Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b28d7996-9367-307a-9fd5-1e4fc260c99d.roa
File:                     b28d7996-9367-307a-9fd5-1e4fc260c99d.roa (raw, json)
Hash identifier:          qb0HOGB3hCaNSsUQTBxcWpGFrcWa7wY7Hy2dpWZr41c=
Subject key identifier:   8B:71:32:1A:42:A2:17:E8:4D:A4:51:D7:47:70:23:C6:3A:43:FA:64
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584E6F3EA9F48FB8BF9448D7C5C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b28d7996-9367-307a-9fd5-1e4fc260c99d.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     212238
IP address blocks:        205.186.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3e:a9:f4:8f:b8:bf:94:48:d7:c5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=b7977dac-f815-477a-9e9a-41173fd644af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a6:7c:da:4f:de:f1:7b:c5:1e:ed:99:65:c3:
                    58:98:3a:13:2a:e8:2c:5b:f0:46:81:f7:b6:fa:c0:
                    9a:c8:14:8d:d1:79:90:7f:75:ac:63:c6:74:dd:68:
                    0b:ca:dc:47:8f:2a:20:a4:bf:4d:f1:98:f5:75:85:
                    c5:23:c4:0e:3a:69:87:36:28:00:63:51:04:c7:8d:
                    26:2e:94:3a:51:13:37:21:9c:d0:0a:2f:0e:89:43:
                    7d:6c:d0:8a:6d:0d:a5:f0:2f:f9:78:9f:9d:d4:07:
                    eb:c9:66:80:74:9b:5e:c1:5e:f4:a6:e8:c6:63:ff:
                    7a:c5:ef:2e:33:7e:c4:b9:ca:41:60:12:91:d3:69:
                    be:47:75:a0:b4:b6:8a:8b:aa:52:a7:63:f0:8d:8c:
                    9c:53:cf:69:da:54:6f:be:a3:b0:83:38:b3:1f:8b:
                    5c:07:94:19:fe:8e:41:4d:02:c2:44:24:ba:d1:5b:
                    43:49:59:f1:83:ca:7d:23:a5:13:a1:b6:3a:c5:30:
                    25:d2:c5:44:dd:ba:bd:41:b1:54:ec:70:5a:29:c8:
                    49:20:28:1e:84:59:dd:43:39:b1:d2:70:8b:de:af:
                    90:a4:d4:bd:27:e0:42:e3:be:0b:8f:c6:5e:6e:d3:
                    34:a6:de:8c:9b:3d:c8:5d:90:40:fa:a0:da:51:d1:
                    af:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:71:32:1A:42:A2:17:E8:4D:A4:51:D7:47:70:23:C6:3A:43:FA:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b28d7996-9367-307a-9fd5-1e4fc260c99d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.186.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:5d:75:ee:4b:e8:63:25:3c:9b:24:4b:d7:8e:70:77:ef:97:
         62:c0:2b:77:db:c0:9a:79:c0:b1:47:b4:1a:24:24:7f:ac:42:
         be:90:a6:b1:ac:ac:fc:a7:76:6a:1b:2b:57:19:0b:b0:e6:85:
         6e:c3:92:94:02:c3:7d:b7:1a:17:9b:27:c2:25:2a:a3:2d:dd:
         fd:7f:b0:0e:6a:34:e5:c5:c2:68:67:5c:06:ee:60:6e:14:ce:
         25:e5:53:10:f7:4d:06:00:e3:3e:f6:d5:62:88:5a:41:44:8c:
         7e:75:6e:a8:f5:88:dc:85:ee:fa:2d:db:1e:a2:29:13:43:3b:
         66:f5:6d:fb:de:2e:31:21:51:77:d3:44:6f:42:8a:4c:6d:dc:
         08:c9:39:c4:26:77:c3:99:0b:89:b8:fe:40:23:13:aa:4d:3d:
         22:79:ff:56:5b:c5:1e:99:96:41:24:c1:da:3d:36:dc:3b:52:
         c1:b8:a6:de:d2:1b:42:ba:72:40:19:b5:ce:e8:dd:cc:67:53:
         3f:67:7b:00:de:bd:df:95:6d:e5:e1:f0:3e:0c:26:c9:6e:e8:
         43:be:fd:8d:17:b3:a9:74:84:29:99:4a:23:f9:1c:b9:ef:a8:
         d7:4f:19:53:4b:d4:86:66:8b:80:e8:4b:a8:e2:2e:f1:f6:d3:
         c5:3e:63:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 11:40:17 2026 by rpki-client