Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/5195e518-2678-3813-9d0e-3be0a0eebdf9.roa
File:                     5195e518-2678-3813-9d0e-3be0a0eebdf9.roa (raw, json)
Hash identifier:          TgAtNWA58DQRH0XgF3+cwDXdjNEu/gjh/5Ip8gfm9gk=
Subject key identifier:   09:D4:34:C6:28:EB:B7:3C:A6:EA:64:6C:92:5C:61:6B:B3:24:83:F2
Certificate issuer:       /CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
Certificate serial:       010D0C9F4328584E74CF70C8CA78A9BFB5532D00
Authority key identifier: 31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/5195e518-2678-3813-9d0e-3be0a0eebdf9.roa
Signing time:             Fri 10 Jul 2026 21:00:12 +0000
ROA not before:           Fri 10 Jul 2026 21:00:12 +0000
ROA not after:            Thu 08 Oct 2026 21:00:12 +0000
asID:                     214640
IP address blocks:        207.2.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:74:cf:70:c8:ca:78:a9:bf:b5:53:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
        Validity
            Not Before: Jul 10 21:00:12 2026 GMT
            Not After : Oct  8 21:00:12 2026 GMT
        Subject: CN=aec96999-59ff-4af5-a740-740f535c62c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c6:74:b9:c5:6c:7b:ef:b3:ae:d5:9f:d9:8f:
                    e0:31:e7:8c:b1:1f:dd:23:d1:6c:e3:73:c0:81:43:
                    76:7b:7d:f4:c5:2c:8c:0f:59:ec:df:1e:10:46:d6:
                    76:55:b9:b8:b8:53:8a:e2:c8:86:6e:4e:e0:c0:c7:
                    ce:c8:f4:61:0b:fb:50:21:9e:4a:2b:7b:aa:9b:c5:
                    ff:09:f5:22:12:7c:fb:54:d5:f2:87:33:ab:fb:b3:
                    fa:9a:26:57:be:7b:f5:f7:9d:07:79:32:f3:3d:ad:
                    9e:e6:01:7b:06:5a:06:67:76:bd:68:56:ad:18:62:
                    f3:20:6e:ac:0f:d4:fc:06:a2:74:b6:72:c7:88:80:
                    90:bd:fa:7c:86:8b:d1:55:57:c9:ee:f0:cd:8b:e8:
                    d0:12:57:67:6d:8f:50:b6:6f:78:3e:c3:c2:4c:85:
                    09:bf:90:cb:84:f9:1b:c0:bd:44:f9:df:2c:86:11:
                    e1:53:39:ad:a0:5a:75:16:23:4f:cf:9f:99:76:76:
                    45:9d:4c:f1:05:35:e5:60:9a:f9:16:fd:62:3f:41:
                    13:1e:e2:64:ba:20:cf:d0:82:30:82:3a:65:a8:19:
                    31:a3:56:f3:33:a3:f0:1d:7d:a4:30:55:96:aa:c9:
                    a7:b1:0d:cc:94:2a:ad:00:a3:85:2e:74:9c:e2:5f:
                    8d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D4:34:C6:28:EB:B7:3C:A6:EA:64:6C:92:5C:61:6B:B3:24:83:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/5195e518-2678-3813-9d0e-3be0a0eebdf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.crl

            X509v3 Authority Key Identifier:
                keyid:31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.2.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:bf:39:5a:92:06:1f:10:a9:1a:ad:1d:40:c6:7e:e7:78:b7:
         df:01:9d:e5:cf:08:91:a5:cd:13:39:c0:d2:0e:76:78:9f:5a:
         bd:6f:18:b5:f7:41:62:2c:a8:83:e6:72:ea:6b:4c:90:45:fd:
         d8:3d:a2:a0:42:4e:ba:e5:da:ee:f4:38:4c:ca:5f:ee:6e:dd:
         72:4d:9c:80:98:40:28:1c:78:cc:8d:30:b5:1b:f7:91:b5:48:
         27:71:ca:58:63:83:e9:86:43:cc:49:d9:7f:6e:01:36:60:4a:
         b9:ac:fb:3f:24:a5:31:6b:4a:fe:98:d1:60:ed:83:8d:9d:d1:
         b6:b7:01:cd:db:0d:66:9e:6a:2f:f9:8b:3a:5b:e1:cc:f9:23:
         48:f0:5c:65:e4:02:b8:1e:60:04:9d:22:0b:43:66:8e:5c:e5:
         e6:0d:90:ab:7a:ca:42:f7:33:d5:c2:a2:e8:4f:42:05:6e:1c:
         d9:44:1e:54:0d:c9:e4:6c:49:98:7f:76:b6:19:fe:a7:1f:bc:
         9a:7f:12:5f:f6:47:e0:77:23:34:f5:e5:78:f1:12:00:e7:47:
         1d:a5:33:e8:b9:fe:27:b0:b8:18:9a:f3:4b:77:38:d6:04:07:
         51:a0:70:f1:21:fa:42:9e:ad:18:8c:74:b6:b3:2a:55:5b:1a:
         0f:b7:a2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:36:04 2026 by rpki-client