Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622/f2d4c297-8283-3225-9709-7307bf5ce1fb.roa
File:                     f2d4c297-8283-3225-9709-7307bf5ce1fb.roa (raw, json)
Hash identifier:          sTTl+DE7oWucI7Ge/wP+Y+RsXMynECJcwWnQuyhqSAM=
Subject key identifier:   F2:49:00:D0:D7:C6:55:10:B7:30:DA:17:08:56:98:0D:66:38:7C:2D
Certificate issuer:       /CN=7ce16e2f-96b7-44ff-9c53-9dde17e48622
Certificate serial:       010D0C9F4328584E4559EE8B894DBE8F042ADE80
Authority key identifier: C7:2A:26:77:20:80:EB:41:DB:92:8B:92:97:D5:F8:AB:EA:38:1A:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622/f2d4c297-8283-3225-9709-7307bf5ce1fb.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     16436
IP address blocks:        66.187.12.0/23 maxlen: 23
                          207.174.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622/7ce16e2f-96b7-44ff-9c53-9dde17e48622.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622/7ce16e2f-96b7-44ff-9c53-9dde17e48622.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:ee:8b:89:4d:be:8f:04:2a:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ce16e2f-96b7-44ff-9c53-9dde17e48622
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=279ec4b1-09fb-4eec-ab47-aed0f0deb14b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4c:c3:89:f4:de:26:01:0c:40:f1:7c:a0:c8:
                    25:0a:3c:4d:f8:9e:7e:8b:e8:d2:e2:97:e8:b8:70:
                    09:c0:62:77:a0:e3:28:71:6c:b7:8c:b0:da:ac:27:
                    ad:12:82:48:73:42:14:85:e2:87:9f:88:bc:5d:bb:
                    2a:60:63:88:b6:26:2e:03:b8:38:9e:93:1a:5f:fa:
                    90:e4:d1:dd:ad:87:49:8d:1b:5d:c9:5f:af:c7:4b:
                    86:35:b6:71:6c:e4:dd:3c:8f:bd:d0:75:9c:63:c7:
                    a0:d5:8e:c3:8b:b1:b7:e4:64:7c:8b:7c:d1:90:55:
                    99:a0:84:54:f5:58:ea:83:61:2d:03:be:f7:b5:8d:
                    f3:85:b9:1c:c2:32:18:d9:80:1f:8b:c4:53:8c:9a:
                    b4:5c:02:73:85:b8:38:14:67:69:d4:f8:8e:cf:7d:
                    7c:05:c1:cd:0c:62:1c:08:34:50:91:09:fe:8c:9d:
                    6b:97:df:3f:83:28:35:5b:ee:09:28:fb:38:ee:29:
                    44:60:34:3d:67:49:73:3e:c7:6d:6f:6f:28:f4:30:
                    7b:d4:bd:05:64:54:7c:a4:aa:16:0f:f9:c1:a8:c6:
                    9b:22:66:22:d7:77:a4:24:61:1e:bb:4d:4b:8e:cc:
                    06:ed:76:7e:22:df:55:98:5e:0e:70:ee:81:ba:08:
                    f7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:49:00:D0:D7:C6:55:10:B7:30:DA:17:08:56:98:0D:66:38:7C:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622/f2d4c297-8283-3225-9709-7307bf5ce1fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622/7ce16e2f-96b7-44ff-9c53-9dde17e48622.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2A:26:77:20:80:EB:41:DB:92:8B:92:97:D5:F8:AB:EA:38:1A:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7ce16e2f-96b7-44ff-9c53-9dde17e48622.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.187.12.0/23
                  207.174.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:e6:23:70:21:70:b5:3d:c1:65:89:8b:88:5b:97:cf:e4:30:
         63:29:21:74:d0:69:40:65:1b:31:7c:8d:26:73:19:90:7d:bb:
         7b:e8:25:4a:6f:c9:1d:ee:9d:92:f2:f1:03:71:15:d7:05:4d:
         91:ac:64:92:28:f5:c1:eb:66:e4:77:ab:6f:9c:bd:c7:47:fb:
         47:85:9e:92:b2:ce:6b:ec:77:91:24:fd:f4:34:4f:c3:42:96:
         06:05:39:f5:a2:7e:b4:63:ce:55:23:44:d7:d6:e8:fd:c4:1c:
         0f:71:7a:3c:cf:be:f2:1e:91:a5:5b:40:69:fb:0e:ed:55:a4:
         ab:e1:7e:ee:64:71:8d:9a:95:12:9a:53:32:a0:84:9d:d2:ea:
         ca:c4:52:e7:aa:31:ce:fd:2e:62:38:34:e4:46:0a:69:69:fd:
         dc:12:76:0b:aa:52:0f:97:02:d0:64:78:13:32:c0:c6:21:b9:
         21:c4:27:55:28:45:a0:cb:ab:b8:74:cb:55:fc:66:0b:57:e4:
         2b:61:73:93:ae:eb:54:7e:eb:d8:fd:f3:21:99:da:cf:51:8c:
         18:1a:a8:fb:f0:0d:d5:0a:13:30:ac:98:49:6c:e7:e2:c2:ce:
         2c:29:08:fb:3b:45:24:a0:ec:c2:75:d9:0a:87:83:50:e7:eb:
         3f:e3:29:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 16 20:57:12 2026 by rpki-client