Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/541d11db-8bb0-33df-bcd2-d3f18dc320a5.roa
File:                     541d11db-8bb0-33df-bcd2-d3f18dc320a5.roa (raw, json)
Hash identifier:          i2/Y+cYpKGXRbwmCXGTIbdaymqEwV9ydSe8xnHtyboI=
Subject key identifier:   14:7C:66:CE:58:D2:49:2F:60:43:C0:B6:F5:7A:72:14:57:BA:0D:2B
Certificate issuer:       /CN=f8920ef3-7d53-43c3-8266-318adf8495b4
Certificate serial:       010D0C9F4328584E5FDF56C4274F4FA5F6D1E500
Authority key identifier: E0:94:12:C0:8B:ED:44:F8:DD:AC:A3:DE:2F:C3:89:02:68:20:D4:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/541d11db-8bb0-33df-bcd2-d3f18dc320a5.roa
Signing time:             Fri 03 Jul 2026 09:00:12 +0000
ROA not before:           Fri 03 Jul 2026 09:00:12 +0000
ROA not after:            Thu 01 Oct 2026 09:00:12 +0000
asID:                     19793
IP address blocks:        199.7.210.0/24 maxlen: 24
                          199.7.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/f8920ef3-7d53-43c3-8266-318adf8495b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/f8920ef3-7d53-43c3-8266-318adf8495b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:df:56:c4:27:4f:4f:a5:f6:d1:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8920ef3-7d53-43c3-8266-318adf8495b4
        Validity
            Not Before: Jul  3 09:00:12 2026 GMT
            Not After : Oct  1 09:00:12 2026 GMT
        Subject: CN=28e4a107-3d8f-4919-836d-e7d95ec80f42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:69:93:f7:d8:c3:c8:04:bd:64:6b:6b:35:2b:
                    09:df:2a:85:d7:65:08:88:ea:8a:ea:91:e3:80:f8:
                    ca:71:23:cf:b2:8f:df:62:e9:7b:65:43:5b:7f:b2:
                    02:23:49:76:85:d6:5b:9e:57:eb:cb:e1:6d:43:12:
                    18:78:ad:75:a0:83:d5:e4:b6:32:2b:48:3b:38:85:
                    45:87:d1:b6:e9:e5:41:64:42:af:a0:1c:6d:76:03:
                    28:87:e4:85:d0:d1:f0:48:65:80:f5:0c:83:84:26:
                    03:99:67:39:58:07:1b:d5:19:32:d5:ac:e7:43:1b:
                    da:5c:7a:65:a1:fc:75:19:2e:4e:57:bb:8d:10:0c:
                    5a:06:bf:24:00:4d:27:9b:cb:48:2e:f1:5c:e6:41:
                    c8:ed:df:5f:66:53:3c:d1:d1:97:d2:78:b8:cd:f9:
                    29:1a:99:10:cb:31:cd:fb:b9:76:54:97:a0:58:ba:
                    13:88:8f:4d:ac:9f:26:43:40:fc:d0:02:9a:b6:17:
                    a6:d9:a6:28:31:70:2b:f2:bd:80:ff:fa:ca:53:28:
                    75:fb:15:66:7e:58:e9:f4:ef:d2:09:9d:b3:42:28:
                    f3:ad:29:43:7c:b4:14:1d:8c:b7:95:32:9b:ee:d0:
                    25:a3:30:d5:84:76:da:f5:10:bb:14:2e:aa:d0:15:
                    5e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:7C:66:CE:58:D2:49:2F:60:43:C0:B6:F5:7A:72:14:57:BA:0D:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/541d11db-8bb0-33df-bcd2-d3f18dc320a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/f8920ef3-7d53-43c3-8266-318adf8495b4.crl

            X509v3 Authority Key Identifier:
                keyid:E0:94:12:C0:8B:ED:44:F8:DD:AC:A3:DE:2F:C3:89:02:68:20:D4:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:9a:4a:83:16:f5:cd:00:bb:c2:9b:17:b8:a8:e3:1c:b6:84:
         3d:38:0a:d6:02:a7:32:16:30:4a:1b:59:8c:d3:0b:34:03:2a:
         2f:5d:09:14:6a:53:21:70:59:91:28:5e:79:f5:88:b9:01:af:
         af:bc:1c:b2:dc:a1:20:5d:3e:89:8f:08:e1:ac:35:56:23:84:
         46:a8:a3:3d:4d:ab:e4:44:00:b4:16:e8:6c:f4:4a:7b:a1:08:
         ef:9c:69:f8:8a:c2:f7:60:6c:39:83:16:2c:23:a4:0a:f8:8e:
         89:73:b8:69:7d:76:dc:fc:ad:6e:a5:8c:6d:f9:29:1c:17:fa:
         b0:59:c8:c2:ca:0c:2d:85:06:0d:7f:cb:e1:87:57:57:f2:7e:
         19:a2:70:65:ef:73:a9:ba:60:16:34:49:3b:ea:4e:33:74:ce:
         06:92:55:f2:d2:28:2b:25:c0:92:aa:65:b8:2b:37:48:3d:fc:
         4d:7c:a1:e1:0a:63:d6:53:41:92:fe:28:f0:40:e7:9c:c0:8a:
         de:b0:95:85:1d:32:be:5b:9b:98:6c:f5:53:88:54:10:b5:b8:
         f9:83:18:3e:b7:f8:0c:20:ac:15:9a:e0:5a:e2:6d:7e:c3:29:
         b5:92:e1:93:66:7d:f6:de:cf:da:01:66:05:d2:5d:4e:44:ce:
         33:76:b5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:54:42 2026 by rpki-client