Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/45e7e3b8-7742-3c7c-b902-36e89aeba945.roa
File:                     45e7e3b8-7742-3c7c-b902-36e89aeba945.roa (raw, json)
Hash identifier:          +odKXO0C4dCYPB2k0wkTlfPqtCux1z1xoBi3IozVfaY=
Subject key identifier:   A2:7F:69:14:6C:70:4E:59:80:17:DF:74:80:41:0F:91:11:7A:23:4D
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584EAD1C4484CCAD38A043A18F80
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/45e7e3b8-7742-3c7c-b902-36e89aeba945.roa
Signing time:             Fri 31 Jul 2026 01:00:11 +0000
ROA not before:           Fri 31 Jul 2026 01:00:11 +0000
ROA not after:            Thu 29 Oct 2026 01:00:11 +0000
asID:                     22652
IP address blocks:        208.94.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ad:1c:44:84:cc:ad:38:a0:43:a1:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Jul 31 01:00:11 2026 GMT
            Not After : Oct 29 01:00:11 2026 GMT
        Subject: CN=07438fb7-db64-4a29-918f-4f14c90c8240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c8:1b:fd:23:e1:b7:69:d0:83:cc:38:ee:5a:
                    12:52:fd:48:33:6a:4a:03:14:79:85:11:23:e1:eb:
                    45:87:36:32:0e:4b:b1:e6:b0:be:16:d3:ce:9a:fc:
                    de:fb:47:7a:59:89:3d:6a:bd:64:15:5e:a1:5c:87:
                    33:78:bd:4b:bc:ff:60:6e:0d:29:8a:69:1e:34:ba:
                    57:ad:c5:0d:b5:9d:b5:f5:5b:44:79:a2:fe:72:c2:
                    f9:93:99:50:7f:de:23:ca:50:63:97:6a:53:06:26:
                    64:f9:a9:f7:d7:e0:a7:0c:8a:49:0d:2a:c3:73:be:
                    55:9d:19:50:46:a8:39:0d:a2:fd:27:02:75:f5:4a:
                    a8:8f:8e:d8:d0:90:a7:c1:49:22:d3:a3:11:f4:e8:
                    c6:6f:f5:5e:19:b6:e1:4d:1d:e5:48:5f:b8:3d:af:
                    b2:50:01:7f:3d:c3:b4:df:42:fd:e5:31:d8:41:63:
                    36:f5:d4:9b:83:f8:fb:49:7a:8c:1c:a9:8d:ec:23:
                    fe:9f:01:eb:0f:84:b5:b3:27:3a:ee:59:ef:1c:75:
                    4f:6c:7b:d6:24:d3:d8:27:ea:1b:cf:d5:fa:2a:2d:
                    fb:e2:eb:dc:47:c7:4a:33:6b:bd:f3:15:0a:a1:76:
                    6c:57:6b:be:6d:38:87:f5:4a:26:64:fa:33:a2:b6:
                    02:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:7F:69:14:6C:70:4E:59:80:17:DF:74:80:41:0F:91:11:7A:23:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/45e7e3b8-7742-3c7c-b902-36e89aeba945.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.94.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:dc:6d:cb:ce:4e:3f:6b:1a:cc:f6:cc:a1:92:90:61:f9:70:
         86:c8:db:78:a0:14:87:58:6b:00:5f:00:22:f0:f5:a4:7d:79:
         b4:ae:36:f8:c8:67:a1:32:a7:12:47:25:16:77:0a:38:c3:64:
         31:ca:c6:df:01:2a:3c:fc:dd:72:09:89:1d:3c:bd:89:b1:6f:
         3d:ad:9a:15:7c:3d:ef:85:e7:10:e9:15:9e:bc:09:a8:92:51:
         41:cb:34:fd:3b:71:a2:de:1f:7a:1f:02:28:65:21:1b:00:8d:
         90:26:be:25:c1:9c:f8:2d:6a:60:15:25:e5:55:a4:f9:d5:02:
         06:d2:f5:ee:d6:90:31:6d:71:a3:9b:53:9c:51:18:6c:9b:fc:
         b5:88:5c:c4:ee:84:8d:fb:2a:7c:80:3c:f9:a0:e7:bf:82:c9:
         67:7f:9b:4b:d3:fa:b5:14:12:62:0c:cc:8e:1e:4d:a6:51:9c:
         4f:fe:87:81:80:50:49:30:89:00:29:02:ac:78:d4:db:bb:2f:
         eb:d3:a6:8a:5c:d6:8a:59:a8:25:72:da:8f:4f:66:ea:2d:2e:
         90:0f:29:76:20:0b:9d:cb:0b:ee:0a:97:20:9d:15:04:8b:5a:
         76:c9:c7:03:f1:6a:2f:23:0b:58:75:4c:8e:4c:48:d0:de:27:
         23:60:c7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 22:37:25 2026 by rpki-client