Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/007cf00a-9517-35c4-8ce8-cad082875244.roa
File:                     007cf00a-9517-35c4-8ce8-cad082875244.roa (raw, json)
Hash identifier:          IRMlrv7c5Xz2qIccNf3Jwzg3xvcahzUyE1xyaZT7KSc=
Subject key identifier:   B7:E7:0A:38:0B:AC:E8:BA:D7:25:C6:63:0F:94:DE:1E:15:C3:D2:3F
Certificate issuer:       /CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
Certificate serial:       010D0C9F4328584F8D77F8C8D18141ED91C42900
Authority key identifier: EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/007cf00a-9517-35c4-8ce8-cad082875244.roa
Signing time:             Mon 19 Oct 2026 09:46:09 +0000
ROA not before:           Mon 19 Oct 2026 09:46:09 +0000
ROA not after:            Sun 17 Jan 2027 10:46:09 +0000
asID:                     395201
IP address blocks:        198.34.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8d:77:f8:c8:d1:81:41:ed:91:c4:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
        Validity
            Not Before: Oct 19 09:46:09 2026 GMT
            Not After : Jan 17 10:46:09 2027 GMT
        Subject: CN=068564db-6c18-4bc7-b208-406832fcce71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ff:7f:6b:bd:3e:b3:b6:13:59:85:1d:d0:1c:
                    50:b1:fc:d3:6d:c8:b6:18:46:53:e7:31:98:94:9a:
                    98:37:f6:37:b3:1f:02:47:d9:84:1f:ca:dc:fc:74:
                    f0:e9:43:c4:73:80:cb:57:ab:1e:26:fc:3e:c3:51:
                    96:af:64:e0:f9:12:0b:d6:e6:e3:85:ee:12:97:4d:
                    ac:34:c4:37:c4:3e:22:f6:43:d7:0d:f7:17:44:c3:
                    23:4f:a6:fe:70:40:29:cd:a6:2a:2b:2f:37:05:6f:
                    e1:c3:1b:3a:3d:d4:cc:b5:eb:07:49:41:23:c4:9a:
                    19:cc:18:cd:37:ea:b4:47:82:19:fe:98:14:5a:69:
                    22:a9:cb:91:ff:e5:af:8f:a3:8d:e6:b8:94:f8:66:
                    cb:e4:c5:66:67:4d:f3:66:1f:7a:47:ae:9b:6c:c6:
                    04:00:5c:f9:c1:85:33:f0:62:0c:41:76:f6:3e:8a:
                    d0:69:84:cd:2e:af:3b:bd:36:fb:af:17:a7:72:22:
                    c1:e7:11:59:56:7b:63:00:f7:66:3a:1b:44:71:95:
                    a3:f1:09:ea:8a:68:78:cc:55:76:13:12:32:a0:a6:
                    48:fc:e1:fd:25:fe:47:78:d5:7f:99:12:ce:f5:90:
                    a5:4c:32:76:89:16:70:c2:3a:1d:eb:3b:e1:72:aa:
                    63:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E7:0A:38:0B:AC:E8:BA:D7:25:C6:63:0F:94:DE:1E:15:C3:D2:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/007cf00a-9517-35c4-8ce8-cad082875244.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl

            X509v3 Authority Key Identifier:
                keyid:EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.34.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dd:96:83:02:50:5f:c5:b5:45:52:df:bf:ff:a8:fb:3b:1c:b8:
         c8:81:b2:ab:4b:3f:4a:e7:09:0a:20:dd:82:db:f1:bc:fc:49:
         ea:67:8a:01:e6:80:7b:8d:d8:9f:28:1b:40:c1:62:32:a0:d5:
         d2:d6:b7:9f:81:3a:df:13:c9:e4:14:39:eb:b4:f8:83:22:01:
         49:ec:22:c7:6e:23:32:7f:24:28:45:15:9a:66:4c:4d:52:09:
         9a:41:60:26:1c:73:56:e6:82:89:1f:14:c4:17:a0:a7:58:d2:
         f5:c9:41:ff:53:de:92:09:95:bf:88:9b:9c:50:12:12:43:06:
         fe:50:01:34:81:21:ce:71:4e:49:8c:54:6a:62:72:90:8e:98:
         94:38:95:fd:95:97:3c:3d:50:31:8b:92:a2:6b:fc:82:7e:68:
         aa:96:aa:34:0b:b3:63:17:e7:c9:2b:f9:c1:a5:98:55:b5:62:
         13:c7:ed:e1:fd:7e:27:d5:cc:22:9e:f5:27:64:17:ac:db:1f:
         18:14:38:c9:c6:8e:cd:a4:fb:88:ba:5b:6b:03:e9:01:a0:6a:
         e0:82:1c:37:65:d3:94:72:40:b5:ad:d7:11:9c:17:b7:2e:93:
         06:73:d4:fa:a5:32:48:b2:ae:bc:97:4d:4b:11:77:85:4a:b7:
         84:74:57:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 17:51:52 2026 by rpki-client