Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/71f0bd4f-4526-3e00-a536-aa2659be1ef2.roa
File:                     71f0bd4f-4526-3e00-a536-aa2659be1ef2.roa (raw, json)
Hash identifier:          4SB1jIU9wWcr09cCw0vGG3GXLT9FvaDDTJli+LUyV4E=
Subject key identifier:   F5:5C:92:29:81:48:4A:F3:E9:FC:26:EB:A4:27:50:8C:B5:F8:6B:D3
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584EA78FE405734CB8FBFF3B5400
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/71f0bd4f-4526-3e00-a536-aa2659be1ef2.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     395075
IP address blocks:        207.253.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:e4:05:73:4c:b8:fb:ff:3b:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0e43b231-9331-4186-a3a1-b1055195dbe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d3:8a:cc:c4:66:37:bd:c5:fc:1a:4c:56:81:
                    b5:61:eb:5c:ac:20:8a:25:1e:fd:08:d7:cd:96:c5:
                    3a:05:ec:67:1d:8e:35:d8:2e:b5:5d:3a:d8:9b:b3:
                    8e:32:9c:d3:52:09:c1:1d:67:87:ee:3f:20:8c:aa:
                    e3:7a:82:a4:9a:39:40:1e:d6:a0:86:99:79:a7:2a:
                    aa:9e:7d:8e:a3:58:b8:c6:3d:bf:1c:65:27:43:45:
                    80:2e:62:12:43:ad:95:92:cf:f2:05:5a:e0:10:3c:
                    05:00:d8:4c:0d:65:a2:76:b2:c8:ff:bc:6a:7a:44:
                    90:7e:ad:4b:94:a2:1a:98:14:f0:62:d8:1b:a4:95:
                    a1:e9:c5:d0:8e:39:33:cf:60:d7:34:f5:22:e2:a3:
                    6a:af:bb:37:6b:64:64:39:fd:f2:77:24:d4:92:ff:
                    34:0e:1f:1c:15:96:6e:ec:23:ce:3c:74:39:af:b5:
                    90:67:06:49:f9:75:06:34:5d:15:4c:d7:6d:98:3f:
                    aa:62:d4:1c:b7:e8:6c:e7:c2:48:e1:07:56:c0:70:
                    2d:e5:a2:f8:c6:ac:dd:57:fa:a1:3e:6c:d3:5a:b2:
                    dd:c5:53:2a:92:3e:ad:84:cb:4f:f3:b4:06:c5:4e:
                    70:57:a9:38:54:cf:86:ba:dc:00:9d:e6:5f:f8:ad:
                    ea:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:5C:92:29:81:48:4A:F3:E9:FC:26:EB:A4:27:50:8C:B5:F8:6B:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/71f0bd4f-4526-3e00-a536-aa2659be1ef2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.253.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:e9:6d:5c:b9:4e:a0:de:f0:0b:3c:52:a5:09:16:ad:1a:9a:
         1d:55:f1:83:d5:b1:c1:c0:ed:4f:c7:54:18:8b:7b:d7:77:b0:
         84:44:ed:01:62:bf:36:81:64:c3:36:b5:de:e7:d1:b7:15:bc:
         4f:0c:7e:bd:5f:2f:a5:c2:74:ce:b5:71:6a:de:c9:9a:18:44:
         a4:c5:1e:97:1d:e8:07:aa:65:a2:7c:8e:d6:58:1f:7f:b3:80:
         1a:4a:49:3c:c2:b8:be:d1:cc:84:66:c2:76:93:91:e8:8c:ea:
         32:d4:16:10:27:5b:e7:b2:1f:6f:4c:65:7b:24:39:28:3e:78:
         d6:6f:43:f2:c9:c6:0d:87:13:e8:05:47:88:99:56:5e:ce:20:
         db:4d:3a:40:99:5e:49:b1:8c:b4:6d:61:11:4b:8b:72:41:a5:
         49:c2:dd:a8:9d:bb:f2:c6:41:5b:6c:71:35:e9:1a:84:6e:8b:
         b9:9d:74:9a:bf:ff:f4:d1:a2:e2:73:3a:74:e1:b2:ce:eb:64:
         c2:18:b3:22:fb:ca:ed:8f:c1:3b:21:2e:f9:db:4e:81:98:95:
         5d:5f:d4:97:0a:94:6a:f7:1f:47:28:e3:79:a7:29:92:bc:6b:
         2b:33:8c:b1:c0:09:0b:3f:24:7f:c7:34:40:64:db:d0:0f:56:
         ba:81:47:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 23:53:44 2026 by rpki-client