Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/86181317-6bc3-3829-8e82-a5679c723f33.roa
File:                     86181317-6bc3-3829-8e82-a5679c723f33.roa (raw, json)
Hash identifier:          rxxzS0P/215cYcuzh9b6PFUZ7KYNZ9CWCTNL+sEr+4Q=
Subject key identifier:   8C:D6:AD:32:BA:86:CF:70:BE:51:25:6C:F3:7A:FA:2F:AB:3B:C1:63
Certificate issuer:       /CN=fd61a214-d867-444e-b2f4-ca291d4c4419
Certificate serial:       010D0C9F4328584ECE9C77E9A3CC1320FA88C240
Authority key identifier: 92:CB:CE:9B:B2:CE:2B:F0:06:3A:CF:34:D3:E3:A3:0F:08:6F:73:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/86181317-6bc3-3829-8e82-a5679c723f33.roa
Signing time:             Wed 12 Aug 2026 01:00:11 +0000
ROA not before:           Wed 12 Aug 2026 01:00:11 +0000
ROA not after:            Tue 10 Nov 2026 02:00:11 +0000
asID:                     834
IP address blocks:        207.167.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ce:9c:77:e9:a3:cc:13:20:fa:88:c2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd61a214-d867-444e-b2f4-ca291d4c4419
        Validity
            Not Before: Aug 12 01:00:11 2026 GMT
            Not After : Nov 10 02:00:11 2026 GMT
        Subject: CN=c84ea42f-d944-4419-81f3-780eeda37d41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:66:6c:ae:d8:69:53:5d:89:07:ca:ae:57:be:
                    e9:4f:ce:0f:14:ff:61:a9:35:13:9d:4f:85:b8:6c:
                    20:b6:e3:20:6c:49:55:06:10:d0:03:c9:8d:6a:c3:
                    26:f0:26:3b:92:97:6d:83:77:e2:a5:93:ff:3e:6f:
                    05:a0:80:c9:30:ca:f6:5a:4d:5b:c0:52:5c:5d:b8:
                    99:45:ec:19:53:f9:86:d5:33:00:a4:51:1e:60:2e:
                    d4:39:29:c5:68:37:a7:c6:ee:40:2e:08:63:b5:96:
                    14:4f:28:c6:c7:5f:d1:c0:58:36:82:dc:85:9f:fb:
                    e3:4c:12:29:59:16:11:74:57:ac:1b:77:c4:b9:44:
                    06:0f:36:fe:9a:38:2f:95:e7:df:b0:be:dc:3a:5e:
                    ee:da:6f:74:3c:62:c9:e3:70:fa:1c:13:f2:ea:b0:
                    da:aa:90:d3:f2:ef:d6:ad:63:4c:5f:2c:7c:58:5f:
                    8a:33:72:ae:4a:ad:5e:72:dd:48:a6:3d:63:d6:40:
                    e2:0d:03:a3:b0:cf:fb:8e:30:fd:a5:0f:99:13:c1:
                    b1:65:e5:17:7b:d5:07:48:86:a6:d4:47:c9:e6:54:
                    de:31:c1:fc:33:52:b0:c9:fb:98:bd:14:fc:bc:b8:
                    87:80:42:ba:1f:31:9c:e1:9b:0e:47:d6:78:d6:97:
                    b7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D6:AD:32:BA:86:CF:70:BE:51:25:6C:F3:7A:FA:2F:AB:3B:C1:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/86181317-6bc3-3829-8e82-a5679c723f33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419/fd61a214-d867-444e-b2f4-ca291d4c4419.crl

            X509v3 Authority Key Identifier:
                keyid:92:CB:CE:9B:B2:CE:2B:F0:06:3A:CF:34:D3:E3:A3:0F:08:6F:73:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fd61a214-d867-444e-b2f4-ca291d4c4419.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.167.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:7c:38:c8:cc:f3:87:f3:ff:28:5d:4f:7f:1a:78:3c:12:1b:
         70:b8:a3:07:34:e3:45:96:a6:34:7b:ab:cc:d1:43:c4:be:90:
         37:a1:7d:18:ff:88:d0:f7:35:7c:a9:56:ff:5c:8e:35:d9:04:
         e6:33:50:14:c4:68:ae:02:d1:be:0d:44:59:4b:e4:48:b2:5d:
         82:a2:9b:58:e9:8f:75:be:09:9e:4a:df:c5:da:ed:4b:ee:9f:
         d4:62:39:60:a4:19:cc:f3:d3:d3:45:19:2c:f8:db:5e:60:3c:
         28:e4:cb:c2:f9:f8:a1:52:01:46:18:b1:19:72:df:2a:f3:e7:
         07:1b:1e:6a:90:d6:9c:73:aa:30:e8:04:a1:d6:17:8a:74:a5:
         25:70:1d:65:14:4b:38:7b:ba:75:1d:8b:36:f7:7f:3e:f0:4a:
         3e:2c:d8:4e:bf:65:6d:a7:43:76:7a:14:36:7c:0c:3b:ea:2c:
         88:d4:2b:6d:64:09:30:11:7a:07:ab:68:ac:f3:6f:00:b0:66:
         80:f9:c3:60:92:2b:63:81:80:a5:7f:6f:4e:79:c2:f4:a7:3f:
         72:9c:49:ab:7f:4c:9d:a7:4a:63:d0:30:e5:aa:1f:42:dd:62:
         32:dc:83:d1:49:61:4d:10:43:a5:97:a9:2c:fc:85:c5:b8:2f:
         23:73:60:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:21:09 2026 by rpki-client