Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/d096047a-9fa5-3441-a949-ac54a874b69a.roa
File:                     d096047a-9fa5-3441-a949-ac54a874b69a.roa (raw, json)
Hash identifier:          mHDQgzu6qsMtE9kWwAzk8Vm4gAnxX/pqN7C1o2zuxr0=
Subject key identifier:   B1:8B:59:D3:4D:7A:AB:CD:B4:6C:55:7C:AE:16:FA:C9:D4:32:8D:67
Certificate issuer:       /CN=72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee
Certificate serial:       010D0C9F4328584D67DFC670217ABAB89DFF8930
Authority key identifier: 27:B8:A3:DD:49:F5:D9:F3:10:53:B6:43:5A:C2:38:B8:25:A7:D7:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/d096047a-9fa5-3441-a949-ac54a874b69a.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     27316
IP address blocks:        207.165.229.0/24 maxlen: 24
                          207.165.238.0/23 maxlen: 24
                          209.56.188.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:c6:70:21:7a:ba:b8:9d:ff:89:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=872f8eaf-c4d0-45ec-b92f-b938ca347ea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:18:e0:d5:9d:67:9e:55:fe:62:3f:e9:e5:d2:
                    12:61:1c:05:e3:a0:34:1f:1f:36:da:64:07:92:d4:
                    24:10:a7:ae:19:fa:d4:6d:9d:09:77:be:fd:60:53:
                    e0:b3:bf:d2:b1:ab:e5:7d:b8:1e:b5:bd:9c:14:74:
                    77:4b:2f:a1:11:b8:26:d0:00:2c:55:a8:63:28:7e:
                    f6:d2:a4:81:9e:28:a8:ff:46:de:02:5b:e0:d4:12:
                    b8:5b:5d:f5:d2:b9:10:c7:4f:18:d8:66:a2:8c:01:
                    94:07:1d:2c:a0:fd:e2:c4:d2:2c:27:3f:0c:66:18:
                    c0:3c:27:42:4f:e0:4c:f6:39:d8:7d:3b:41:65:40:
                    9b:1b:58:54:4b:7a:43:e2:2e:bc:37:8a:0c:7c:62:
                    bf:7b:bf:09:8d:f4:af:e7:80:cb:f0:b4:32:9e:65:
                    99:a0:73:ef:71:3e:5c:18:5e:84:35:22:7d:f1:69:
                    3a:38:cf:80:b7:42:9e:2f:94:45:f1:65:a2:b9:db:
                    3c:82:f0:aa:f7:49:96:d2:c2:f7:0c:1d:41:e4:7f:
                    e3:37:8c:b8:b8:c0:96:3f:c7:8e:0c:66:30:6e:a0:
                    8c:02:6f:df:1f:f0:40:35:1a:ad:a0:89:aa:c1:66:
                    dc:6d:00:71:75:04:e2:d6:52:a1:3b:8c:84:bb:8f:
                    00:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:8B:59:D3:4D:7A:AB:CD:B4:6C:55:7C:AE:16:FA:C9:D4:32:8D:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/d096047a-9fa5-3441-a949-ac54a874b69a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.crl

            X509v3 Authority Key Identifier:
                keyid:27:B8:A3:DD:49:F5:D9:F3:10:53:B6:43:5A:C2:38:B8:25:A7:D7:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.165.229.0/24
                  207.165.238.0/23
                  209.56.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:da:2e:dd:dd:11:f8:fa:7c:41:ec:d6:20:88:b8:91:b3:c3:
         fe:00:0c:52:10:f8:56:15:74:e0:bb:d2:0b:12:1a:5b:9f:44:
         de:d6:42:ab:0d:68:7c:44:c2:99:e9:a7:67:b0:57:25:4c:d5:
         91:cd:01:87:32:8e:8c:ce:f9:04:86:c0:38:96:5c:52:8d:7f:
         97:04:9d:aa:96:8c:75:05:76:e5:fd:9e:48:2d:fd:a1:e6:f9:
         f4:d0:80:02:3c:8d:c9:e9:68:cc:21:46:c5:8c:d2:59:e1:00:
         1e:75:a8:b5:cd:5f:b4:79:e8:ca:ec:54:ac:5e:be:a8:c6:a2:
         62:c2:f3:58:f4:ab:33:af:25:cd:a3:a5:41:90:c6:84:e9:10:
         e2:4d:be:57:30:27:ad:eb:a2:b0:21:96:b6:14:00:e8:67:53:
         d0:60:a3:34:cc:e8:b7:91:3a:fb:8a:fa:62:e6:86:37:7f:1d:
         2d:c3:cc:d0:a6:04:d8:c6:d4:76:38:b4:97:ce:59:cf:10:2f:
         df:67:0a:10:2e:31:c7:fa:2c:d1:1b:ec:ad:be:90:79:dc:9d:
         cc:66:1f:84:bb:92:ec:b4:ca:d7:7b:ed:f7:86:e7:29:6b:92:
         b2:7e:39:21:f2:82:1b:43:18:ba:0f:87:29:53:a0:3a:33:a6:
         62:40:49:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 16:32:51 2026 by rpki-client