Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/048e6fff-a6f9-3958-bbad-49db642be740.roa
File:                     048e6fff-a6f9-3958-bbad-49db642be740.roa (raw, json)
Hash identifier:          dGdtJG340roNwqal34HmTh8B42hAeey8Ehll60VGa8k=
Subject key identifier:   1C:DE:29:A7:5C:E8:68:89:F3:68:59:B9:7F:56:79:03:6B:43:7B:9A
Certificate issuer:       /CN=66094ef6-a967-4978-81e1-d66227a478fd
Certificate serial:       010D0C9F4328584E779A3629BED06D297A289D80
Authority key identifier: DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/048e6fff-a6f9-3958-bbad-49db642be740.roa
Signing time:             Sat 11 Jul 2026 21:00:11 +0000
ROA not before:           Sat 11 Jul 2026 21:00:11 +0000
ROA not after:            Fri 09 Oct 2026 21:00:11 +0000
asID:                     13536
IP address blocks:        207.136.194.0/24 maxlen: 24
                          207.136.213.0/24 maxlen: 24
                          207.136.240.0/24 maxlen: 24
                          207.136.245.0/24 maxlen: 24
                          207.136.247.0/24 maxlen: 24
                          207.136.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:77:9a:36:29:be:d0:6d:29:7a:28:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66094ef6-a967-4978-81e1-d66227a478fd
        Validity
            Not Before: Jul 11 21:00:11 2026 GMT
            Not After : Oct  9 21:00:11 2026 GMT
        Subject: CN=a547394c-9ac0-4384-ae56-5feb8c8d049f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5c:20:0b:4d:28:c8:f7:fd:f3:57:6b:9a:17:
                    f2:51:20:64:be:5d:de:41:f5:c0:53:41:41:c6:1e:
                    83:97:8e:77:6f:8c:b2:5c:80:05:25:1f:bb:96:a9:
                    7f:55:18:67:b2:9a:e0:b2:ad:91:eb:61:97:a1:74:
                    7e:c1:77:a1:db:74:ec:45:ae:8c:4b:9c:fb:56:ae:
                    1f:84:bd:1d:0a:0a:06:7e:5c:e7:cb:e8:06:99:de:
                    44:87:e7:40:08:e9:c0:7c:bb:7d:e3:0d:b6:e0:58:
                    fd:90:8e:56:b0:43:73:27:2d:e1:4f:eb:38:7a:09:
                    64:a9:e9:61:8a:12:5a:59:0a:d5:6b:16:0e:7f:4a:
                    9b:fd:3b:ed:06:3c:00:41:4d:0f:50:70:65:cc:45:
                    c9:d3:e7:2d:7e:23:e0:9a:6e:16:20:0a:ef:bd:7d:
                    d1:5a:8e:27:6b:98:33:82:fc:5b:d2:8a:d7:3e:1e:
                    f5:10:0e:2a:9d:74:fd:85:bc:ef:81:c6:d9:32:77:
                    02:bd:ec:e7:ef:29:59:fe:81:80:ce:66:01:73:7d:
                    81:0c:bf:c8:c4:c5:13:f6:61:5d:95:c3:7d:03:8e:
                    86:bf:a5:81:8f:1b:34:08:ae:55:4c:70:c1:e3:fc:
                    b6:13:8f:a5:f0:fc:ad:2b:d1:9e:1d:58:b1:89:ec:
                    fe:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:DE:29:A7:5C:E8:68:89:F3:68:59:B9:7F:56:79:03:6B:43:7B:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/048e6fff-a6f9-3958-bbad-49db642be740.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl

            X509v3 Authority Key Identifier:
                keyid:DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.136.194.0/24
                  207.136.213.0/24
                  207.136.240.0/24
                  207.136.245.0/24
                  207.136.247.0/24
                  207.136.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:bb:ea:71:b7:a1:d9:6e:92:b8:9b:af:e4:cc:82:ac:72:eb:
         d9:11:de:da:ee:1b:71:40:24:a5:84:22:74:5a:d5:11:38:af:
         7d:04:69:ae:9a:8d:36:c5:2c:ee:30:a4:25:03:ef:32:fd:56:
         71:41:bd:ac:69:d3:bb:6c:86:39:b4:81:7b:2c:39:de:bf:37:
         b0:59:13:e5:b0:d1:3a:a9:7b:3f:35:a3:3c:4c:04:f9:b5:58:
         d7:f0:99:09:b8:6e:a2:4a:50:a8:45:46:83:19:c6:43:1b:cc:
         6e:d8:a8:6d:ab:90:ea:b7:ac:9d:cb:5a:82:01:40:6d:0c:0f:
         d8:97:ec:a2:e8:71:8c:50:f4:1c:94:de:d8:16:d7:6b:56:3b:
         35:e1:db:64:07:2f:7b:7d:05:73:04:4b:e0:3a:c5:2b:12:dd:
         0e:3b:30:47:f9:90:18:ff:b2:b0:8f:78:d8:1d:be:ac:67:9d:
         be:34:37:83:b8:f5:78:c5:bf:6b:ff:cb:a3:7b:8d:07:4d:94:
         b5:49:ff:3f:6e:4d:57:8b:23:ab:b5:da:eb:e3:9d:f8:71:24:
         a7:df:07:b3:da:b8:96:ca:b5:12:16:5b:08:3b:0f:23:b3:96:
         54:42:c2:65:4a:f2:9f:dd:d5:b1:13:fc:f1:7e:ba:35:51:cb:
         a4:7b:71:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 12:53:27 2026 by rpki-client