Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9d0505ed-ca13-371b-a655-7b8b073cc777.roa
File:                     9d0505ed-ca13-371b-a655-7b8b073cc777.roa (raw, json)
Hash identifier:          KZwNnolI6aSdY6T6+c7M052TeZzKCm0/76+FmO6vMvw=
Subject key identifier:   DD:CF:81:64:A9:FB:9B:A6:FD:EF:C1:38:4C:06:31:A7:0E:F9:84:11
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584DEDE09002738BADD83D9FFA80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9d0505ed-ca13-371b-a655-7b8b073cc777.roa
Signing time:             Sat 23 May 2026 13:00:31 +0000
ROA not before:           Sat 23 May 2026 13:00:31 +0000
ROA not after:            Fri 21 Aug 2026 13:00:31 +0000
asID:                     15247
IP address blocks:        207.194.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ed:e0:90:02:73:8b:ad:d8:3d:9f:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: May 23 13:00:31 2026 GMT
            Not After : Aug 21 13:00:31 2026 GMT
        Subject: CN=dd5ae98f-81db-42da-aeea-32b91d4ef239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f9:fd:c6:0c:13:1b:53:76:d5:9b:a3:ad:51:
                    dc:03:37:47:fc:6e:68:75:f5:00:cd:7c:17:78:8d:
                    38:c9:ed:cc:da:81:97:43:b1:16:51:b2:96:78:92:
                    fe:17:ca:ff:d1:99:b5:39:95:fe:29:b2:0f:c5:e5:
                    96:fa:0d:3e:dc:ae:bd:e4:3a:05:bc:27:87:8c:21:
                    d1:55:a9:54:71:cb:51:64:8a:7e:79:d0:40:74:ba:
                    2b:ab:b5:37:88:42:2f:10:92:ff:f6:1a:c8:b2:e0:
                    0d:6f:c4:e7:b1:a0:3a:ed:3c:ad:68:58:ef:58:78:
                    6a:c1:5f:e6:a3:42:69:f4:60:37:91:7a:ab:4f:8b:
                    42:a1:47:aa:1e:89:50:10:5f:45:9b:49:5d:93:f6:
                    13:5e:dc:d4:c9:71:9b:e8:42:62:9c:12:dc:6b:ca:
                    b3:f1:ce:b8:2a:e3:96:fa:0b:70:bd:fa:91:82:4d:
                    c8:42:8e:5b:e3:64:9c:06:ee:cf:9d:28:30:31:33:
                    38:16:06:9a:96:2b:a3:f3:61:a9:83:6a:42:6d:c9:
                    2b:36:bd:4e:53:91:4f:43:61:a1:71:62:bb:5a:58:
                    b4:a8:99:98:63:55:62:fb:eb:ee:55:46:c7:09:77:
                    0a:71:b8:c4:af:d7:7e:33:21:94:22:0b:29:59:1f:
                    27:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:CF:81:64:A9:FB:9B:A6:FD:EF:C1:38:4C:06:31:A7:0E:F9:84:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9d0505ed-ca13-371b-a655-7b8b073cc777.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.194.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:cd:ca:d6:5f:dc:3c:92:3e:3f:9c:af:96:76:73:5f:e2:88:
         58:1b:7a:3d:16:6f:7b:78:a6:26:38:2e:ac:cf:eb:fa:a4:9f:
         47:c2:6f:6a:98:3b:48:9c:dc:cf:27:36:95:9c:5b:bd:57:b9:
         5f:d6:7e:e5:04:1b:e7:d6:85:55:d9:20:a3:7b:1e:33:d3:31:
         14:9d:e8:df:26:8c:91:35:d2:2d:b4:a1:f0:a0:81:07:a2:ef:
         d7:8b:21:65:8f:39:9f:97:43:42:c5:56:fa:2c:3b:4d:85:ef:
         e8:e1:d8:9f:58:70:63:70:40:95:63:7f:84:cb:b7:cb:40:69:
         ab:b2:9a:d7:6a:5e:7a:60:5d:32:d7:19:f2:3a:e1:d5:ee:5f:
         1b:e8:24:ba:9d:d6:1c:d5:7d:e0:d5:94:29:3f:2b:3a:b8:4c:
         07:4b:05:ec:86:03:49:2c:96:5f:8c:8f:44:26:b2:c4:6a:82:
         a8:b6:b9:ee:03:19:cf:34:a8:22:9d:65:b6:fb:fc:68:a0:bc:
         a2:2c:60:cc:59:c8:38:a0:8b:7a:76:db:a3:25:c6:e1:14:c4:
         a5:75:85:b3:dc:ff:52:c2:4b:9d:20:50:56:5f:d7:b0:ab:a6:
         4c:b0:3f:70:7d:34:d3:40:33:ea:06:38:53:3b:96:46:88:69:
         f1:3c:1f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:56:44 2026 by rpki-client