Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/0ef086cf-516b-31fd-b0fa-1122e8b749cd.roa
File:                     0ef086cf-516b-31fd-b0fa-1122e8b749cd.roa (raw, json)
Hash identifier:          ahJdFY4Y7y1w2yW1GT/6qXGUNigWs0tD4z2g3mK17OM=
Subject key identifier:   55:F3:6C:A7:5B:50:8C:93:29:74:5D:57:70:4B:4F:EB:86:FF:E0:EA
Certificate issuer:       /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial:       010D0C9F4328584E6B0A1E0F4EE89C86C943D180
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/0ef086cf-516b-31fd-b0fa-1122e8b749cd.roa
Signing time:             Tue 07 Jul 2026 09:00:12 +0000
ROA not before:           Tue 07 Jul 2026 09:00:12 +0000
ROA not after:            Mon 05 Oct 2026 09:00:12 +0000
asID:                     35946
IP address blocks:        207.45.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6b:0a:1e:0f:4e:e8:9c:86:c9:43:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
        Validity
            Not Before: Jul  7 09:00:12 2026 GMT
            Not After : Oct  5 09:00:12 2026 GMT
        Subject: CN=a84d8b39-f75a-4feb-9191-ef9fdc65c1c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:08:ae:e2:ae:a8:84:11:0b:c5:b6:6f:0c:07:
                    1b:71:a9:8f:10:67:dd:c4:b8:a8:88:fa:2b:1c:01:
                    be:7c:ff:d9:da:2e:76:1b:d4:eb:3f:d7:68:d0:26:
                    c6:82:5f:7c:8f:a5:87:0e:02:67:7a:3f:ac:c9:aa:
                    5a:82:2a:23:8f:15:3d:7c:a4:99:86:d2:56:f8:0b:
                    25:e8:c3:a4:82:60:b9:4d:60:c7:df:23:66:5e:4e:
                    dc:46:77:8c:c0:b1:1b:a3:b8:ee:61:68:a8:f2:6e:
                    de:f7:7b:5f:90:cf:b8:8b:22:f7:b1:29:bb:d9:56:
                    8b:97:f4:ce:1b:ad:13:f6:6b:36:cf:d1:ce:d6:1d:
                    f3:90:12:73:3d:2f:87:2e:d7:c8:9b:3e:86:16:e3:
                    ec:69:d5:6d:74:d8:e2:4f:2b:f4:ab:be:15:86:b1:
                    0a:34:e8:1e:b4:9b:99:0c:87:be:ee:3f:cc:bb:85:
                    6d:ab:18:16:87:10:d6:09:ac:92:59:28:41:4d:ff:
                    7d:20:36:c1:f3:8d:7b:e5:76:10:2d:a2:e8:cf:41:
                    45:82:8c:b3:67:da:57:0f:71:bd:4f:3d:97:20:a5:
                    f5:ce:70:69:0b:9f:46:d1:2b:8e:84:10:c1:2d:b7:
                    6c:7c:92:0a:3e:5c:cf:73:c0:72:8a:ab:75:b6:c6:
                    61:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F3:6C:A7:5B:50:8C:93:29:74:5D:57:70:4B:4F:EB:86:FF:E0:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/0ef086cf-516b-31fd-b0fa-1122e8b749cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl

            X509v3 Authority Key Identifier:
                keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.45.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:54:6b:33:40:f7:a5:98:18:14:2d:58:da:13:ef:12:97:bc:
         26:f7:11:08:2f:8f:8d:7b:ac:4d:ec:fe:67:a1:cc:d3:90:f0:
         32:6e:41:bb:f6:cf:0f:d2:d3:0f:ae:3d:39:bc:3d:e0:1c:77:
         78:a2:d1:9c:ab:03:ca:29:e0:28:f6:98:18:38:ec:96:3a:d6:
         52:82:55:91:f8:63:42:95:52:ce:d8:5b:52:af:ab:03:7b:56:
         7b:31:a5:7e:5f:e7:f5:8b:f7:a7:6a:83:52:1b:50:72:46:d6:
         88:1b:10:c9:4a:43:7b:4a:ae:98:0a:9e:7a:bf:ff:a9:0e:43:
         52:42:2e:2f:89:a3:23:4c:6e:f6:ef:ae:92:4d:57:2a:f1:b8:
         4e:c2:88:0e:a9:05:92:bf:c4:b5:9f:d2:73:a9:43:2e:5c:1c:
         22:fa:99:17:65:5d:43:e0:3c:75:2b:e6:18:4d:28:90:9f:9a:
         9d:61:1c:bc:42:f1:88:e7:8b:4a:d4:d8:b0:90:64:57:73:22:
         9e:7c:2e:a3:d4:9d:e8:28:3d:ab:24:8f:53:37:06:c3:25:45:
         f2:b6:12:40:4e:2e:fb:06:55:4e:aa:85:8e:c5:ef:47:f5:e4:
         76:f3:e8:ce:13:4e:cc:58:d0:67:d5:ab:3d:5a:a6:88:9f:d9:
         c8:a6:dd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:07:32 2026 by rpki-client