Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ae425633-e238-4a95-9c23-f41543ed4ad0/e052977a-1de1-3684-ac1b-1357e58568d9.roa
File:                     e052977a-1de1-3684-ac1b-1357e58568d9.roa (raw, json)
Hash identifier:          KkA38/OcNyopK7Tw2aCiAbVu7oxH4c69wOJgzrH9h70=
Subject key identifier:   DB:6B:78:C2:1D:8C:84:0D:21:37:01:FC:44:36:2E:2F:1E:39:70:BD
Certificate issuer:       /CN=ae425633-e238-4a95-9c23-f41543ed4ad0
Certificate serial:       010D0C9F4328584EC7A1E725AB18274FC31DBB00
Authority key identifier: FE:2F:1A:15:CD:64:39:E7:5B:1E:22:63:C7:3B:B3:19:46:1F:64:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ae425633-e238-4a95-9c23-f41543ed4ad0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ae425633-e238-4a95-9c23-f41543ed4ad0/e052977a-1de1-3684-ac1b-1357e58568d9.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     10242
IP address blocks:        207.153.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ae425633-e238-4a95-9c23-f41543ed4ad0/ae425633-e238-4a95-9c23-f41543ed4ad0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ae425633-e238-4a95-9c23-f41543ed4ad0/ae425633-e238-4a95-9c23-f41543ed4ad0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ae425633-e238-4a95-9c23-f41543ed4ad0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:e7:25:ab:18:27:4f:c3:1d:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae425633-e238-4a95-9c23-f41543ed4ad0
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=1b3bbacb-f870-482f-a325-1f51e87b15a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d0:48:09:24:da:b1:21:7b:8b:53:9d:7e:9d:
                    b8:0f:dc:f0:e1:66:43:e2:40:3f:4e:d7:69:7e:df:
                    6c:49:33:7b:54:49:a2:f9:69:f9:ef:a9:1c:16:f3:
                    5e:5c:d1:99:23:13:16:38:b5:a0:53:72:80:c3:8f:
                    77:e1:de:df:e8:5e:24:39:49:c8:23:ef:68:31:33:
                    34:06:7a:f9:5d:b9:8f:ab:cf:8e:ad:62:95:4b:cb:
                    72:1b:0c:be:39:a5:47:5a:6b:bd:ff:25:ac:da:70:
                    45:da:9c:a6:18:25:60:f1:c9:e5:e6:98:b9:e6:0d:
                    c5:af:8a:a6:d7:75:29:cc:52:21:5f:e9:6b:53:1a:
                    71:77:05:e0:05:6d:21:98:e2:38:01:b4:0f:c9:f0:
                    75:fc:92:e6:d9:31:25:a5:c7:3f:68:d2:bd:ac:27:
                    eb:e4:3e:fa:59:a4:77:5e:c7:4e:93:f1:bc:ed:67:
                    72:5b:c4:ca:04:82:69:df:46:16:9c:8c:d8:70:9b:
                    d2:ad:64:31:8a:93:f3:77:16:56:e5:ed:91:06:2e:
                    db:3a:9e:d4:c2:25:60:98:58:f3:46:18:9e:bd:96:
                    11:9e:ab:b3:fb:ce:a6:ee:a1:d4:a8:79:e2:14:d8:
                    27:c1:ee:fa:cc:9b:5e:1d:24:21:b9:be:54:8d:73:
                    1c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:6B:78:C2:1D:8C:84:0D:21:37:01:FC:44:36:2E:2F:1E:39:70:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ae425633-e238-4a95-9c23-f41543ed4ad0/e052977a-1de1-3684-ac1b-1357e58568d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ae425633-e238-4a95-9c23-f41543ed4ad0/ae425633-e238-4a95-9c23-f41543ed4ad0.crl

            X509v3 Authority Key Identifier:
                keyid:FE:2F:1A:15:CD:64:39:E7:5B:1E:22:63:C7:3B:B3:19:46:1F:64:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ae425633-e238-4a95-9c23-f41543ed4ad0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.153.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:f9:5b:67:2c:f8:8d:c0:2b:5c:0e:bf:40:b4:21:84:36:e4:
         04:b1:44:04:ce:1d:dc:fd:4d:98:42:4d:51:f0:7e:6b:77:b0:
         91:79:7f:26:6b:48:fb:ed:f0:65:da:d6:fe:b4:bb:fd:e5:74:
         f5:b4:9b:30:59:a2:21:2c:6e:51:ff:1b:57:10:67:02:48:52:
         34:0c:1a:bf:2a:39:8a:07:ad:f0:83:0b:f5:a3:c9:6a:39:8c:
         10:d9:8e:28:7a:32:4e:e1:3c:b2:4b:8d:9d:d5:fc:08:74:8e:
         43:99:5e:13:2a:7d:88:45:b6:21:e0:f9:b4:47:70:63:20:7d:
         46:2e:dd:c4:6d:7c:fc:f7:fd:c0:fe:02:14:4b:f6:18:a8:da:
         49:02:6a:12:38:aa:79:8e:b3:c0:61:a1:28:5a:d3:dd:56:42:
         bf:12:65:21:74:9d:77:9f:f5:f2:43:02:a1:af:bb:d9:f6:d8:
         c9:d8:d7:db:d2:93:da:bb:6c:bc:ab:47:e2:01:91:25:40:18:
         a9:d8:1a:04:d2:9d:69:09:ca:da:cc:41:2f:9c:21:5e:af:17:
         16:b3:57:32:0d:cd:e5:25:37:74:cb:14:a2:17:42:af:37:8d:
         84:63:d9:23:33:42:fb:b6:07:d4:21:76:ef:c2:7c:08:b6:e8:
         45:ad:94:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 18:58:37 2026 by rpki-client