Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/194ace12-e4ed-4136-8094-1719b84ab2e5/7b9dbc3b-80e7-3f8b-a1d1-847953e63960.roa
File:                     7b9dbc3b-80e7-3f8b-a1d1-847953e63960.roa (raw, json)
Hash identifier:          iEkw3Ea8mFBTHdh8FlutP4JhGj9D3c7rRDVzlWX1UhU=
Subject key identifier:   DD:16:27:34:A6:D1:D7:FC:75:3B:C5:19:4F:D2:6E:37:4C:1C:B9:21
Certificate issuer:       /CN=194ace12-e4ed-4136-8094-1719b84ab2e5
Certificate serial:       010D0C9F4328584EABCC672B7B815AF71690CAC0
Authority key identifier: BD:B6:B7:78:AD:7A:99:55:87:DF:12:DB:4C:2E:C7:E8:D0:CD:10:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/194ace12-e4ed-4136-8094-1719b84ab2e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/194ace12-e4ed-4136-8094-1719b84ab2e5/7b9dbc3b-80e7-3f8b-a1d1-847953e63960.roa
Signing time:             Thu 30 Jul 2026 13:43:35 +0000
ROA not before:           Thu 30 Jul 2026 13:43:35 +0000
ROA not after:            Sun 04 Oct 2026 09:00:12 +0000
asID:                     27613
IP address blocks:        207.245.136.0/21 maxlen: 24
                          207.245.144.0/24 maxlen: 24
                          207.245.145.0/24 maxlen: 24
                          207.245.146.0/24 maxlen: 24
                          207.245.147.0/24 maxlen: 24
                          207.245.148.0/22 maxlen: 24
                          207.245.152.0/21 maxlen: 24
                          208.64.232.0/21 maxlen: 24
                          2607:4060::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/194ace12-e4ed-4136-8094-1719b84ab2e5/194ace12-e4ed-4136-8094-1719b84ab2e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/194ace12-e4ed-4136-8094-1719b84ab2e5/194ace12-e4ed-4136-8094-1719b84ab2e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/194ace12-e4ed-4136-8094-1719b84ab2e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ab:cc:67:2b:7b:81:5a:f7:16:90:ca:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194ace12-e4ed-4136-8094-1719b84ab2e5
        Validity
            Not Before: Jul 30 13:43:35 2026 GMT
            Not After : Oct  4 09:00:12 2026 GMT
        Subject: CN=f8302d12-8886-46ae-bc56-a113a2a3f7ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:33:11:ac:f1:3d:46:0b:f2:1c:a8:02:77:08:
                    d3:79:7c:ee:fc:78:49:43:86:17:37:ce:da:01:44:
                    68:22:25:50:3e:73:75:fa:e1:74:80:6c:f2:32:00:
                    34:cd:25:fc:37:fa:f8:4a:e3:00:85:4e:5f:de:3c:
                    1f:13:b0:d9:75:c9:dd:e5:c0:5a:98:9d:6c:bd:83:
                    df:b7:2d:cc:c5:d6:6d:05:a8:8a:3b:ad:fc:c4:1c:
                    26:8f:63:13:86:36:b8:4f:43:b9:51:2a:4b:9e:78:
                    2a:d5:bd:35:7a:37:a3:7f:35:1f:07:1a:0a:ac:60:
                    29:77:aa:13:bd:5c:25:a2:7c:d4:7d:a0:25:1e:05:
                    04:7e:a3:ed:f4:d8:d4:02:25:84:c8:2c:06:ac:2d:
                    f4:6b:8f:68:0c:0a:34:7a:5d:55:fd:88:9a:60:af:
                    f5:74:d4:25:27:bf:0e:5b:14:d7:5c:6d:de:aa:6c:
                    94:a4:35:17:4b:ec:3e:df:6a:03:db:66:aa:17:f1:
                    56:39:72:ae:20:8f:89:a1:11:e6:76:fb:c6:99:13:
                    57:3f:1e:07:da:da:45:84:29:6e:7a:5f:b7:7d:05:
                    5c:a0:6d:5c:0f:ee:c4:e0:91:98:7d:c7:10:a0:4d:
                    dc:8d:a2:b0:11:2f:bf:e1:a4:3d:10:d5:21:49:b7:
                    e4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:16:27:34:A6:D1:D7:FC:75:3B:C5:19:4F:D2:6E:37:4C:1C:B9:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/194ace12-e4ed-4136-8094-1719b84ab2e5/7b9dbc3b-80e7-3f8b-a1d1-847953e63960.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/194ace12-e4ed-4136-8094-1719b84ab2e5/194ace12-e4ed-4136-8094-1719b84ab2e5.crl

            X509v3 Authority Key Identifier:
                keyid:BD:B6:B7:78:AD:7A:99:55:87:DF:12:DB:4C:2E:C7:E8:D0:CD:10:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/194ace12-e4ed-4136-8094-1719b84ab2e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.245.136.0-207.245.159.255
                  208.64.232.0/21
                IPv6:
                  2607:4060::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:7d:98:a3:7f:36:4a:7c:09:fa:3e:82:8d:a2:50:b3:67:c4:
         1f:05:19:94:3d:b4:7b:d2:2a:c8:53:7b:49:28:c5:83:47:e4:
         17:43:b6:ce:e2:60:b9:b9:92:9a:7a:76:6b:72:38:b8:f0:81:
         d1:ff:1c:f5:64:be:cb:03:bd:9e:e0:56:74:41:a6:08:67:a0:
         34:f4:8c:bc:2a:bb:ab:d1:90:a7:c2:53:91:57:3a:bf:4e:4d:
         8d:93:85:a3:3a:07:25:46:74:25:fb:55:4a:32:bd:b7:ea:a5:
         0a:9c:9b:eb:80:5b:75:4a:4a:c8:5b:29:d9:97:a3:f1:ff:ca:
         70:be:4f:b0:e3:af:23:aa:4e:f7:00:c8:73:71:be:74:39:fe:
         59:59:f5:f8:89:f3:61:d7:f1:8d:02:63:2d:70:df:11:c9:e1:
         86:22:cf:98:83:fb:bc:f5:22:70:48:09:1b:4c:3b:37:16:0f:
         72:34:21:0f:9d:58:6f:2f:e6:20:df:fd:4b:6c:f4:4e:32:7b:
         cb:89:53:a0:e9:28:87:17:c2:ad:c6:48:56:30:6c:65:c2:97:
         cd:cb:ec:94:e8:4f:44:66:03:ad:17:04:ec:8e:70:29:6b:be:
         e2:dd:39:3f:83:bc:f1:f1:f5:13:b1:68:15:ba:06:91:61:2c:
         f4:d3:fd:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:10:40 2026 by rpki-client