Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22eec58f-cac4-388b-8a76-2fd23d90092b.roa
File:                     22eec58f-cac4-388b-8a76-2fd23d90092b.roa (raw, json)
Hash identifier:          FkxHBzRzpkIL1rCppKZz/W1Gte5+uj7s2BhvXj/+RhI=
Subject key identifier:   F3:63:AC:7D:D9:E7:6B:2F:2A:7C:20:3C:40:19:FA:CD:D9:CE:16:8B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D667A566A4F0E20D2EDD4AA40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22eec58f-cac4-388b-8a76-2fd23d90092b.roa
Signing time:             Sun 05 Apr 2026 01:00:24 +0000
ROA not before:           Sun 05 Apr 2026 01:00:24 +0000
ROA not after:            Sat 04 Jul 2026 01:00:24 +0000
asID:                     32787
IP address blocks:        209.200.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:66:7a:56:6a:4f:0e:20:d2:ed:d4:aa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  5 01:00:24 2026 GMT
            Not After : Jul  4 01:00:24 2026 GMT
        Subject: CN=0cf3bb6c-3e1e-4bd5-b280-39c1a5b56f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0b:16:f6:4b:2e:37:f0:09:df:62:34:6a:8d:
                    32:5b:9a:53:78:ef:83:7c:9d:55:0d:a7:24:ef:71:
                    d7:e9:73:5b:9c:17:02:2c:6e:39:f0:a7:3e:f1:2e:
                    5b:ac:0f:15:1d:2e:d3:d0:29:57:10:eb:ca:40:7f:
                    a4:9c:7a:22:64:43:36:3d:b4:29:c9:55:87:21:eb:
                    ae:f4:1c:91:f5:9c:c8:14:95:ad:cb:69:7f:8d:0c:
                    24:cf:74:93:09:4c:05:80:91:aa:94:a0:42:38:20:
                    fc:60:61:3c:e1:10:92:6d:3a:2a:84:45:b4:c0:5e:
                    cc:87:d0:ed:67:c2:02:a3:f1:5a:6c:d2:56:c0:d9:
                    05:87:27:86:5f:29:5e:12:b1:af:47:f0:2e:5f:b0:
                    11:05:ee:85:27:5a:d6:e1:61:2c:fd:17:e4:99:87:
                    09:84:a7:1f:7f:0d:64:32:6a:73:51:c2:eb:53:01:
                    8b:8a:ac:e9:77:79:54:09:de:76:e4:9c:25:5a:3f:
                    09:2b:e3:70:c4:f9:7d:d8:07:c7:c2:8d:df:1c:b2:
                    67:b9:03:21:42:d9:03:4c:ad:32:ff:fb:75:27:2f:
                    94:8b:40:3e:97:74:14:bf:ee:ad:f7:f0:74:41:6d:
                    6f:fb:d8:1b:d6:be:47:02:a1:90:c1:25:f0:ac:2a:
                    93:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:63:AC:7D:D9:E7:6B:2F:2A:7C:20:3C:40:19:FA:CD:D9:CE:16:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22eec58f-cac4-388b-8a76-2fd23d90092b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:a6:38:a8:97:30:6b:68:e0:12:eb:c6:af:82:64:cf:c0:00:
         6e:2e:b7:06:95:76:3b:8e:23:73:ea:46:5d:a5:c4:98:79:e5:
         aa:ab:d8:3f:70:73:4e:e1:7c:63:bd:39:00:57:57:62:23:a9:
         20:f9:a4:ab:ac:59:44:22:42:ce:50:bc:72:3f:f2:f1:21:e2:
         c7:81:af:af:23:8c:9b:5d:dd:b4:e8:ca:84:2a:9a:db:f5:a3:
         23:9d:ca:af:64:5a:2d:ed:5b:7b:20:57:26:e7:dc:60:b8:41:
         fc:15:00:11:0f:8f:e1:4e:93:78:a1:44:9c:c8:2f:82:76:ec:
         a3:ce:ab:b6:ce:ad:ce:45:7a:a4:08:7f:de:51:8f:34:58:bd:
         40:e7:36:26:3c:5c:32:34:8d:88:2b:71:e6:24:29:73:d9:6f:
         71:3f:5c:54:c5:1f:36:6d:1d:eb:df:ff:c9:38:6a:7d:9c:76:
         25:eb:8e:aa:ae:d0:0c:68:39:97:c4:3d:e7:34:4e:d0:c6:7b:
         d2:be:60:5d:d8:28:d2:ba:5f:2c:ed:8f:8a:e6:5f:8b:55:06:
         84:8a:7a:b9:cc:68:b7:97:ec:33:68:27:27:8c:1d:6b:3d:d4:
         f1:fa:6e:97:29:a6:38:8b:20:12:c3:d1:72:e1:f3:bc:93:78:
         9d:2f:d3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:59:42 2026 by rpki-client