject key identifier:   7E:41:F3:6B:55:AB:4F:9C:F4:27:4B:70:E3:8B:85:3C:FE:E6:09:F9
Certificate issuer:       /CN=355b6459-d3e6-4569-b278-aef1a714f5bf
Certificate serial:       010D0C9F4328584EA7961578E5CC6F4BDF96FB00
Authority key identifier: CA:AB:11:72:9B:80:C2:88:AF:C9:90:83:1D:EB:8C:04:46:04:18:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/f8690b69-feea-3870-a431-f819071fa236.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     1708
IP address blocks:        204.63.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/355b6459-d3e6-4569-b278-aef1a714f5bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/355b6459-d3e6-4569-b278-aef1a714f5bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:15:78:e5:cc:6f:4b:df:96:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=355b6459-d3e6-4569-b278-aef1a714f5bf
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=fe1eb61f-a2e6-4b99-8bba-f9da9b35b725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7d:d2:42:90:cd:83:70:2b:f5:7f:33:62:fa:
                    0a:50:79:de:8c:7a:a1:40:c2:d0:fa:8f:7b:41:3f:
                    14:53:e8:9e:c7:04:22:fb:d0:75:88:09:65:c5:02:
                    be:83:77:60:e7:69:cf:31:bd:ae:2f:09:de:40:c4:
                    04:f9:cd:35:9a:22:6e:96:ce:02:3b:b4:b2:fe:db:
                    87:1b:2e:53:3c:45:99:14:59:35:11:e5:db:ae:ef:
                    66:4a:f2:66:dc:b5:8e:6d:c5:1e:33:f4:55:ed:82:
                    5b:d6:4c:f5:d6:a3:fe:99:94:e8:12:ad:35:8f:8e:
                    4c:e4:3f:39:f5:59:2e:12:78:08:c3:ee:ed:28:f6:
                    7c:56:7b:3e:de:05:04:25:93:37:8d:85:04:d2:29:
                    6f:3c:51:38:a9:19:a3:e3:bd:4c:28:57:b3:0a:e9:
                    bd:a1:ea:36:6c:ad:2f:fa:0f:fc:f5:7b:11:77:e5:
                    db:17:68:c7:74:a9:31:9a:04:11:ee:e8:d2:72:64:
                    85:c7:4d:fc:d2:05:97:a6:41:bd:49:a6:21:da:ab:
                    2d:96:89:11:87:91:a1:d2:f5:be:b2:83:e8:db:9d:
                    5d:ee:59:84:96:e7:3e:9b:d4:c0:dc:c6:2c:79:b5:
                    ef:70:52:c8:ab:0b:f4:83:cd:95:26:2b:46:71:75:
                    23:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:41:F3:6B:55:AB:4F:9C:F4:27:4B:70:E3:8B:85:3C:FE:E6:09:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/f8690b69-feea-3870-a431-f819071fa236.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/355b6459-d3e6-4569-b278-aef1a714f5bf.crl

            X509v3 Authority Key Identifier:
                keyid:CA:AB:11:72:9B:80:C2:88:AF:C9:90:83:1D:EB:8C:04:46:04:18:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.63.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:3c:25:2a:61:d5:4f:e8:06:e9:9b:24:5c:f9:a4:59:35:dd:
         14:60:9e:e3:f3:b4:eb:75:b1:5b:61:ec:a6:f5:12:e5:fd:b4:
         da:8d:fd:3a:c1:a3:db:0a:44:04:df:dc:f8:33:9c:b3:1e:cc:
         10:12:db:20:29:9c:71:53:7d:97:8e:e6:89:d4:5a:81:9f:35:
         72:24:d2:44:14:49:c8:47:07:55:3a:26:48:78:92:61:45:30:
         d6:48:88:48:2e:99:88:d3:7b:03:8b:cc:fa:9c:53:99:0c:db:
         92:11:ea:a8:36:03:45:25:b7:8e:98:b4:cf:61:29:73:cb:e9:
         d1:22:c3:79:b7:c6:60:4b:08:8f:40:b2:9e:55:7f:fd:30:bf:
         59:25:2b:4b:d1:9a:8c:46:80:ef:05:6e:4b:6b:52:76:1d:c1:
         88:9b:10:a0:42:b7:a5:be:1f:53:3b:7e:32:bf:d4:a6:f9:06:
         66:75:b4:69:6d:4e:4f:d4:75:a7:06:e2:36:4a:e8:91:f9:cc:
         15:3d:7b:6d:de:cb:ed:77:0e:c0:d4:4b:33:34:21:a9:33:02:
         a1:0b:1c:df:52:7d:b5:1a:3a:19:82:f0:c6:b6:fc:ce:24:d2:
         4c:0e:15:db:90:85:a7:95:6e:44:2c:a6:c4:d1:5d:b2:70:6a:
         01:25:24:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:18:07 2026 by rpki-client