Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/03fd2f73-270a-3fae-aad5-2aa15608021a.roa
File:                     03fd2f73-270a-3fae-aad5-2aa15608021a.roa (raw, json)
Hash identifier:          ijAVnjJda7UaeIujgrOtyc1DcDBm1LlSUGL2HK0qkA0=
Subject key identifier:   7F:03:D4:8B:2B:A3:EB:7B:51:E0:5E:8F:D6:A5:71:A8:FE:C8:51:45
Certificate issuer:       /CN=b2d9b16a-e15f-46c2-a578-0677307787a3
Certificate serial:       010D0C9F4328584F23C251A0AC05674A71E21C00
Authority key identifier: 20:4A:40:E3:31:B9:38:43:3F:08:46:33:45:10:16:A6:84:B1:83:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/03fd2f73-270a-3fae-aad5-2aa15608021a.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     399686
IP address blocks:        207.90.208.0/22 maxlen: 24
                          207.90.208.0/24 maxlen: 24
                          207.90.209.0/24 maxlen: 24
                          207.90.210.0/24 maxlen: 24
                          207.90.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/b2d9b16a-e15f-46c2-a578-0677307787a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/b2d9b16a-e15f-46c2-a578-0677307787a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:51:a0:ac:05:67:4a:71:e2:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2d9b16a-e15f-46c2-a578-0677307787a3
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=16ed817d-9ef0-4fe2-a023-198c2a75371d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:71:ec:79:59:2c:39:c8:a9:a6:2c:42:57:f1:
                    61:a7:c0:21:f9:a2:51:bd:48:9f:7a:88:8c:0d:dd:
                    96:b5:8a:4f:4c:2d:1f:a7:b7:89:12:13:19:cc:9e:
                    25:3b:e6:05:20:6d:11:b3:63:3c:19:3a:86:ab:23:
                    e2:c4:3b:3e:4f:12:dc:04:79:eb:cd:84:4c:29:1e:
                    c2:31:5d:26:50:5a:66:79:4f:aa:4d:54:20:01:15:
                    fa:19:11:54:8a:81:45:62:2e:d4:cd:c1:a8:5d:a5:
                    ec:fa:02:01:60:15:26:9b:55:5f:9c:14:fc:cd:1e:
                    6a:26:77:f7:f5:21:ec:24:7f:22:93:c3:72:0b:77:
                    58:2c:04:17:e0:c4:ca:13:d5:e8:f3:08:21:ad:af:
                    06:04:26:45:a9:7a:16:4a:48:33:ee:df:86:9b:8a:
                    ec:04:55:65:a4:22:86:9f:cb:58:ae:98:21:f8:c3:
                    19:84:ec:f6:7c:3d:2f:35:4c:2e:03:56:b9:bd:3d:
                    5c:9a:5c:f8:51:c2:bd:0d:1d:04:dd:e8:53:ae:d4:
                    48:1b:bb:e2:08:31:70:2d:49:3f:36:fe:32:63:ca:
                    e9:91:8a:45:e6:21:a4:47:d0:c5:bd:cb:36:15:9d:
                    56:13:ce:d7:a4:9b:bc:eb:17:47:d4:93:f6:75:99:
                    11:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:03:D4:8B:2B:A3:EB:7B:51:E0:5E:8F:D6:A5:71:A8:FE:C8:51:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/03fd2f73-270a-3fae-aad5-2aa15608021a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3/b2d9b16a-e15f-46c2-a578-0677307787a3.crl

            X509v3 Authority Key Identifier:
                keyid:20:4A:40:E3:31:B9:38:43:3F:08:46:33:45:10:16:A6:84:B1:83:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b2d9b16a-e15f-46c2-a578-0677307787a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.90.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:7b:2c:57:73:c7:24:fb:4d:5b:19:b0:f3:21:d0:6d:18:bc:
         be:3e:13:c2:83:6a:c4:80:df:bc:3c:87:0e:2b:c1:9d:e8:50:
         14:e9:6c:42:c0:a5:7d:1d:dc:e2:47:50:4a:09:8b:2a:ed:05:
         ef:81:c2:90:c2:9b:11:0e:2a:aa:5a:88:c7:f3:76:5d:4f:26:
         bf:51:67:aa:1d:ea:7e:0c:40:60:c4:92:23:06:57:b4:9e:fb:
         9d:69:25:90:66:f4:22:45:fa:7f:83:6d:62:16:33:b3:c4:2b:
         48:20:bf:84:b3:7f:44:4b:af:63:96:a5:53:1c:bc:5e:4e:86:
         6c:c6:9c:43:6c:66:2e:77:45:55:9f:9a:37:89:dc:5d:aa:2d:
         83:40:66:5f:34:00:9d:a9:25:d1:d0:04:4f:99:db:45:55:53:
         1d:ed:23:d8:de:0a:f6:ec:b3:2c:45:43:fc:a3:d8:f1:be:46:
         ac:55:d1:df:98:83:31:a8:09:39:d7:d2:72:fe:e2:df:0f:a0:
         29:c2:16:cf:d6:85:4d:ae:e4:23:ee:c6:fb:ab:9b:52:31:c2:
         f1:dd:ba:32:a3:e4:11:9b:36:35:06:9e:04:56:9f:56:0a:2e:
         46:53:54:35:7f:a4:a4:f8:b5:25:eb:43:51:a7:89:6f:5b:ec:
         30:13:58:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 09:45:05 2026 by rpki-client