Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/01da81c4-90fa-3049-8044-193b07ae7384.roa
File:                     01da81c4-90fa-3049-8044-193b07ae7384.roa (raw, json)
Hash identifier:          nJFNmW98ISOYSCC4IOzB+RoLBo64t1xU5iVsOMLf/4c=
Subject key identifier:   67:D1:E2:81:81:59:6F:04:8D:DD:2B:0B:4D:6D:B7:AB:97:52:B2:86
Certificate issuer:       /CN=ae61ef28-fe03-45bb-a38f-17e4725b6c25
Certificate serial:       010D0C9F4328584EA7989BBCB57F537A61CC1200
Authority key identifier: AC:9C:DD:19:64:FA:91:50:77:CA:9F:DF:E1:53:16:6B:53:5A:2C:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/01da81c4-90fa-3049-8044-193b07ae7384.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397273
IP address blocks:        216.24.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/ae61ef28-fe03-45bb-a38f-17e4725b6c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/ae61ef28-fe03-45bb-a38f-17e4725b6c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:9b:bc:b5:7f:53:7a:61:cc:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae61ef28-fe03-45bb-a38f-17e4725b6c25
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a5bec844-663c-43ac-9aca-5f15fc8bc5c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2a:ea:25:87:ec:e0:fd:d1:ce:87:a2:bb:f6:
                    4d:40:13:6f:da:fd:95:ec:16:d3:a5:cb:f5:7c:5c:
                    bb:50:d8:1a:72:e1:8b:46:e9:99:9e:0d:48:fd:95:
                    71:42:75:a1:21:da:13:10:d4:2e:d2:69:75:c3:1a:
                    50:be:81:bb:8e:4f:f0:45:92:ab:38:9c:b6:03:03:
                    3a:d4:76:67:3d:28:fa:7f:55:cc:d9:4f:98:8f:2a:
                    10:05:a1:98:b2:a7:01:5a:b3:71:e1:27:02:54:71:
                    32:71:dc:f6:01:8f:16:29:61:05:35:94:f1:5f:5b:
                    77:d9:a7:fd:16:de:48:60:1c:1a:10:10:b2:d8:83:
                    58:79:43:fd:e7:c7:22:6b:b6:76:58:cc:b9:54:64:
                    c8:a5:c0:2b:c9:27:d5:16:2c:5f:2a:a0:45:4b:a8:
                    29:d7:ef:2b:8a:00:1a:66:88:f6:0c:62:23:36:05:
                    e0:9e:d9:a2:06:57:0f:a7:c5:b6:6d:22:ae:82:d8:
                    aa:15:fb:9b:c2:de:8a:96:46:f6:c4:a7:c6:77:ca:
                    f8:22:e2:34:08:ad:9e:db:16:54:b2:cb:bd:bf:23:
                    70:b8:94:57:58:47:34:09:4c:8a:7c:f8:d2:87:b8:
                    5d:6e:ca:35:14:f3:bc:4b:ba:6f:53:05:78:f5:25:
                    b7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D1:E2:81:81:59:6F:04:8D:DD:2B:0B:4D:6D:B7:AB:97:52:B2:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/01da81c4-90fa-3049-8044-193b07ae7384.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/ae61ef28-fe03-45bb-a38f-17e4725b6c25.crl

            X509v3 Authority Key Identifier:
                keyid:AC:9C:DD:19:64:FA:91:50:77:CA:9F:DF:E1:53:16:6B:53:5A:2C:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:35:77:2f:fe:13:ac:dd:c9:53:f3:82:23:09:10:b9:e4:4a:
         72:16:39:a0:21:42:49:c7:93:dc:3e:b5:47:fb:3d:2a:b0:ce:
         af:20:af:43:aa:eb:62:f3:53:fa:9d:7f:14:71:f4:46:a6:0c:
         8d:c4:de:d6:ab:8b:24:c8:f0:e3:be:92:03:8b:69:83:77:32:
         de:73:12:5e:53:ca:38:b3:ef:25:1d:3b:da:49:a9:43:d3:4d:
         88:d4:79:d9:da:57:32:74:79:92:4f:f4:3f:05:b5:12:9d:d9:
         da:39:4f:18:93:65:07:bd:8e:1f:4f:70:81:79:6d:11:ac:50:
         40:50:c8:74:94:3a:7d:97:29:5d:88:73:b3:c7:aa:58:33:99:
         23:e4:dd:d9:27:99:a8:bc:2e:92:e7:af:00:dc:4f:d2:13:45:
         ab:ea:cc:10:5b:af:92:dc:6f:9d:f6:27:28:12:0b:4c:9c:12:
         b8:f9:b4:12:0b:5d:6a:22:74:4e:b7:54:19:5e:8f:dd:e1:05:
         6e:99:cc:fa:08:64:9c:68:6d:5f:32:b3:32:ea:c6:f0:11:7e:
         f5:6b:a5:8d:95:c1:73:f6:b2:ff:9d:fd:a8:66:92:13:be:9a:
         3b:b6:73:c4:04:95:93:3f:df:18:d8:17:70:4a:01:6a:22:cc:
         52:ff:bf:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:14:21 2026 by rpki-client