Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a/200332e9-4687-3e0c-a256-5908fe3b00a7.roa
File:                     200332e9-4687-3e0c-a256-5908fe3b00a7.roa (raw, json)
Hash identifier:          ROYiAY+NDm396f4YcNYMEvdJiMprKf4HjIT96kLExv0=
Subject key identifier:   D5:33:95:4F:4A:2A:27:75:14:BF:92:87:43:67:DD:86:8C:9A:85:92
Certificate issuer:       /CN=826ab4ee-b6aa-4222-ae26-8bc58c9b742a
Certificate serial:       010D0C9F4328584F9BCDF5188957168A7F754CB8
Authority key identifier: 5B:7C:6C:55:80:AC:19:EC:C0:BF:7D:79:D4:2C:EF:DF:2D:B7:C1:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a/200332e9-4687-3e0c-a256-5908fe3b00a7.roa
Signing time:             Sat 24 Oct 2026 13:00:12 +0000
ROA not before:           Sat 24 Oct 2026 13:00:12 +0000
ROA not after:            Fri 22 Jan 2027 14:00:12 +0000
asID:                     11700
IP address blocks:        204.225.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a/826ab4ee-b6aa-4222-ae26-8bc58c9b742a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a/826ab4ee-b6aa-4222-ae26-8bc58c9b742a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9b:cd:f5:18:89:57:16:8a:7f:75:4c:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=826ab4ee-b6aa-4222-ae26-8bc58c9b742a
        Validity
            Not Before: Oct 24 13:00:12 2026 GMT
            Not After : Jan 22 14:00:12 2027 GMT
        Subject: CN=0e3d3271-ca4d-41db-b405-42af2a95e855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:97:04:48:b2:41:b3:39:9f:3c:de:5c:fe:64:
                    e5:7c:47:ce:f6:f1:8d:03:ee:5e:2d:43:60:74:f2:
                    90:85:07:73:1a:3d:d5:df:97:66:3d:34:88:82:94:
                    a8:db:b2:89:86:1e:d0:c7:f6:b5:41:6a:de:9c:d8:
                    1b:e0:28:14:f2:ee:f7:6d:1b:cd:33:86:70:af:e0:
                    21:ce:c5:16:b5:2e:ae:2f:6b:f3:78:5c:bf:09:64:
                    c1:29:2d:01:48:c3:df:07:e3:6f:c6:c5:7b:3c:1a:
                    83:45:16:ee:da:30:cb:cf:dd:33:c2:fe:db:28:08:
                    82:9b:d2:35:04:2b:12:0f:b3:03:7e:61:52:25:fb:
                    ca:28:e2:d8:bd:0b:99:5e:72:db:ad:78:11:ca:0b:
                    b4:db:af:c4:ac:5e:bc:44:3a:24:50:f0:6d:57:c6:
                    43:7a:a2:d6:04:01:c7:4a:65:2b:5a:a9:02:12:f8:
                    60:36:64:07:69:d8:78:15:84:5e:8b:e1:28:7c:10:
                    05:9b:a9:a9:db:31:47:f3:32:39:c0:26:04:b6:8a:
                    c4:70:84:27:e1:c6:51:98:f1:c8:65:1b:b8:b2:e0:
                    7e:44:06:88:48:7f:84:d7:b3:27:da:0d:57:18:74:
                    f3:23:39:6e:8f:23:ec:38:0d:e6:31:29:8a:b5:2d:
                    a2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:33:95:4F:4A:2A:27:75:14:BF:92:87:43:67:DD:86:8C:9A:85:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a/200332e9-4687-3e0c-a256-5908fe3b00a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a/826ab4ee-b6aa-4222-ae26-8bc58c9b742a.crl

            X509v3 Authority Key Identifier:
                keyid:5B:7C:6C:55:80:AC:19:EC:C0:BF:7D:79:D4:2C:EF:DF:2D:B7:C1:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/826ab4ee-b6aa-4222-ae26-8bc58c9b742a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.225.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:e2:a5:d0:59:55:cb:75:d6:d9:a2:84:ef:33:94:03:e2:92:
         66:f1:fd:88:8b:43:9f:65:6b:f2:26:2c:38:4a:bd:e4:14:d6:
         80:e0:f3:5c:99:15:ec:4d:88:a4:ab:c0:35:66:3a:1f:ae:79:
         bc:a0:f7:41:5b:f8:4d:0b:01:7c:f5:3d:23:ec:58:0f:74:45:
         b2:83:dc:36:53:4e:c9:04:a5:85:2d:6c:86:f0:cc:25:3b:20:
         73:8d:f5:70:0f:87:01:1a:c7:b4:a0:94:66:34:a5:ca:39:65:
         60:3b:12:6e:e2:cd:13:1d:c3:f7:f3:62:4a:90:d5:8f:66:99:
         86:78:05:36:f6:9a:f0:20:27:30:89:04:b5:e0:97:4f:82:93:
         a5:99:5f:56:5d:2f:bf:b3:30:52:f4:c6:27:26:d2:6f:5f:57:
         4c:df:a0:df:5a:f2:e5:f6:f6:be:6a:a0:62:2b:35:28:34:92:
         4c:66:9c:3e:09:c0:52:bc:56:46:2c:b8:ec:1d:03:e6:ca:92:
         77:40:94:f8:83:6d:ac:a2:24:39:48:7a:7b:1f:4f:6b:e1:4a:
         5e:f5:87:5a:b6:ee:21:6c:e5:7d:56:88:0c:79:68:c3:20:d8:
         84:1c:b2:ef:07:7f:b0:91:bb:cf:a7:e8:4f:43:bc:6b:b8:08:
         f8:1b:37:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 05:17:28 2026 by rpki-client