Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/7706e877-a2f6-3cae-96a1-a9c4c0edfc1d.roa
File:                     7706e877-a2f6-3cae-96a1-a9c4c0edfc1d.roa (raw, json)
Hash identifier:          Ky/jAcgdp2YwIjUeHFNSq/QEGX4rDAYnIGWeoQb4r3Q=
Subject key identifier:   B5:52:79:66:33:AF:52:08:EE:C3:0B:DE:7E:79:D9:34:3A:28:27:E1
Certificate issuer:       /CN=0cb53f01-b9a4-4a01-b384-1d40f55687b4
Certificate serial:       010D0C9F4328584D932566FF1E104670CC5CDFC0
Authority key identifier: 78:EA:5F:6A:38:38:95:7B:48:29:A0:B1:4B:35:98:07:F9:10:6C:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/7706e877-a2f6-3cae-96a1-a9c4c0edfc1d.roa
Signing time:             Tue 21 Apr 2026 01:00:24 +0000
ROA not before:           Tue 21 Apr 2026 01:00:24 +0000
ROA not after:            Mon 20 Jul 2026 01:00:24 +0000
asID:                     54004
IP address blocks:        207.251.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/0cb53f01-b9a4-4a01-b384-1d40f55687b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/0cb53f01-b9a4-4a01-b384-1d40f55687b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:93:25:66:ff:1e:10:46:70:cc:5c:df:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cb53f01-b9a4-4a01-b384-1d40f55687b4
        Validity
            Not Before: Apr 21 01:00:24 2026 GMT
            Not After : Jul 20 01:00:24 2026 GMT
        Subject: CN=09abcff7-96eb-4279-8fda-b4e129f70a7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9e:73:87:b9:0c:23:e8:4f:e7:95:5c:61:ce:
                    51:8e:08:91:63:3e:64:92:8a:c7:a3:d9:e7:c0:3d:
                    22:2f:af:b3:4f:bc:3c:1d:d4:15:de:bb:a5:d3:06:
                    46:b1:87:fb:23:fc:b2:88:81:7b:8a:fc:3e:ae:bb:
                    ca:4e:83:9f:db:70:81:5c:b2:31:35:1f:09:d2:7c:
                    37:01:b1:65:9e:52:de:0e:aa:29:77:24:a3:95:18:
                    ba:b3:e7:a6:46:a0:df:11:cf:e6:69:ae:05:28:df:
                    1e:69:06:a1:8a:2e:6f:79:aa:af:e0:e8:15:12:30:
                    c5:e6:cf:a2:58:ee:ac:43:34:ae:17:2e:97:3f:62:
                    46:b3:66:99:db:67:8d:d4:04:2c:da:f1:f1:be:e2:
                    54:f8:11:94:64:18:42:bd:1e:ee:0e:90:db:65:61:
                    45:8f:f8:10:e6:b3:66:25:ad:63:69:ae:a4:0b:e1:
                    03:30:3c:38:04:70:56:c2:62:80:ac:9c:c3:eb:d6:
                    ca:c9:da:d6:7f:fd:f2:82:7a:45:78:3c:ca:6c:9d:
                    02:64:7d:eb:f7:36:ea:8f:26:ad:73:3b:a7:2b:e8:
                    39:26:e7:a1:1b:24:86:31:47:34:26:36:48:2d:89:
                    5f:d6:00:1d:bf:1c:0d:b9:da:e4:19:8a:9a:e5:61:
                    ef:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:52:79:66:33:AF:52:08:EE:C3:0B:DE:7E:79:D9:34:3A:28:27:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/7706e877-a2f6-3cae-96a1-a9c4c0edfc1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4/0cb53f01-b9a4-4a01-b384-1d40f55687b4.crl

            X509v3 Authority Key Identifier:
                keyid:78:EA:5F:6A:38:38:95:7B:48:29:A0:B1:4B:35:98:07:F9:10:6C:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0cb53f01-b9a4-4a01-b384-1d40f55687b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.251.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:54:3a:2e:ea:ad:14:02:dc:72:55:9b:08:b9:65:c0:24:1e:
         c5:4f:b9:61:45:b0:ba:1f:b1:2e:38:6a:23:66:70:96:1e:6c:
         01:a6:f8:e3:49:b2:57:f2:a4:e6:e0:87:ea:fb:c2:f4:79:f2:
         99:eb:f4:bd:aa:f9:36:23:63:47:35:c9:37:46:af:f7:13:57:
         22:00:a0:42:82:9f:a7:04:ea:d9:08:07:eb:45:13:fb:94:b8:
         fd:dd:8d:cb:0e:f0:9e:24:9b:01:8b:f1:e7:22:97:ab:a7:34:
         54:ce:6e:89:41:93:62:08:d4:97:a5:e0:4c:ed:d6:af:09:9b:
         cd:2a:60:9b:58:a1:04:a4:df:e3:f7:0d:3a:76:91:73:3c:38:
         1c:00:2a:ce:01:28:ec:18:78:6a:8f:b9:d6:ac:0d:79:d4:ed:
         9a:0d:10:85:88:e8:1e:60:13:12:de:5e:37:8b:5c:99:c2:95:
         a7:81:bc:c4:7b:fa:f6:d1:65:fc:40:21:1d:ec:4f:78:a5:59:
         72:62:43:b6:9c:84:27:24:68:00:43:89:b0:3b:d7:d3:5d:cc:
         a3:61:20:b7:3d:4a:b8:ac:29:50:18:52:ba:4e:6b:3d:98:a5:
         6d:d1:4f:ef:5c:b1:2d:27:dd:c0:01:fc:6e:c5:88:88:08:8a:
         4b:4b:0c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 08:41:38 2026 by rpki-client