Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/d7b18770-9450-3309-b5b9-6c314c1ca3c2.roa
File:                     d7b18770-9450-3309-b5b9-6c314c1ca3c2.roa (raw, json)
Hash identifier:          dbmKzOHsTvOT3GMFSGBs7tPrqKbOcPeufkjzvxvl29I=
Subject key identifier:   CA:B9:FA:D6:66:F5:7D:4B:26:1D:32:4C:0B:0B:3D:C3:FE:5D:6D:01
Certificate issuer:       /CN=7f9f70ac-2c51-4fbe-b73a-a81973e583e3
Certificate serial:       010D0C9F4328584EA6FD389B6F25699623B62A80
Authority key identifier: DC:8B:26:D0:11:03:66:6D:54:34:8D:33:2F:16:39:6E:4E:52:76:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/d7b18770-9450-3309-b5b9-6c314c1ca3c2.roa
Signing time:             Tue 28 Jul 2026 20:22:54 +0000
ROA not before:           Tue 28 Jul 2026 20:22:54 +0000
ROA not after:            Mon 26 Oct 2026 20:22:54 +0000
asID:                     395727
IP address blocks:        199.36.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a6:fd:38:9b:6f:25:69:96:23:b6:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f9f70ac-2c51-4fbe-b73a-a81973e583e3
        Validity
            Not Before: Jul 28 20:22:54 2026 GMT
            Not After : Oct 26 20:22:54 2026 GMT
        Subject: CN=9e194324-1a85-474d-9a8b-b54f4e3bcf9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a1:02:49:59:1a:cb:ca:cc:a4:e2:63:55:92:
                    06:81:ab:08:6c:96:3e:8a:11:6d:3d:dd:f5:82:11:
                    d1:fa:94:e7:16:8e:41:c8:1a:7d:78:4e:72:98:ce:
                    9e:8a:64:6a:d0:8f:89:85:78:d7:da:02:39:ad:04:
                    11:e8:5e:a3:e1:19:e6:e9:4a:1b:d3:7b:53:aa:d5:
                    fc:e4:40:c3:4a:8b:99:47:b2:5c:8c:a7:b3:58:d4:
                    0f:a8:0e:58:a6:8a:22:02:58:e5:0c:fc:9c:73:27:
                    29:6e:80:46:f8:10:f9:b5:ea:41:0d:62:85:23:0d:
                    e2:fb:b7:4a:c4:f5:d4:0f:f5:59:3d:94:fd:9c:d5:
                    6b:6d:6e:b9:5c:60:48:90:91:ef:6e:87:3a:09:a4:
                    0d:05:02:fb:1c:e4:4e:3e:7b:16:91:d5:49:83:cf:
                    f9:fc:28:9d:3b:c2:46:1b:be:b7:9f:d9:40:d1:9c:
                    a5:35:55:e9:88:d1:68:f4:dd:8c:e0:d5:1f:c6:bc:
                    eb:f7:7c:29:dd:3f:61:db:46:2a:79:91:31:12:de:
                    e1:b4:cb:94:11:07:b1:1b:46:b4:c6:81:4e:8c:04:
                    cd:d2:53:e0:63:eb:c2:85:23:c8:38:9a:ff:6c:3f:
                    62:9f:c8:0f:1a:e2:b0:7e:23:32:f4:48:23:dc:f5:
                    c0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B9:FA:D6:66:F5:7D:4B:26:1D:32:4C:0B:0B:3D:C3:FE:5D:6D:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/d7b18770-9450-3309-b5b9-6c314c1ca3c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.crl

            X509v3 Authority Key Identifier:
                keyid:DC:8B:26:D0:11:03:66:6D:54:34:8D:33:2F:16:39:6E:4E:52:76:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7f9f70ac-2c51-4fbe-b73a-a81973e583e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:cf:33:bd:34:32:f2:b2:33:e0:d5:73:b8:33:1c:eb:40:c9:
         90:27:66:6a:22:f1:57:e0:d3:13:7d:e9:3d:e0:a5:5b:e4:63:
         28:27:26:e4:e4:db:01:d7:10:64:42:05:ca:e7:9b:7b:ce:a3:
         c6:65:be:4c:97:df:77:44:0d:65:50:f5:49:2e:86:08:70:08:
         dc:33:dc:4b:0b:a6:e9:1b:78:3b:19:02:2f:a5:5d:5b:30:97:
         43:22:51:40:35:63:12:ce:77:ea:fb:86:07:18:cb:8c:b6:5e:
         ca:a9:5e:af:b7:89:e1:80:47:55:d4:22:13:41:83:b2:2b:57:
         d4:de:ad:ce:99:57:26:d4:4f:dd:c9:11:bb:98:9f:c0:bc:fe:
         ea:9a:dd:a9:80:c3:dc:f0:9c:d1:65:e2:b7:c9:9a:59:74:be:
         93:38:55:64:0f:44:1e:44:c2:c8:94:b4:19:f0:11:99:03:4c:
         e0:cf:c0:40:00:2c:a4:05:1d:1a:2f:27:10:a9:c5:ec:ef:0d:
         8d:5a:bc:db:ff:81:98:a3:47:97:66:d1:93:fa:a8:c8:63:5c:
         a2:81:73:8b:03:96:7a:83:0a:7b:01:bf:ee:42:33:1a:d1:fa:
         cf:4e:80:62:7b:18:98:36:f6:dc:0a:6a:54:1c:98:44:53:f8:
         8e:be:cb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 21:52:55 2026 by rpki-client