Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/375f4b6f-7aff-312c-91c5-c840753e7b65.roa
File:                     375f4b6f-7aff-312c-91c5-c840753e7b65.roa (raw, json)
Hash identifier:          gUHMRu3HDpJhIkdQM2QO2f05x1EZe4WtsnU0Yeghu7k=
Subject key identifier:   E9:7B:1E:1E:62:84:67:B7:62:AD:1E:2C:7A:FA:0D:40:29:64:4A:D8
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584D1D204C075D472CE2DD668B00
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/375f4b6f-7aff-312c-91c5-c840753e7b65.roa
Signing time:             Mon 09 Mar 2026 18:25:05 +0000
ROA not before:           Mon 09 Mar 2026 18:25:05 +0000
ROA not after:            Sun 07 Jun 2026 18:25:05 +0000
asID:                     22652
IP address blocks:        207.253.204.0/22 maxlen: 22
                          207.253.208.0/22 maxlen: 22
                          216.113.70.0/23 maxlen: 23
                          216.113.78.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1d:20:4c:07:5d:47:2c:e2:dd:66:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Mar  9 18:25:05 2026 GMT
            Not After : Jun  7 18:25:05 2026 GMT
        Subject: CN=84372e91-503e-4c16-90f8-c8fa931a3acb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f6:20:e1:bf:16:60:01:ab:e5:0e:e2:64:cd:
                    74:e1:03:ad:c6:1c:a1:c3:bd:60:6d:25:bd:2b:4b:
                    82:ad:31:d5:df:ee:5a:f6:e2:1f:08:92:8f:26:93:
                    3f:82:7e:e3:96:4e:84:aa:2d:72:a6:9e:c1:c5:9a:
                    43:ca:6f:6a:56:85:f8:1d:85:06:6c:81:12:eb:d8:
                    8e:e6:c4:b9:41:4b:72:39:4e:20:39:42:85:ef:7f:
                    d7:7a:65:4d:e9:66:0f:da:70:99:88:ab:40:6c:73:
                    a4:68:eb:fb:31:07:3a:a7:85:25:0c:18:bd:58:f9:
                    71:95:2c:a9:32:7d:83:35:fe:38:8c:4f:b8:f1:e6:
                    26:53:bb:3c:54:5d:b1:a7:aa:b6:28:6c:8f:f3:d5:
                    8f:63:6f:a1:ee:cf:b7:28:ad:4a:93:1a:11:68:25:
                    e1:f5:f9:a5:88:65:71:e6:6c:c1:a3:8a:b4:5e:84:
                    b2:52:3f:33:8b:7a:a1:a3:82:1a:2a:ab:ce:4e:eb:
                    4a:13:1b:74:d1:9c:b7:c6:6c:db:08:ea:83:d1:5e:
                    0c:20:d2:88:08:07:be:01:dd:8f:bd:62:ad:d1:ab:
                    aa:ac:a6:91:40:8f:65:c5:a5:c0:c6:81:d2:c4:6e:
                    3f:48:00:de:72:f0:a0:d8:77:35:82:47:d9:24:d9:
                    56:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:7B:1E:1E:62:84:67:B7:62:AD:1E:2C:7A:FA:0D:40:29:64:4A:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/375f4b6f-7aff-312c-91c5-c840753e7b65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.253.204.0-207.253.211.255
                  216.113.70.0/23
                  216.113.78.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:9d:49:90:4e:a6:9c:6b:61:56:b5:d0:57:e5:fe:06:bc:10:
         4a:17:0b:eb:52:24:9c:00:08:8f:2f:cc:bd:0b:8d:e6:a4:c5:
         c0:d6:ac:10:96:75:7c:87:bd:f7:cd:b8:9c:a6:dc:e2:50:1c:
         9f:d2:7d:e9:c6:d1:54:15:29:78:d9:32:5f:e6:ea:39:be:73:
         14:46:90:a0:f9:cf:c0:2d:90:96:2f:2d:04:65:64:86:99:67:
         c9:53:0b:14:3e:d9:f6:3b:18:c2:57:78:04:e5:25:fb:61:fd:
         66:67:af:84:8b:40:2b:0d:68:57:7f:91:21:a1:fe:26:4c:56:
         cb:81:b2:f1:1c:6c:dd:92:ff:e4:87:a8:66:a5:6f:71:0f:43:
         6c:a1:08:c5:e1:24:5f:fa:3c:a7:8c:9e:e4:6d:73:b8:89:42:
         18:3b:61:8e:40:32:5f:82:3d:ca:5a:52:90:5f:d5:e2:ac:02:
         e2:bb:7d:28:36:a1:81:b1:29:0b:e2:c9:cd:08:2c:5d:cd:69:
         eb:43:03:b0:a5:6d:75:37:28:c8:d5:f7:35:4a:e7:be:fd:cc:
         f3:fb:32:ee:fd:62:55:07:a9:96:d1:d1:4c:59:0b:f3:07:67:
         52:f6:d5:fc:62:57:8d:9b:bd:75:04:8e:13:40:eb:ad:1b:58:
         0c:13:93:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 10:06:09 2026 by rpki-client