Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/194ace12-e4ed-4136-8094-1719b84ab2e5/5f1086ad-8948-354a-9582-4af6c1a59399.roa
File:                     5f1086ad-8948-354a-9582-4af6c1a59399.roa (raw, json)
Hash identifier:          T81WGovZtyq/kaEOnC9d4OE55/JAJJMSZX73Incggfw=
Subject key identifier:   61:79:B3:26:42:DC:EC:CE:D8:C9:9F:66:91:F0:59:BA:F6:70:76:7A
Certificate issuer:       /CN=194ace12-e4ed-4136-8094-1719b84ab2e5
Certificate serial:       010D0C9F4328584E51E9E124CCB7AAE07BBB7F80
Authority key identifier: BD:B6:B7:78:AD:7A:99:55:87:DF:12:DB:4C:2E:C7:E8:D0:CD:10:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/194ace12-e4ed-4136-8094-1719b84ab2e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/194ace12-e4ed-4136-8094-1719b84ab2e5/5f1086ad-8948-354a-9582-4af6c1a59399.roa
Signing time:             Sun 28 Jun 2026 09:00:11 +0000
ROA not before:           Sun 28 Jun 2026 09:00:11 +0000
ROA not after:            Sat 26 Sep 2026 09:00:11 +0000
asID:                     16509
IP address blocks:        207.245.136.0/21 maxlen: 24
                          207.245.144.0/24 maxlen: 24
                          207.245.145.0/24 maxlen: 24
                          207.245.146.0/24 maxlen: 24
                          207.245.147.0/24 maxlen: 24
                          207.245.148.0/22 maxlen: 24
                          207.245.152.0/21 maxlen: 24
                          208.64.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/194ace12-e4ed-4136-8094-1719b84ab2e5/194ace12-e4ed-4136-8094-1719b84ab2e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/194ace12-e4ed-4136-8094-1719b84ab2e5/194ace12-e4ed-4136-8094-1719b84ab2e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/194ace12-e4ed-4136-8094-1719b84ab2e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:51:e9:e1:24:cc:b7:aa:e0:7b:bb:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194ace12-e4ed-4136-8094-1719b84ab2e5
        Validity
            Not Before: Jun 28 09:00:11 2026 GMT
            Not After : Sep 26 09:00:11 2026 GMT
        Subject: CN=3b9b98ea-3665-44b1-a9c1-d2fed9250f7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:52:94:c1:e0:01:c7:7b:fd:da:da:41:e0:ad:
                    09:02:f7:09:54:34:42:8b:87:78:73:4f:0f:c7:e1:
                    3d:97:ca:ab:36:69:80:6e:ba:7a:c3:50:74:9b:92:
                    7a:13:3f:3c:be:bf:b4:32:cc:aa:1b:81:33:51:a4:
                    91:42:80:e1:6a:9c:31:21:dc:82:39:2c:71:43:e2:
                    f7:19:13:3c:18:68:b5:fe:dd:24:e2:0b:01:a4:fb:
                    00:b3:ee:b4:28:b4:59:8d:60:30:53:94:91:93:d2:
                    91:b2:60:1d:8a:b4:0c:c7:ea:df:ee:82:6a:0a:21:
                    86:ba:ca:6a:37:f5:07:ed:b3:6a:c6:aa:d2:fd:54:
                    ca:13:27:05:04:ef:ad:5b:38:41:e6:18:2d:51:d5:
                    0e:27:d7:cd:2a:9a:a3:40:be:52:2d:f6:88:b2:d2:
                    a9:8d:c8:d3:ba:55:d2:73:5c:2c:51:8b:e5:65:66:
                    d0:c3:21:ae:6d:c5:d3:58:cf:08:a0:c6:8d:74:9c:
                    2f:d7:5c:0e:d4:41:aa:52:94:e7:1b:3e:bd:5f:2d:
                    65:ab:20:d2:66:6b:b2:03:40:9f:19:90:b4:9d:7e:
                    21:3d:35:04:ed:b6:64:f1:f6:de:07:dc:b4:08:3d:
                    8c:8e:b2:43:89:eb:52:cb:7e:a1:08:e6:46:dc:c1:
                    60:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:79:B3:26:42:DC:EC:CE:D8:C9:9F:66:91:F0:59:BA:F6:70:76:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/194ace12-e4ed-4136-8094-1719b84ab2e5/5f1086ad-8948-354a-9582-4af6c1a59399.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/194ace12-e4ed-4136-8094-1719b84ab2e5/194ace12-e4ed-4136-8094-1719b84ab2e5.crl

            X509v3 Authority Key Identifier:
                keyid:BD:B6:B7:78:AD:7A:99:55:87:DF:12:DB:4C:2E:C7:E8:D0:CD:10:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/194ace12-e4ed-4136-8094-1719b84ab2e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.245.136.0-207.245.159.255
                  208.64.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:8f:0a:2b:2a:19:26:60:df:c3:90:47:83:05:91:7d:5e:75:
         14:98:3b:fe:b3:ac:76:89:b1:99:07:76:b4:0f:f3:5e:22:b0:
         72:4a:53:92:e2:d7:7a:1d:67:6e:be:0f:78:2d:cd:b1:35:c2:
         a7:96:77:f5:4b:b7:ae:05:9a:58:5c:a0:2b:8e:5b:e7:2a:0e:
         a1:f3:c4:09:65:d7:69:02:d9:4d:13:85:54:44:42:15:60:7f:
         cb:76:7d:a3:74:1a:0a:17:83:9f:3d:26:fb:3a:f6:a7:29:92:
         a5:aa:33:e8:7b:87:4b:a8:35:b5:6d:6a:e2:1b:b8:45:da:c0:
         63:68:27:c7:39:e5:3b:5a:d8:6f:e4:f4:26:63:46:e3:b9:e4:
         4c:28:05:de:fb:b5:04:0e:c9:b5:15:e8:b1:38:09:87:01:9f:
         0b:b9:26:84:1e:d0:d1:3d:ae:50:97:0b:ec:0d:26:6c:20:85:
         64:74:b4:a0:2d:66:a1:83:b7:0a:26:02:78:47:0b:03:46:36:
         1f:82:bd:00:31:54:ae:8d:90:01:cc:b6:a1:1e:ac:4b:c7:24:
         4b:82:61:6a:dd:e1:5c:eb:35:cd:da:72:38:1f:e9:f3:fb:cd:
         d2:8f:af:39:ac:39:be:a0:8c:1d:db:fe:d3:c9:f0:75:fc:9e:
         30:cc:f8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:13:13 2026 by rpki-client