Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/8260418f-0a04-3d77-a711-ae67a5fdb9d7.roa
File:                     8260418f-0a04-3d77-a711-ae67a5fdb9d7.roa (raw, json)
Hash identifier:          VVFiX9mVC75t6iqz3ArWg7IfTdKexSfCiBZ9ECJST/8=
Subject key identifier:   F4:3C:A8:15:88:3E:75:D7:F9:88:C7:98:D5:6A:8B:2E:B2:37:AF:BF
Certificate issuer:       /CN=95437874-24a3-4971-a87b-95b645e257bb
Certificate serial:       010D0C9F4328584EA7919E51007EE41D90C5D100
Authority key identifier: 0D:9A:58:69:BC:33:C0:D1:95:9C:3D:00:B9:00:3B:B9:43:8A:4E:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/8260418f-0a04-3d77-a711-ae67a5fdb9d7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36556
IP address blocks:        207.22.40.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/95437874-24a3-4971-a87b-95b645e257bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/95437874-24a3-4971-a87b-95b645e257bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:9e:51:00:7e:e4:1d:90:c5:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95437874-24a3-4971-a87b-95b645e257bb
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ad915555-5c7b-47f1-a7cc-e891bbcca039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fd:27:d5:cd:20:dd:9c:c9:0f:9e:6e:11:a8:
                    e4:10:59:9a:23:c8:77:65:f3:4f:40:a6:33:a6:e6:
                    1b:30:2e:89:8c:ac:f6:21:32:31:d7:f2:ec:62:c9:
                    bd:a5:c6:7e:c3:79:10:8b:8b:33:ca:10:bd:bb:7e:
                    cf:21:25:2c:a1:3b:05:d2:8f:aa:43:6a:15:2e:d9:
                    bd:4e:d9:22:d6:52:5b:13:82:84:28:5f:fd:cf:a6:
                    14:de:db:45:30:60:9d:d0:35:19:3c:72:f0:2a:f1:
                    60:d9:c8:86:cd:11:86:82:1d:0a:b2:06:27:5c:ee:
                    f5:db:68:3d:28:70:8f:65:3c:9f:95:34:79:b8:94:
                    92:ca:07:c4:0c:d8:d8:bd:e0:a6:03:71:7b:46:85:
                    e5:31:e4:be:c6:f4:47:14:d8:7a:8f:f2:02:3a:9f:
                    62:62:e3:e6:04:81:f7:0b:4e:2a:78:98:f1:ab:f9:
                    bc:d4:0a:5f:55:f4:ef:ae:08:8c:0f:a2:f3:30:8b:
                    a8:0c:d3:12:87:ac:b3:25:91:e9:0d:69:e8:ce:02:
                    36:4e:2c:91:68:6a:fa:11:89:4c:68:9b:91:40:19:
                    06:07:cb:7a:36:b6:17:3b:ee:95:4a:73:7b:91:f2:
                    7b:a0:0f:70:39:f4:58:48:cf:3f:69:f0:a4:70:23:
                    56:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:3C:A8:15:88:3E:75:D7:F9:88:C7:98:D5:6A:8B:2E:B2:37:AF:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/8260418f-0a04-3d77-a711-ae67a5fdb9d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/95437874-24a3-4971-a87b-95b645e257bb.crl

            X509v3 Authority Key Identifier:
                keyid:0D:9A:58:69:BC:33:C0:D1:95:9C:3D:00:B9:00:3B:B9:43:8A:4E:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.22.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:bc:4e:16:ad:f0:19:21:94:f2:7c:65:21:20:3d:ef:f1:02:
         71:fb:43:09:e5:f9:ac:44:73:df:ea:50:ae:34:b3:90:4e:c7:
         7f:05:17:d4:dc:0e:f1:f3:5f:43:c2:a0:b5:68:6c:3c:27:5f:
         c1:33:13:5a:85:0d:47:e8:0f:d7:76:1b:a9:1d:e5:5b:98:f5:
         63:76:d7:a7:97:44:e3:47:8e:91:d5:ee:ea:b8:e4:af:89:83:
         41:cd:6d:94:31:e3:da:c8:f6:cd:5b:aa:53:89:c6:ab:85:41:
         ac:00:8e:5b:23:82:3f:cb:4b:5b:4b:a2:44:a5:56:ef:c6:87:
         48:3f:d1:08:bb:17:bc:c2:66:42:06:57:9a:64:25:fa:cf:88:
         10:12:86:e9:e3:f7:9d:65:c1:06:d2:fa:72:18:83:6e:c5:20:
         16:ac:71:a9:90:16:ef:82:2c:87:31:a7:8a:30:48:6f:a9:c6:
         94:b3:1e:14:9d:a9:cc:5b:37:37:2b:12:77:a2:16:74:61:2b:
         dd:d1:c2:79:f7:25:72:d7:d1:4d:cc:70:93:b1:7d:da:ff:7d:
         19:72:2b:66:3d:33:45:0f:a7:bf:45:49:4e:de:43:90:c1:5a:
         af:57:5e:0d:51:eb:a8:52:de:29:7a:eb:1a:e3:b0:cd:4c:ec:
         bb:e8:e2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:02:07 2026 by rpki-client