Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/222fc882-68d7-4892-a04a-f0d1836061c4/36314958-41f4-3cba-8d2d-fbb3aff86638.roa
File:                     36314958-41f4-3cba-8d2d-fbb3aff86638.roa (raw, json)
Hash identifier:          74OgoEkhKgUPzQ+N1XhtUyC+wtpPGIt4ripoWCvexK0=
Subject key identifier:   11:AA:E4:36:02:41:FF:C7:E2:98:08:04:C0:7C:E0:FA:4A:A6:D4:0A
Certificate issuer:       /CN=222fc882-68d7-4892-a04a-f0d1836061c4
Certificate serial:       010D0C9F4328584F7A4D973444D16E51CE40C650
Authority key identifier: 86:5E:DB:71:43:A9:13:B8:39:3F:53:0F:3C:9C:26:E6:79:BC:D2:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/222fc882-68d7-4892-a04a-f0d1836061c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/222fc882-68d7-4892-a04a-f0d1836061c4/36314958-41f4-3cba-8d2d-fbb3aff86638.roa
Signing time:             Mon 12 Oct 2026 13:00:12 +0000
ROA not before:           Mon 12 Oct 2026 13:00:12 +0000
ROA not after:            Sun 10 Jan 2027 14:00:12 +0000
asID:                     64241
IP address blocks:        209.251.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/222fc882-68d7-4892-a04a-f0d1836061c4/222fc882-68d7-4892-a04a-f0d1836061c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/222fc882-68d7-4892-a04a-f0d1836061c4/222fc882-68d7-4892-a04a-f0d1836061c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/222fc882-68d7-4892-a04a-f0d1836061c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7a:4d:97:34:44:d1:6e:51:ce:40:c6:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=222fc882-68d7-4892-a04a-f0d1836061c4
        Validity
            Not Before: Oct 12 13:00:12 2026 GMT
            Not After : Jan 10 14:00:12 2027 GMT
        Subject: CN=abdc4b4e-dec0-45b5-9ec1-d8603052b594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:4c:96:a1:8c:60:39:c5:f1:23:c4:2c:d6:be:
                    ee:34:3f:06:f1:78:ff:83:5d:9e:cb:18:f3:3a:04:
                    39:8d:7a:b9:46:f9:b8:94:8c:49:ec:8f:1a:2d:84:
                    f0:39:11:49:0e:cb:45:17:c7:47:b4:02:73:fa:ef:
                    ee:89:fb:16:34:45:6b:f7:b8:29:49:36:04:1d:66:
                    b6:ef:8e:05:6a:d3:70:de:5b:99:02:d5:77:df:d0:
                    72:bc:1a:5f:b8:0a:83:52:7c:db:7d:c6:db:d1:68:
                    c2:c8:d0:27:1e:05:af:e6:54:d6:98:06:ef:bf:74:
                    29:a6:4f:da:23:30:24:dd:9d:06:d1:4d:71:b0:49:
                    f3:75:38:0f:02:b1:72:02:30:aa:8c:9a:1f:96:e7:
                    d8:9f:86:1d:53:19:37:ef:be:d9:27:e5:33:4f:16:
                    c0:17:1a:ca:0f:0f:a6:22:f7:45:ba:d2:56:c1:a7:
                    f3:99:2e:e0:c7:f6:2f:e9:4a:86:21:14:75:3c:f5:
                    78:f0:28:1b:e5:27:20:3f:40:6d:ec:37:d1:10:93:
                    c2:31:a5:7e:fa:a1:09:13:aa:1f:42:54:9d:4c:f8:
                    b2:60:bd:86:37:f9:fb:3b:0c:21:80:ba:43:93:a5:
                    ed:30:22:34:b7:85:13:66:83:36:74:33:5c:cd:89:
                    ee:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AA:E4:36:02:41:FF:C7:E2:98:08:04:C0:7C:E0:FA:4A:A6:D4:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/222fc882-68d7-4892-a04a-f0d1836061c4/36314958-41f4-3cba-8d2d-fbb3aff86638.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/222fc882-68d7-4892-a04a-f0d1836061c4/222fc882-68d7-4892-a04a-f0d1836061c4.crl

            X509v3 Authority Key Identifier:
                keyid:86:5E:DB:71:43:A9:13:B8:39:3F:53:0F:3C:9C:26:E6:79:BC:D2:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/222fc882-68d7-4892-a04a-f0d1836061c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.251.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:36:a8:3f:42:4b:ab:39:ee:76:f4:8c:99:6d:cc:20:13:dc:
         2a:a1:65:39:74:b4:02:2f:56:6e:2d:ee:be:e8:86:5c:7c:de:
         53:ff:45:69:16:d9:3f:e7:9c:2e:a1:03:2f:93:de:7e:de:50:
         69:86:a7:d2:6c:d7:96:58:0b:de:22:e6:86:2c:44:5c:44:2a:
         8a:c9:c0:dd:00:f0:77:1c:de:d3:66:fa:6a:fa:e8:5f:b2:f0:
         ca:88:b1:03:45:b1:b3:e8:cb:1a:c1:a2:e9:5d:a1:70:65:bc:
         62:10:91:17:97:10:a3:5c:4b:4a:6b:ad:e7:39:56:e8:04:27:
         46:05:41:19:70:be:26:50:4e:ad:bc:2c:6f:a8:f5:60:d2:33:
         e3:1e:4b:07:52:3b:70:7c:d2:94:c2:fe:8d:dc:77:33:c7:c9:
         9a:c8:e9:29:26:fc:14:dc:03:ab:80:8f:92:03:f4:6a:01:68:
         c6:35:13:44:6d:fa:a5:04:bc:63:e1:e9:63:ba:5b:c7:8e:74:
         0c:e8:c0:36:e9:9e:3d:13:5a:80:cf:54:0b:fa:12:9e:8b:70:
         41:51:dc:46:99:99:e4:f0:a5:f8:a5:c3:cb:66:8d:94:58:71:
         7a:d4:57:46:07:83:48:f5:8c:e6:09:e1:0d:5f:5f:b3:22:a8:
         59:c6:fb:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:37:35 2026 by rpki-client