Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/aa000e23-1120-334a-ad1d-5bf8f562f368.roa
File:                     aa000e23-1120-334a-ad1d-5bf8f562f368.roa (raw, json)
Hash identifier:          C0isNVwxy/34/CKx24OIvnNCKvqLoAUgApD9MBiGhF0=
Subject key identifier:   E8:01:74:A4:CB:A7:42:BF:97:E3:01:0D:85:A3:CD:FB:5E:3D:DD:A6
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584DEDE093512A93664907B1E5A0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/aa000e23-1120-334a-ad1d-5bf8f562f368.roa
Signing time:             Sat 23 May 2026 13:00:31 +0000
ROA not before:           Sat 23 May 2026 13:00:31 +0000
ROA not after:            Fri 21 Aug 2026 13:00:31 +0000
asID:                     21723
IP address blocks:        207.194.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ed:e0:93:51:2a:93:66:49:07:b1:e5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: May 23 13:00:31 2026 GMT
            Not After : Aug 21 13:00:31 2026 GMT
        Subject: CN=a104425b-6432-4ac0-9e7c-e33ea6e7a4f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fd:8c:c9:c5:33:c9:1e:ee:01:15:c7:9d:c6:
                    9f:86:8b:a3:47:7a:e3:0f:4e:e9:e2:b1:f1:88:d6:
                    da:46:8b:d9:6a:c9:5d:ed:ba:16:67:a3:40:c0:44:
                    55:b2:5f:67:49:6b:60:06:5a:27:01:6a:bf:8a:db:
                    65:cb:7b:14:f6:0a:e3:cd:b8:67:23:18:6b:f3:8a:
                    a5:84:66:58:19:e2:d1:9a:cc:09:0d:55:7f:a3:6f:
                    16:67:2d:70:a8:41:00:ff:54:ed:7c:bf:68:93:2d:
                    06:37:72:33:b5:d1:cc:48:33:ed:0d:d5:c7:ab:c2:
                    11:41:9b:99:cf:32:95:17:58:e3:2a:d3:c7:2d:a4:
                    91:ee:39:33:a2:4a:03:0f:45:68:b2:38:2f:bd:4b:
                    1e:86:6b:6f:a6:a5:41:ae:72:b8:33:2b:f1:d2:7f:
                    1d:4a:a1:14:f1:6a:44:ad:d6:97:03:14:3d:3e:fd:
                    69:b8:98:0a:61:f3:e7:11:c5:67:46:39:bc:c7:fa:
                    e9:75:23:8d:c1:7a:85:87:c3:a2:47:48:be:eb:e6:
                    12:cd:40:5c:2d:19:ce:79:07:37:02:39:72:14:2c:
                    32:ab:b6:1a:ed:41:0f:5c:b8:cc:20:e4:02:31:a3:
                    af:0f:10:b0:b0:b1:24:3d:34:50:78:7c:ff:d4:e6:
                    15:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:01:74:A4:CB:A7:42:BF:97:E3:01:0D:85:A3:CD:FB:5E:3D:DD:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/aa000e23-1120-334a-ad1d-5bf8f562f368.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.194.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:37:30:c0:76:7b:c5:e4:44:5d:56:2b:0c:28:f1:58:9b:1f:
         d2:6b:ab:5b:8a:a6:42:5a:31:a5:ca:87:dc:96:d0:62:43:05:
         82:d4:19:f2:d8:4e:5f:f5:b1:05:7c:01:f5:dc:ff:58:d9:65:
         d0:14:24:65:2c:e7:06:c0:a9:28:bb:d6:95:86:04:15:fd:35:
         7b:66:03:32:71:a9:ad:dd:33:3f:04:49:59:c5:9c:48:b4:b3:
         07:67:53:81:bf:4f:eb:02:59:08:d6:0d:cb:93:b0:02:f2:06:
         79:24:64:5f:e6:d5:55:02:69:44:a2:ef:3f:bc:3d:47:1d:9e:
         e7:f8:ac:28:bb:40:f3:b0:de:36:5b:9e:24:6d:4e:22:07:a4:
         b2:28:7a:04:65:29:db:18:49:66:05:10:f0:a3:7c:d8:35:b5:
         70:ad:11:6a:5c:56:a4:7c:17:3c:2f:76:7e:8f:9f:d1:ce:a5:
         d9:58:48:b7:8c:58:51:fd:ba:f6:ac:53:ca:3d:c8:60:35:eb:
         d9:f1:99:43:fb:60:41:88:61:24:35:8a:a7:6a:1a:ca:42:19:
         e3:f7:cf:2c:c1:15:26:02:c3:b0:09:83:a4:7c:a9:a5:03:3a:
         01:4b:4d:3d:93:32:f6:d2:21:d5:92:97:54:80:8e:62:91:e2:
         6d:1a:4a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:56:43 2026 by rpki-client