Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c/d3d63761-7214-338c-907c-cda0cf4b3c58.roa
File:                     d3d63761-7214-338c-907c-cda0cf4b3c58.roa (raw, json)
Hash identifier:          4sK2uT4tCVB4sBIvuVQ2OzEPdtbu+u/liJ5hhiZizpU=
Subject key identifier:   86:D7:56:64:6A:EE:ED:83:1A:90:9C:5B:1B:D2:14:59:59:1E:AC:30
Certificate issuer:       /CN=8e262294-f3c0-4a56-8c97-786e6ae2f14c
Certificate serial:       010D0C9F4328584EA79C4CBA29E805228A09537F
Authority key identifier: 27:A7:46:6C:19:A9:9A:2B:26:07:13:D0:A7:19:8D:AE:5C:29:52:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c/d3d63761-7214-338c-907c-cda0cf4b3c58.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     7018
IP address blocks:        207.228.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c/8e262294-f3c0-4a56-8c97-786e6ae2f14c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c/8e262294-f3c0-4a56-8c97-786e6ae2f14c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:4c:ba:29:e8:05:22:8a:09:53:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e262294-f3c0-4a56-8c97-786e6ae2f14c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=96c427d9-8c8d-438c-a075-5b8b50194b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d7:98:fa:bd:45:b0:49:6f:af:6a:09:3f:4d:
                    05:24:68:fe:7e:24:6d:8e:1f:77:3f:ed:70:81:c0:
                    2f:1e:01:72:9e:2c:8d:8a:46:2d:b4:69:c4:9f:5e:
                    26:aa:53:55:32:c1:49:94:5c:a7:04:2a:83:33:b6:
                    ce:ea:6f:c0:66:af:60:45:cd:fa:36:f3:8e:dd:6c:
                    01:96:38:97:d0:ca:e3:c5:13:b6:1f:6a:6b:7b:c5:
                    6b:3f:37:7e:d2:ee:4b:28:60:bb:fc:08:9c:1f:dd:
                    94:15:fb:2b:d8:b3:e1:34:55:96:37:94:9d:b7:06:
                    ea:9e:0f:d4:71:7c:32:66:3f:68:0b:56:0a:8d:c4:
                    80:a1:f2:2b:ef:7f:32:a9:9a:c4:1b:2d:5b:a0:3b:
                    e8:6e:ee:91:6f:62:57:d7:c3:53:fe:cf:f7:bd:62:
                    ba:b9:9b:e1:05:ea:a8:36:e3:00:1e:3b:01:a6:15:
                    e9:83:7a:47:b2:5a:b9:54:d4:93:13:35:4c:65:85:
                    50:78:db:06:6e:50:a5:6a:20:76:b3:39:55:b5:c1:
                    e7:7e:42:bd:7a:9d:82:cf:48:14:b8:f1:5e:84:d1:
                    ca:08:58:dc:6a:4d:1e:90:70:f7:5a:40:05:38:20:
                    e2:eb:ee:95:64:fa:40:13:fa:01:ca:08:16:0e:35:
                    b7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D7:56:64:6A:EE:ED:83:1A:90:9C:5B:1B:D2:14:59:59:1E:AC:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c/d3d63761-7214-338c-907c-cda0cf4b3c58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c/8e262294-f3c0-4a56-8c97-786e6ae2f14c.crl

            X509v3 Authority Key Identifier:
                keyid:27:A7:46:6C:19:A9:9A:2B:26:07:13:D0:A7:19:8D:AE:5C:29:52:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.228.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:51:07:75:8c:bd:da:af:2d:95:23:bb:ad:bd:8b:16:de:29:
         85:b2:9a:e7:62:a6:21:fb:19:a2:4e:17:60:2a:cc:dd:f3:ea:
         25:ea:fd:81:df:8a:b9:9c:14:33:ce:5f:d3:66:bd:e5:c2:c9:
         ce:92:0b:23:fa:51:bd:c5:fe:c9:b2:cd:60:c9:be:48:fb:48:
         cb:47:b0:87:49:af:94:8d:73:34:1c:dc:9a:9f:ef:4f:03:0b:
         eb:84:e6:e7:c6:27:f5:72:7a:8e:ec:fb:a5:19:04:31:7d:f4:
         f0:c5:de:44:2b:e8:eb:29:75:7f:37:32:ab:68:ef:e2:7e:cb:
         91:3e:b0:9f:b2:8a:1b:e9:b4:80:51:32:aa:a1:e3:53:e2:55:
         03:93:9e:77:57:14:49:aa:7c:5b:75:ac:53:b8:f1:eb:d2:33:
         37:ed:4b:44:53:bc:fa:f0:ae:0b:eb:d9:39:57:7c:90:54:c3:
         e2:37:6c:de:eb:df:b2:e0:54:0f:3b:c4:78:b0:60:e1:28:81:
         1e:9c:45:f4:5c:89:9a:b2:b4:b8:bb:05:0d:20:5d:4c:f0:db:
         f5:76:ef:5d:88:83:98:ab:a6:85:0c:61:ea:1f:1e:d7:40:cd:
         80:c3:10:bc:25:07:f9:c0:ff:d3:3e:ea:48:be:7d:d9:0b:be:
         a7:51:9c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 19:24:29 2026 by rpki-client