Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/7683827d-b0ab-3fb2-98dd-0cbe6b7540c3.roa
File:                     7683827d-b0ab-3fb2-98dd-0cbe6b7540c3.roa (raw, json)
Hash identifier:          4pGKqF/n8/JSMofHEP4PwspoWcgFzpfwJ6Q51Gwa7TU=
Subject key identifier:   1A:6E:45:0D:8A:F4:05:4E:B3:83:77:C1:94:9A:25:18:76:0F:56:EF
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584E6B0A0D50643D8FCB63E72E00
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/7683827d-b0ab-3fb2-98dd-0cbe6b7540c3.roa
Signing time:             Tue 07 Jul 2026 09:00:12 +0000
ROA not before:           Tue 07 Jul 2026 09:00:12 +0000
ROA not after:            Mon 05 Oct 2026 09:00:12 +0000
asID:                     3561
IP address blocks:        206.153.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6b:0a:0d:50:64:3d:8f:cb:63:e7:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Jul  7 09:00:12 2026 GMT
            Not After : Oct  5 09:00:12 2026 GMT
        Subject: CN=f97e085f-9d70-450a-84b8-1fc2f42866d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:bc:10:e1:55:a8:12:db:6c:98:bd:2e:cb:d1:
                    f4:2c:be:62:bd:8c:f5:98:8a:a9:44:13:62:2a:4b:
                    08:83:e8:cb:ab:90:33:53:ba:5a:66:08:26:b5:11:
                    07:95:11:08:9a:89:03:19:71:67:c1:3e:23:b6:5c:
                    66:44:61:58:52:f3:6e:d3:38:54:c4:f0:93:7d:66:
                    75:99:fd:e4:9c:04:e4:e8:30:39:90:16:0b:a8:ac:
                    37:55:70:b8:0a:84:0d:0b:29:d4:87:e9:2c:23:bc:
                    6d:33:83:fb:ef:4a:d4:63:bb:3c:5e:62:c5:cc:3a:
                    0e:03:53:a5:56:3a:a1:9b:93:d3:59:44:98:20:82:
                    34:7f:d9:c5:22:8b:0d:a1:4b:18:03:5e:17:41:a6:
                    0b:56:aa:8b:64:97:62:1e:03:a2:55:78:b4:1d:34:
                    1c:5d:0f:d1:95:3a:c7:b0:11:db:bb:d0:2e:33:99:
                    04:29:c1:6c:2a:78:8f:32:12:fd:52:b7:41:2b:64:
                    07:90:f5:1d:e0:ed:0c:6c:94:c3:16:b6:dc:40:a1:
                    25:39:1e:f5:d5:40:ac:25:c9:c8:6b:19:cf:6b:99:
                    da:24:63:77:ed:36:0b:54:4d:5e:f2:fa:87:f3:b5:
                    f9:8f:7d:04:74:9c:27:63:45:e6:c2:df:cc:11:8f:
                    cf:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:6E:45:0D:8A:F4:05:4E:B3:83:77:C1:94:9A:25:18:76:0F:56:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/7683827d-b0ab-3fb2-98dd-0cbe6b7540c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.153.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:b7:5d:2d:b2:7f:cb:b7:da:6b:2e:6b:8e:bd:06:3e:0d:43:
         34:d4:df:f5:f0:bb:e7:2b:c3:91:44:f4:a4:17:eb:64:0d:67:
         7e:0f:88:45:82:34:52:3c:23:8f:67:8e:80:cf:83:d7:8b:f2:
         14:51:65:91:46:a8:9a:ec:4b:50:d8:be:38:96:9d:7a:54:a5:
         1b:98:04:be:1d:b9:6d:1e:ac:18:44:0a:9e:53:90:1e:f7:b6:
         7f:51:ac:62:ae:2a:c4:f6:83:41:c8:99:78:b0:42:54:10:2e:
         1f:39:08:bf:6c:16:53:83:ee:b0:cf:f8:2d:12:0f:a9:fe:f1:
         97:85:f4:c5:85:ba:7d:ec:73:16:55:29:2b:90:52:78:6c:07:
         15:e4:9b:d8:51:43:7c:27:f7:16:4b:5a:50:1d:01:34:83:61:
         c7:47:76:38:2d:de:79:51:d6:90:82:b6:4c:c1:e1:94:f3:bc:
         17:fc:b5:f3:5b:9c:91:96:5b:6b:7a:fc:a5:99:43:d5:df:d5:
         53:51:40:d2:9c:13:e9:5c:a0:f9:73:c4:2c:c5:ff:89:2e:4c:
         4f:2a:4f:48:91:21:eb:2f:89:1d:f8:4e:c4:10:b8:6c:e4:35:
         e3:24:d4:a3:2a:97:7a:76:13:3d:3e:9e:84:c4:04:ec:8c:79:
         c4:54:a3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 14:11:02 2026 by rpki-client