Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/7c28e404-294d-309d-af50-90be4b047b6a.roa
File:                     7c28e404-294d-309d-af50-90be4b047b6a.roa (raw, json)
Hash identifier:          bQKrtx6P1HbgoXlMavOd74lXCJS7M8g7P5eazK5Qwto=
Subject key identifier:   C6:16:BE:46:3C:85:0A:8C:E1:AC:8A:46:4A:26:D6:D2:7C:00:AD:5E
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584DB7702762FAD78D2893BB3600
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/7c28e404-294d-309d-af50-90be4b047b6a.roa
Signing time:             Mon 04 May 2026 01:00:25 +0000
ROA not before:           Mon 04 May 2026 01:00:25 +0000
ROA not after:            Sun 02 Aug 2026 01:00:25 +0000
asID:                     46925
IP address blocks:        173.230.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b7:70:27:62:fa:d7:8d:28:93:bb:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: May  4 01:00:25 2026 GMT
            Not After : Aug  2 01:00:25 2026 GMT
        Subject: CN=d0812a82-6b79-42ed-bc90-3b0f052219cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0b:fd:d1:86:43:dd:7d:78:54:19:0e:f8:45:
                    c1:6e:f3:f8:6c:28:e9:58:31:ea:2e:8d:2d:ab:52:
                    75:54:07:22:71:d1:50:b5:13:49:5d:c5:69:0c:51:
                    11:72:8b:16:89:bd:c3:6d:a0:28:3a:7f:c2:63:d9:
                    b7:2d:fc:1d:f4:e4:76:d6:c1:81:55:59:c2:f6:30:
                    20:3a:f0:d2:b6:df:7e:d3:4e:d4:c0:22:84:53:21:
                    57:6f:f7:40:2c:69:ad:37:89:eb:d1:62:38:a2:5d:
                    f7:10:5d:79:1b:10:0d:08:f4:e0:03:bf:2c:04:3a:
                    ae:ca:31:20:fa:a1:2e:26:dc:8b:8e:8c:6c:99:87:
                    ce:54:c2:95:1e:72:71:53:a8:fa:93:dd:16:b8:1f:
                    78:b1:19:ed:0b:e8:81:5b:8a:4d:f5:95:3c:79:f3:
                    23:1d:67:74:07:b7:8c:e3:9f:83:ca:ba:51:1d:ef:
                    95:13:51:ec:e7:72:95:f5:f3:d4:6d:cb:05:c6:a5:
                    7c:e8:04:1f:28:01:c1:cf:d9:f1:49:e9:29:19:55:
                    93:77:ff:04:cb:3e:c1:80:e4:7b:75:e8:8f:65:6e:
                    60:be:07:2d:39:9b:16:77:c3:cd:98:b5:ae:e1:a8:
                    06:74:6b:c1:23:0e:2e:30:da:01:13:89:46:95:b3:
                    3a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:16:BE:46:3C:85:0A:8C:E1:AC:8A:46:4A:26:D6:D2:7C:00:AD:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/7c28e404-294d-309d-af50-90be4b047b6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.230.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:1d:78:70:c9:22:ba:c5:fc:07:55:b5:d5:21:ff:01:7a:ba:
         af:d2:de:7f:83:d5:7a:65:24:43:e2:b6:ff:a0:2e:d3:4d:f5:
         7f:29:c9:27:1a:44:d5:be:c6:bf:9e:b1:f1:ef:cd:bf:66:49:
         78:4e:37:07:fa:89:28:1c:56:36:ea:1c:0f:43:a3:68:66:47:
         92:b5:d2:71:56:77:3d:ef:72:a1:52:f5:0c:a1:c4:3d:ae:ac:
         e2:91:c5:e1:b7:84:cf:65:27:67:3b:fb:7b:ff:1f:b8:a5:b7:
         5d:44:c7:78:e9:55:2d:cc:97:67:00:fa:b0:89:dc:2c:35:6e:
         03:63:8a:63:c7:62:85:1b:8e:20:d8:1b:b3:46:4e:2d:70:8a:
         42:28:01:d1:de:41:61:3a:89:f4:6c:b9:d5:28:00:a1:95:fa:
         3f:00:06:99:0e:02:1e:d1:b7:c6:4e:27:07:07:b4:e0:76:c8:
         9c:73:84:fc:b7:3d:6d:79:4d:b1:60:57:97:a4:f6:e0:4e:4b:
         08:37:0a:7d:8f:65:88:b0:3b:55:f1:d1:f4:ca:c0:5f:83:c1:
         7d:83:b0:17:7b:10:7b:70:d8:72:96:0c:94:2f:95:b7:34:3d:
         4b:19:5c:91:32:8b:a4:12:a3:9f:95:ff:0a:fd:b0:49:55:97:
         41:dc:f8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 04:35:16 2026 by rpki-client