Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/87cd5c1a-b042-302a-8552-ca5efe3cb76c.roa
File:                     87cd5c1a-b042-302a-8552-ca5efe3cb76c.roa (raw, json)
Hash identifier:          AEIqAsyia08mrXjBBWs7NYy3e15yrdkOKUweRlsp8HM=
Subject key identifier:   C7:D1:6C:58:EA:C8:6D:F8:54:F2:92:12:34:99:04:AF:C5:B4:B8:5F
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584D983B05F34FDB9FFB34CDA240
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/87cd5c1a-b042-302a-8552-ca5efe3cb76c.roa
Signing time:             Wed 22 Apr 2026 20:43:22 +0000
ROA not before:           Wed 22 Apr 2026 20:43:22 +0000
ROA not after:            Tue 21 Jul 2026 20:43:22 +0000
asID:                     62651
IP address blocks:        207.204.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 May 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:98:3b:05:f3:4f:db:9f:fb:34:cd:a2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Apr 22 20:43:22 2026 GMT
            Not After : Jul 21 20:43:22 2026 GMT
        Subject: CN=d36f0f52-c5eb-4844-ad1d-0da66d8418a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:22:1b:fe:dd:b6:5a:1a:48:2e:4e:65:8c:87:
                    f6:39:50:15:e7:3c:95:41:1c:f5:ed:31:4e:dc:db:
                    b3:9f:28:e5:08:fb:37:11:b4:50:f4:74:8d:6c:68:
                    84:ef:a7:59:18:c7:e7:5b:94:39:0d:0f:44:db:1f:
                    e3:12:37:d9:e7:41:f2:8d:b8:3c:b6:71:1b:bc:97:
                    a1:26:60:2c:ef:9f:30:e5:90:52:7e:8e:34:af:bf:
                    f3:65:f4:d0:fd:c3:c7:86:2a:ca:33:d7:de:be:4b:
                    f2:22:1e:3b:88:84:ab:96:89:32:4f:41:41:c6:fd:
                    0a:00:dd:b5:df:b6:75:5d:a7:a8:39:c2:80:15:b0:
                    5d:6b:d2:5b:58:1e:6a:d4:56:5b:59:85:6c:5d:87:
                    37:4c:17:8e:75:bf:83:db:fb:43:76:38:d7:a1:05:
                    40:cb:c8:ce:40:89:a0:96:a9:c8:4c:c9:9d:d0:d6:
                    84:86:d7:83:54:d1:a5:e5:cf:a4:99:b5:5f:8d:42:
                    80:5c:06:cd:bb:a3:bb:39:81:d3:71:2b:69:65:ff:
                    14:ac:79:cd:2b:f5:82:bb:ee:92:cf:01:09:0e:34:
                    44:b7:d0:59:d3:ae:ae:b0:90:e6:79:14:30:f8:be:
                    d4:a2:3d:cc:c0:ae:46:b5:cf:7f:87:e3:d8:65:13:
                    b6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D1:6C:58:EA:C8:6D:F8:54:F2:92:12:34:99:04:AF:C5:B4:B8:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/87cd5c1a-b042-302a-8552-ca5efe3cb76c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.204.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:9d:51:69:25:13:01:64:a6:0e:30:86:c5:e5:67:3a:76:18:
         03:83:d9:4a:c1:b9:7f:9c:21:00:46:5d:67:4e:f0:0d:12:78:
         d2:df:8a:99:a4:e0:11:94:d7:e1:75:b8:0f:25:93:dc:ab:f3:
         af:19:9d:a6:ef:22:fe:ee:79:5d:02:d3:5d:3e:9d:02:db:41:
         e7:ba:20:83:48:fb:d6:52:12:3e:65:dc:1a:07:e1:47:20:7a:
         c3:42:0c:39:1c:31:cc:10:12:ea:9b:4c:89:c5:00:15:3a:dc:
         2e:ea:dc:2e:35:5a:fb:1e:c7:5f:30:13:f7:05:b7:33:3b:13:
         b2:96:db:ea:65:23:04:02:0b:73:e5:e2:e1:52:c6:7e:03:44:
         d9:b6:1b:4b:2e:e0:aa:0e:46:b6:74:7d:f0:7f:63:37:4e:d3:
         b9:e8:0e:8d:de:32:b6:bc:0d:5d:68:27:07:7c:72:ba:61:ff:
         bd:8e:e4:4c:f4:fb:a9:da:0a:83:de:e6:02:5d:f7:81:c7:e5:
         a4:69:59:35:66:cf:08:0d:d6:ba:67:68:2b:46:5c:34:b9:d3:
         12:1f:2b:7e:63:a7:c9:e6:34:29:ab:e1:50:28:bb:af:0b:b0:
         a9:9f:6f:d9:47:21:94:62:51:00:95:af:c0:bb:00:1f:9a:e1:
         ce:4c:0c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 02:40:41 2026 by rpki-client