Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/cbb8c0d7-e501-3e80-a9f5-0edf48a72fb5.roa
File:                     cbb8c0d7-e501-3e80-a9f5-0edf48a72fb5.roa (raw, json)
Hash identifier:          loAQfXd4RFQhIxq0OdPGisSAIFSb6r2dNDwUdqccOxA=
Subject key identifier:   AD:96:F7:61:AE:D1:5A:0A:62:52:8D:DB:C4:79:C2:E0:2D:CE:F1:E3
Certificate issuer:       /CN=0679e601-ff38-42c1-9b52-0b5bad96b962
Certificate serial:       010D0C9F4328584E66DA0CF651FB27AE2E6E6B00
Authority key identifier: FC:E6:46:FD:25:DD:20:4C:DC:40:81:53:67:B2:73:B1:B1:5A:1C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/cbb8c0d7-e501-3e80-a9f5-0edf48a72fb5.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     137509
IP address blocks:        131.143.248.0/23 maxlen: 32
                          207.90.241.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/0679e601-ff38-42c1-9b52-0b5bad96b962.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/0679e601-ff38-42c1-9b52-0b5bad96b962.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:0c:f6:51:fb:27:ae:2e:6e:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0679e601-ff38-42c1-9b52-0b5bad96b962
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=4412b367-ed2a-4e0f-b60b-554352afa38f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6b:7c:9b:7d:46:97:5c:b0:b5:63:27:5d:00:
                    b5:1a:40:58:34:4a:5d:6a:08:65:c6:35:00:38:f9:
                    25:31:f3:bc:0c:ff:be:9e:18:c4:58:f1:57:3b:f6:
                    6e:65:8f:ce:85:a6:32:4b:a0:6d:47:e3:86:41:18:
                    d2:4d:93:c5:ae:ab:55:bd:ef:b8:23:22:3f:18:b2:
                    cb:75:82:3f:3e:03:4b:10:44:3d:a1:df:ca:ce:84:
                    f9:66:a9:26:1a:f2:ff:ec:1b:3e:74:db:26:0b:9c:
                    14:98:9f:d9:9b:04:d2:59:4b:6a:3f:d7:86:33:16:
                    f9:f7:ff:ee:2a:e8:02:2b:15:5f:99:5b:ef:c2:5f:
                    de:4b:82:ac:4b:2a:c2:79:4b:21:2b:f4:9c:8d:ab:
                    cd:8e:ee:99:61:a2:a9:73:5a:2e:2e:3f:f1:f4:4e:
                    db:18:67:fd:24:fc:58:fc:0a:9e:66:fa:cb:b4:65:
                    aa:82:03:2a:e5:7e:21:84:5e:05:c3:b5:bc:ce:99:
                    85:82:9d:25:3f:df:28:1a:73:ff:3f:10:c4:7f:9b:
                    3d:54:77:f6:4d:3d:f1:0c:f4:c8:dd:dc:e8:9b:df:
                    c3:c8:1c:33:c2:25:88:8d:28:86:f9:95:f5:86:7f:
                    7a:23:d0:21:e7:21:aa:00:94:d2:42:e0:2e:e5:49:
                    a9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:96:F7:61:AE:D1:5A:0A:62:52:8D:DB:C4:79:C2:E0:2D:CE:F1:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/cbb8c0d7-e501-3e80-a9f5-0edf48a72fb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962/0679e601-ff38-42c1-9b52-0b5bad96b962.crl

            X509v3 Authority Key Identifier:
                keyid:FC:E6:46:FD:25:DD:20:4C:DC:40:81:53:67:B2:73:B1:B1:5A:1C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0679e601-ff38-42c1-9b52-0b5bad96b962.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.248.0/23
                  207.90.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:05:ce:8d:06:8a:b6:38:96:dd:d7:9a:83:3b:d2:82:e6:f3:
         ef:fa:90:2c:88:a0:06:75:cd:2d:12:92:49:50:32:09:b8:73:
         a8:da:04:48:eb:0a:8d:30:6f:3c:ae:11:b5:85:ed:fa:d8:4d:
         24:47:25:9e:34:f5:39:94:b6:35:87:34:31:6b:c0:ab:3e:66:
         3e:23:11:59:a2:a5:08:08:c6:f6:4f:3f:e0:b4:43:da:15:16:
         e2:4a:fe:fd:5d:ef:df:76:cf:6b:c4:32:fa:5a:61:46:b7:13:
         0a:10:28:d6:b3:73:a0:34:2c:c0:31:a4:6e:db:88:73:95:fc:
         43:d6:43:e3:08:cd:19:16:50:75:3e:8b:43:fe:7d:50:f2:c8:
         b2:7c:90:49:6e:9d:fc:0c:3c:bf:e0:6a:f8:29:df:18:f3:f6:
         e0:67:14:fe:44:0a:45:08:37:40:2c:b4:85:8b:9c:ab:7e:11:
         86:6f:28:dd:e1:17:e6:e3:02:c6:28:90:a5:95:66:c6:f6:aa:
         68:7a:37:fc:4e:85:be:cb:05:5e:84:72:07:69:b0:1f:fe:1c:
         a6:f7:4b:31:ac:4f:7b:dc:1a:95:ef:36:f0:86:96:79:42:13:
         14:b2:49:aa:2e:27:c1:11:54:4d:7f:72:fb:06:d2:46:04:64:
         1a:52:57:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:20:45 2026 by rpki-client