Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/5beca30e-3fd6-325b-ad5d-4b8e4bc6e24c.roa
File:                     5beca30e-3fd6-325b-ad5d-4b8e4bc6e24c.roa (raw, json)
Hash identifier:          SH4ebdpD0uj09VvsF7yQxtOlDlu2ug74wLayxKsx9QA=
Subject key identifier:   A8:35:DC:54:59:F9:C9:65:8A:FC:C4:A6:47:DE:81:41:AE:0B:8B:E1
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F4328584E86F4F5815F6CDB18CB9D3B00
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/5beca30e-3fd6-325b-ad5d-4b8e4bc6e24c.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     213990
IP address blocks:        208.67.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:f5:81:5f:6c:db:18:cb:9d:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=5614beff-2f52-412c-af9f-5fe8124ef02c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:72:09:e6:a0:a7:ea:0e:26:bb:19:ea:0e:3c:
                    b9:9b:05:73:bb:28:97:da:3a:51:8e:65:f5:27:95:
                    d4:6e:ad:bf:4f:39:35:67:00:59:b3:4b:c4:54:d7:
                    0a:9f:f6:d7:a7:24:6d:30:79:92:a7:cd:6b:ca:42:
                    b4:0c:77:a8:62:5c:80:3e:e9:69:5d:0a:d2:b9:24:
                    aa:9d:fa:b4:eb:74:b3:a6:aa:2d:a8:c7:c3:fc:91:
                    2a:62:02:24:86:5c:39:a3:ce:b4:28:f9:ba:24:90:
                    78:ee:99:9e:2a:b1:c3:d3:1c:a5:58:6f:7c:26:3a:
                    ce:6f:b3:95:99:56:0a:1a:34:b7:59:eb:ad:56:00:
                    a9:9f:63:76:f6:5a:5f:dc:44:ea:04:f7:2d:ff:2d:
                    ab:a7:3c:28:38:25:c5:4b:75:30:dd:44:e7:f1:2a:
                    38:55:20:dc:ff:a9:d4:8e:a2:43:39:15:e1:04:0f:
                    37:62:72:28:42:46:49:3d:7d:c0:06:05:0f:ec:54:
                    68:17:ab:ad:ee:35:41:99:57:6b:60:c6:b1:a2:3a:
                    39:4c:46:4b:e6:0a:72:5b:05:c9:53:72:48:c2:13:
                    c7:71:c1:38:5b:13:b3:85:d9:1e:fb:07:8c:ea:40:
                    e2:f3:7d:69:6d:f4:7f:3a:a4:ea:4e:7e:2b:07:74:
                    2c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:35:DC:54:59:F9:C9:65:8A:FC:C4:A6:47:DE:81:41:AE:0B:8B:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/5beca30e-3fd6-325b-ad5d-4b8e4bc6e24c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.67.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:4b:aa:2b:69:b9:46:ea:5f:1c:7b:1e:3e:af:de:ca:b8:12:
         2f:d2:73:e2:c5:4f:8e:9a:87:30:32:c1:b0:d1:43:87:a9:fb:
         9b:b2:95:de:2f:b0:5c:76:8f:ea:e6:b5:05:5b:73:0c:dc:01:
         f3:21:8f:cd:48:65:51:01:04:53:63:e8:9a:3e:c9:3f:4f:d6:
         81:ec:1d:8f:58:c5:76:cc:a3:52:c0:8e:e9:f3:d3:f1:d8:2d:
         6a:30:30:3c:fe:29:05:60:eb:57:d8:b2:5c:69:9d:92:9e:0c:
         12:78:9c:b9:7e:d5:11:9f:55:8a:7b:5f:09:61:d4:3b:13:be:
         e8:6d:3c:7b:e8:24:c8:82:79:f3:74:82:19:9e:c2:ac:f7:36:
         1f:0c:6c:30:c1:ff:f7:3d:ba:a4:8e:8f:5a:e6:0e:f7:70:d9:
         97:8a:7a:f9:60:66:74:4e:bc:6e:4a:e8:4c:85:14:d7:a9:0d:
         cc:c7:21:a6:e6:3b:9b:43:30:32:de:a3:0e:76:8c:95:97:f6:
         e8:29:6c:33:59:27:f5:38:eb:fe:81:d8:08:07:91:d0:80:80:
         fb:14:53:21:46:77:d4:45:b4:00:64:df:7f:2a:31:82:94:79:
         45:21:d6:05:48:e8:50:18:93:28:12:d7:01:6e:07:7c:2e:45:
         c3:cf:d2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:27:56 2026 by rpki-client