Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/332b4b6b-4756-3fce-802b-a4011c385d8f.roa
File:                     332b4b6b-4756-3fce-802b-a4011c385d8f.roa (raw, json)
Hash identifier:          1vMJjHuWwSIqDLEruZqNeZCstchq1hqT+Nk6V5FmKdY=
Subject key identifier:   9B:5A:7F:6E:77:2B:8B:41:40:EF:D8:FF:21:9B:CD:CB:9B:D3:8C:E5
Certificate issuer:       /CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
Certificate serial:       010D0C9F4328584EE7BCA089BD3CC4FBDE058FC0
Authority key identifier: 71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/332b4b6b-4756-3fce-802b-a4011c385d8f.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     11269
IP address blocks:        207.2.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:a0:89:bd:3c:c4:fb:de:05:8f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=7166e06b-5f93-48d1-9fbb-9da605fd68a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:05:91:1d:d3:cb:5d:f3:ad:5b:63:46:c7:c9:
                    5c:6a:9d:00:fd:17:da:f6:8b:46:5e:98:26:8e:23:
                    60:73:a9:8e:7c:62:bf:08:98:5c:86:a1:c6:45:ed:
                    4b:51:ae:b6:0e:9c:58:ea:34:db:64:1d:ff:2d:47:
                    aa:e6:5e:b8:b0:e7:ba:f5:98:b1:08:19:ae:05:69:
                    7b:14:86:8a:6e:4b:db:cd:14:a2:a6:ac:08:02:12:
                    77:be:6d:9d:28:13:97:47:8b:0a:01:88:62:bd:73:
                    eb:dd:0e:9c:a5:bb:5a:80:a3:e0:c1:e7:57:4a:7f:
                    d5:bc:91:0e:fd:af:77:98:a1:bd:e6:41:14:38:35:
                    47:31:ad:aa:af:fb:d5:71:e0:ef:59:82:22:5e:56:
                    78:37:1f:e6:c9:86:17:ea:94:54:74:ca:d9:ae:fe:
                    1e:b6:85:3e:44:20:b1:d7:d7:fb:85:e8:72:e1:ab:
                    b9:5d:be:59:ee:8e:ae:8a:3d:e6:72:ef:41:86:44:
                    2d:3d:1e:eb:91:af:86:cc:13:1c:c8:64:9b:f2:b5:
                    3b:fc:64:16:ec:4b:86:3e:fd:ce:dd:ac:3b:21:31:
                    e3:3d:ab:b8:e7:06:a6:fb:c8:f7:52:eb:bb:a5:a4:
                    59:32:8e:d8:f4:35:6e:4a:85:ff:ca:3a:50:9e:39:
                    ae:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:5A:7F:6E:77:2B:8B:41:40:EF:D8:FF:21:9B:CD:CB:9B:D3:8C:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/332b4b6b-4756-3fce-802b-a4011c385d8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl

            X509v3 Authority Key Identifier:
                keyid:71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.2.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:d0:26:ae:55:f2:95:18:36:f0:e3:b0:fe:17:41:a9:c0:88:
         3a:27:ea:c3:1f:c7:1b:88:23:d0:3d:09:e5:ae:d3:4e:b4:23:
         ac:cc:47:0b:1f:9d:10:f0:23:76:e0:e8:92:7c:e8:95:12:58:
         4b:b8:26:67:75:3b:72:18:e0:af:b0:d6:f7:9c:91:4b:4a:03:
         b0:38:82:bb:e6:4b:5e:1f:c3:76:b4:de:d1:ce:0e:e8:9b:59:
         29:33:0a:be:06:1b:8f:6f:5f:67:98:53:27:0a:88:51:99:dd:
         f4:48:59:7f:01:62:0c:05:98:df:5e:8b:c0:b1:b8:39:dc:30:
         99:99:05:10:28:bf:22:8c:29:a2:72:36:31:5f:68:61:95:00:
         60:a2:6c:bc:a4:ae:bf:45:e3:a4:09:76:61:42:f6:28:b2:f1:
         9e:42:19:ef:8d:b2:ad:1d:54:3d:5d:50:b1:94:11:9a:26:24:
         8d:73:4f:58:6e:5b:13:96:bd:ae:ed:89:46:98:ae:79:c1:08:
         b5:d7:63:e1:c9:da:94:84:ac:53:77:6d:30:ba:5f:b7:27:65:
         d4:eb:96:c0:6e:f3:87:1f:00:1a:f3:50:2b:25:66:78:d5:6b:
         fc:8a:7a:da:8a:b4:1e:c1:3f:8c:0a:dc:3a:df:77:68:ca:42:
         b2:ae:51:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:57:41 2026 by rpki-client