Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/fc325bb6-81f5-3dc5-acb6-ad4da789e510.roa
File:                     fc325bb6-81f5-3dc5-acb6-ad4da789e510.roa (raw, json)
Hash identifier:          OdxS01LOqfCMYklR21BBhGNswtlVujmCJKQq3/LRG+E=
Subject key identifier:   C4:8C:F0:8F:9A:BF:D0:40:D3:D7:D5:26:04:8D:E6:D1:5B:32:66:CC
Certificate issuer:       /CN=c6228f86-bf54-49fc-835c-588cd2aadb49
Certificate serial:       010D0C9F4328584E73ADDB757FE2425159264CE8
Authority key identifier: D3:6C:AC:E6:33:A2:EE:D4:AF:82:1E:F5:97:60:89:BE:D8:47:3C:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/fc325bb6-81f5-3dc5-acb6-ad4da789e510.roa
Signing time:             Fri 10 Jul 2026 11:16:46 +0000
ROA not before:           Fri 10 Jul 2026 11:16:46 +0000
ROA not after:            Thu 08 Oct 2026 11:16:46 +0000
asID:                     6325
IP address blocks:        207.63.0.0/16 maxlen: 16
                          207.63.0.0/17 maxlen: 17
                          207.63.0.0/18 maxlen: 18
                          207.63.64.0/18 maxlen: 18
                          207.63.128.0/17 maxlen: 17
                          207.63.128.0/18 maxlen: 18
                          207.63.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:ad:db:75:7f:e2:42:51:59:26:4c:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6228f86-bf54-49fc-835c-588cd2aadb49
        Validity
            Not Before: Jul 10 11:16:46 2026 GMT
            Not After : Oct  8 11:16:46 2026 GMT
        Subject: CN=0fb40469-ceb4-447e-9ffe-3264dd2201e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:20:b5:86:7e:d5:54:ae:df:9b:d4:70:65:98:
                    af:8a:a8:18:ff:26:ac:42:4d:f9:54:0e:32:ed:57:
                    6b:ef:fc:d6:4b:cc:2a:93:17:46:e6:fd:08:67:92:
                    cb:87:d2:6c:9c:a8:d0:96:df:7b:aa:bd:57:ce:12:
                    3f:3e:79:f0:ff:67:20:67:c1:18:f3:b9:56:e2:4e:
                    c5:85:13:1d:06:b0:c9:64:90:d4:69:40:75:06:05:
                    8d:6b:d5:a5:33:da:9b:df:d3:19:2c:75:30:36:5d:
                    7e:df:df:7e:1c:f8:7e:44:86:1b:b1:7d:04:2b:32:
                    b6:93:67:42:fb:76:af:ca:65:4e:70:d5:10:ea:40:
                    54:90:df:5e:5a:4b:af:33:70:b0:a9:f9:f0:6e:ef:
                    73:0e:f3:27:cd:ee:b5:47:a0:00:e3:90:cc:74:db:
                    23:48:e9:f7:a4:a6:24:43:23:15:ce:da:57:fd:4a:
                    20:19:75:7e:a2:1d:5f:4b:78:6b:52:86:3e:c0:29:
                    6c:93:62:81:79:97:70:ad:90:a4:11:b3:85:4b:b5:
                    82:d0:0f:fb:39:8a:75:8b:46:f5:1f:61:50:73:fe:
                    43:85:4c:06:fd:e3:d2:43:e3:e4:b9:3d:5b:e5:35:
                    ca:f6:62:87:b4:4e:4b:66:5b:93:34:99:1d:4e:e7:
                    23:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:8C:F0:8F:9A:BF:D0:40:D3:D7:D5:26:04:8D:E6:D1:5B:32:66:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/fc325bb6-81f5-3dc5-acb6-ad4da789e510.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.crl

            X509v3 Authority Key Identifier:
                keyid:D3:6C:AC:E6:33:A2:EE:D4:AF:82:1E:F5:97:60:89:BE:D8:47:3C:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.63.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:b7:58:3b:ca:6a:1c:13:d1:bf:a0:6d:76:4f:68:7d:7d:7a:
         32:50:5f:5e:5d:48:e5:06:a6:7f:03:ba:a3:98:fd:9a:65:53:
         d6:34:92:82:e9:ab:d2:5f:24:ee:af:e2:86:6c:a2:3d:02:34:
         84:ee:8d:3c:c9:9a:6e:84:cb:2e:06:a8:68:f0:d5:df:98:ee:
         1d:79:d2:f3:8d:1f:3c:42:5f:c0:44:e4:54:e5:54:1c:9d:93:
         28:1e:9a:de:53:a8:07:d4:30:03:8e:3a:3f:4a:c6:2e:20:f7:
         ce:27:e3:6a:c8:ce:92:69:80:6e:98:f3:89:3f:0f:bd:d7:af:
         97:3e:66:3b:82:e0:5a:05:de:b5:25:6f:48:d7:fc:75:4c:9d:
         e3:07:18:98:20:d3:94:0d:ba:64:74:0a:7d:d8:83:97:f7:c8:
         60:43:69:c7:b3:2e:fe:4b:be:c0:07:14:af:1d:2a:e6:7a:f0:
         a1:47:0d:72:6b:26:9a:ad:fd:76:60:59:a4:74:6e:c6:ef:8e:
         79:b3:02:94:5e:5b:d1:75:f6:8b:b0:d5:c9:27:e2:8f:34:c3:
         7e:52:a8:d5:dd:8e:a3:94:b0:68:8a:10:d9:e8:fd:4a:d8:90:
         75:7f:6c:70:66:12:22:b8:1e:d2:6b:c0:a9:2b:20:d0:6a:c9:
         19:b4:f5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 07:16:15 2026 by rpki-client