Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695/c7ef6635-3aa2-3ef5-97ed-1e7b1a32b493.roa
File:                     c7ef6635-3aa2-3ef5-97ed-1e7b1a32b493.roa (raw, json)
Hash identifier:          G6kVQwm/4Mt60pNDoVNAUk1HyAXyouQ8rNsPYmw/zRg=
Subject key identifier:   44:D4:31:65:CE:E9:2A:15:30:FD:8E:72:BB:A2:DA:62:22:11:D9:B0
Certificate issuer:       /CN=37cfb708-8bc0-4a74-971e-28d677315695
Certificate serial:       010D0C9F4328584E4AF59F0D2F3345E494F3A850
Authority key identifier: AD:56:82:21:E8:9F:5E:3B:60:94:2F:89:79:58:A0:E6:12:08:E8:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695/c7ef6635-3aa2-3ef5-97ed-1e7b1a32b493.roa
Signing time:             Thu 25 Jun 2026 21:13:14 +0000
ROA not before:           Thu 25 Jun 2026 21:13:14 +0000
ROA not after:            Wed 23 Sep 2026 21:13:14 +0000
asID:                     395439
IP address blocks:        209.204.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695/37cfb708-8bc0-4a74-971e-28d677315695.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695/37cfb708-8bc0-4a74-971e-28d677315695.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:f5:9f:0d:2f:33:45:e4:94:f3:a8:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37cfb708-8bc0-4a74-971e-28d677315695
        Validity
            Not Before: Jun 25 21:13:14 2026 GMT
            Not After : Sep 23 21:13:14 2026 GMT
        Subject: CN=a2c3aaf3-c03f-4cd7-b48c-f40c88a95e09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f4:fa:eb:ca:14:b0:52:92:f8:a1:80:0f:0b:
                    cb:3e:c9:ac:3b:51:e1:75:f6:62:15:a8:32:73:61:
                    69:ed:c3:25:56:ca:d1:d5:8e:6a:55:51:61:35:81:
                    a1:e8:36:6a:b3:24:b0:d3:a9:d6:37:c9:9e:f3:3a:
                    4e:a2:f0:4c:7f:ea:a9:9e:29:81:97:74:ef:89:ad:
                    cc:8b:8d:bb:c6:75:47:c4:77:f0:8e:a3:be:95:f3:
                    65:24:63:38:41:7a:30:90:68:20:8e:58:10:da:db:
                    12:94:24:7e:3e:d5:20:47:30:bc:bf:a2:79:99:f4:
                    f8:08:be:3f:bb:29:41:bc:0e:ce:ea:f7:fc:6d:98:
                    f2:47:d1:d2:93:b9:cd:53:1b:ad:99:24:8f:54:95:
                    57:8d:1e:d9:d5:7f:c3:fc:b9:20:38:0e:10:d7:ea:
                    0f:bf:0a:23:34:46:20:b2:ea:cf:bf:a6:96:10:2b:
                    af:2f:a6:0f:d3:6c:81:cb:c7:e5:b4:76:02:a0:2a:
                    b8:a6:0c:60:1f:5e:3d:b8:4a:55:b8:9e:a8:63:1f:
                    b8:04:4f:95:0d:19:4c:ca:77:25:62:4c:a1:4f:50:
                    03:e7:cf:26:c3:e8:ba:fc:da:a9:65:0d:d3:28:21:
                    c1:de:24:2a:e4:ec:dd:35:54:e9:d0:08:2f:e7:45:
                    5a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D4:31:65:CE:E9:2A:15:30:FD:8E:72:BB:A2:DA:62:22:11:D9:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695/c7ef6635-3aa2-3ef5-97ed-1e7b1a32b493.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695/37cfb708-8bc0-4a74-971e-28d677315695.crl

            X509v3 Authority Key Identifier:
                keyid:AD:56:82:21:E8:9F:5E:3B:60:94:2F:89:79:58:A0:E6:12:08:E8:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.204.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:0a:59:20:cc:72:9c:18:47:48:d7:f9:41:95:34:42:27:1b:
         29:ae:be:45:46:54:3f:f4:4a:d1:15:a2:3c:85:7d:2f:89:80:
         23:9a:d8:8e:da:6b:bc:67:ce:24:71:09:90:2d:e8:ef:05:4c:
         ef:cf:4e:24:0a:0c:a4:4a:23:f6:2a:6c:52:6a:2a:f7:49:d1:
         b7:6e:29:db:41:bb:b0:64:03:23:ff:e1:dd:67:fe:26:3b:16:
         4c:b7:b5:ec:25:23:2f:da:f6:93:9a:25:b6:ea:5f:82:f7:3f:
         de:e1:f5:ec:f6:c4:0d:ab:2c:41:36:e1:e1:f7:9f:28:ca:54:
         a5:da:4c:51:45:3d:6b:fa:af:6a:d6:cd:56:76:aa:78:b1:9c:
         bf:d3:82:ec:ad:f5:c4:17:d0:b1:c0:98:a4:de:29:a6:7c:8e:
         73:ce:28:85:59:08:49:b2:96:42:85:34:ff:71:6b:0b:5b:a0:
         f1:36:d1:b6:6d:a0:de:6e:32:1c:c7:d2:ae:13:82:a6:67:a8:
         0a:4a:70:02:2d:e2:07:9e:54:08:20:92:9e:69:32:6e:49:1f:
         e1:05:ea:1a:ec:36:57:54:b4:36:19:38:dc:e3:a0:fe:76:2b:
         6d:d1:56:77:de:5b:52:a0:df:fa:64:7b:29:36:59:56:37:39:
         90:19:85:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:01:18 2026 by rpki-client