Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/5628513e-2749-3803-9fce-91409d697967.roa
File:                     5628513e-2749-3803-9fce-91409d697967.roa (raw, json)
Hash identifier:          xLghZaVhHwkWB6TXz7+sGL3x0xfnwklCVliMDQufdaw=
Subject key identifier:   EA:CA:68:F0:DA:C4:AB:41:91:D9:50:21:50:53:1B:5C:C4:AE:23:B5
Certificate issuer:       /CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe
Certificate serial:       010D0C9F4328584EA791571AB5571BD38909DB80
Authority key identifier: 18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/5628513e-2749-3803-9fce-91409d697967.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     393262
IP address blocks:        216.122.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 20 Aug 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:57:1a:b5:57:1b:d3:89:09:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=89eb9c9a-065c-490b-a732-d3313ac3cbf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f4:02:b7:cf:b3:23:8c:50:99:96:4a:ac:48:
                    92:9f:d6:0f:04:26:4b:45:b4:5c:5a:ff:34:78:a9:
                    2b:b4:8e:fe:f4:54:20:9d:95:2d:fb:c0:56:80:38:
                    fc:5b:18:a9:61:22:08:dd:b4:9d:15:01:34:b9:9d:
                    58:4a:03:9f:b2:ea:ae:a0:93:70:61:1f:43:76:3a:
                    95:43:34:d6:28:8d:c1:ce:4e:a8:23:03:7c:09:74:
                    7d:bb:01:e9:11:56:6b:9b:a4:81:a0:70:d9:72:e1:
                    26:d7:42:c6:44:1a:ab:ad:cc:45:3c:fa:13:ba:2f:
                    51:fd:93:75:ea:1a:cd:8d:39:27:ae:19:db:0f:6a:
                    ee:34:65:0e:cf:35:47:7a:d7:16:cc:f4:41:99:58:
                    de:f2:a2:b9:1c:6a:75:45:a1:1c:38:5d:e8:d0:a3:
                    f3:d4:ca:b2:dd:68:f5:3b:7e:04:52:0f:2c:f3:9b:
                    1d:f5:f5:d6:f2:91:73:4b:0a:c6:2a:2a:47:84:1c:
                    b1:4b:17:39:f9:f9:54:e2:21:95:b4:06:cb:3b:f5:
                    08:67:ee:bf:c2:c3:41:60:51:8d:67:86:65:1e:93:
                    2d:9a:b3:07:f9:25:68:17:be:a3:80:9b:14:93:65:
                    bd:98:14:9d:6d:8e:61:b3:0b:3b:ce:62:b7:83:21:
                    8c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CA:68:F0:DA:C4:AB:41:91:D9:50:21:50:53:1B:5C:C4:AE:23:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/5628513e-2749-3803-9fce-91409d697967.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.crl

            X509v3 Authority Key Identifier:
                keyid:18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:67:ac:56:98:5c:56:1a:97:f1:d9:fb:5d:ac:17:2a:51:52:
         b8:ae:26:04:9d:d8:55:27:43:a2:e2:6e:b9:28:4f:30:e4:3b:
         a4:6a:4c:c9:85:f4:4a:26:e8:66:b8:89:f6:f2:39:42:a2:30:
         70:72:9b:2e:1a:ae:ac:9e:6e:39:e7:30:bc:9c:6e:6d:6f:f1:
         d6:91:54:d1:9b:2f:b5:2a:eb:2f:48:b4:17:6e:80:7d:04:e6:
         c8:90:65:bb:02:ed:95:1b:31:4d:9a:ab:32:96:83:aa:79:ac:
         fb:7d:19:f4:03:ba:1c:7b:ab:0b:0b:72:89:96:c5:45:3e:19:
         0f:f5:60:d8:5e:50:dc:d7:1f:6a:d9:75:a6:bf:5d:61:c3:63:
         7c:8a:5f:3a:e8:34:90:0e:85:1b:24:cd:fa:d9:18:b1:cc:6a:
         74:85:1c:6e:43:20:5c:a9:4a:5f:c1:10:e1:43:9f:86:52:fe:
         9a:1c:1c:21:bf:41:97:7a:21:2e:b7:7d:c5:00:22:68:1c:e3:
         f2:ec:5e:38:90:0f:49:7f:79:ca:f8:79:49:1a:fb:f7:e8:f0:
         d5:5c:f5:b2:79:8e:2a:c1:2d:35:8c:61:db:6a:04:ea:04:67:
         83:c3:d5:d9:7b:a7:51:49:d9:7c:51:ba:1f:27:e9:09:8c:75:
         fb:b0:25:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:48:17 2026 by rpki-client