Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/79ceed0b-2a70-3be2-9a97-ecf9b58f0e35.roa
File:                     79ceed0b-2a70-3be2-9a97-ecf9b58f0e35.roa (raw, json)
Hash identifier:          E9yDfbqjia6lMoVVT2towLAEsL72rQ1R9va+0EFrI00=
Subject key identifier:   16:53:F2:7C:CC:5B:DA:6B:2D:5B:8D:B5:2F:7B:BE:A4:25:55:01:73
Certificate issuer:       /CN=c7504c4b-7514-464e-a79e-1f4b462c7e7c
Certificate serial:       010D0C9F4328584D703FD599BFF772FBE2CFAD00
Authority key identifier: BD:B1:CF:BB:D1:DE:D3:95:B4:EF:EB:D8:1F:97:D9:B9:D7:DF:45:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/79ceed0b-2a70-3be2-9a97-ecf9b58f0e35.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     46208
IP address blocks:        67.212.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/c7504c4b-7514-464e-a79e-1f4b462c7e7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/c7504c4b-7514-464e-a79e-1f4b462c7e7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:d5:99:bf:f7:72:fb:e2:cf:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7504c4b-7514-464e-a79e-1f4b462c7e7c
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=ad7e44c8-ad05-42bd-802b-449353672526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2a:63:65:60:ed:6d:ab:ca:4f:0d:03:4e:2f:
                    4f:c7:de:06:e6:f5:0f:0e:e1:d4:9c:97:3b:bb:aa:
                    86:b2:c2:3a:73:f6:73:0c:40:40:89:60:5b:2a:46:
                    d2:5a:67:38:d2:64:c9:b2:41:9f:70:37:97:78:ae:
                    70:9a:bb:1b:30:85:39:92:ef:51:1b:73:70:b3:8a:
                    d1:f0:f5:ca:f7:96:61:66:cf:50:7a:2a:4b:cd:de:
                    ce:7b:d4:7b:c6:48:7a:68:0f:4a:b4:97:f9:fa:db:
                    6a:9f:34:40:be:56:34:2b:01:c5:b6:15:ae:f3:53:
                    76:0c:12:ba:ba:4a:8c:c4:00:9d:0e:6f:ae:dc:b9:
                    f2:19:6a:ca:68:42:cf:b6:41:53:47:af:10:f9:82:
                    b2:4a:6c:e7:f7:ca:ca:2e:2c:75:86:3b:5a:c6:1f:
                    80:1a:6a:65:44:93:65:ee:b0:4b:fe:41:31:a9:5a:
                    7e:ac:86:75:a4:4a:5d:a8:c9:fe:2f:e0:7c:fc:aa:
                    f9:23:ba:39:81:d7:0d:32:72:43:7d:d1:9a:65:c7:
                    4a:e6:4e:6b:f1:2d:69:ab:58:c3:a2:4b:d4:08:46:
                    54:70:ab:77:49:58:14:28:da:17:de:75:54:1e:e8:
                    2e:4c:20:7c:5e:c1:08:7b:8c:01:a6:a6:98:4d:37:
                    54:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:53:F2:7C:CC:5B:DA:6B:2D:5B:8D:B5:2F:7B:BE:A4:25:55:01:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/79ceed0b-2a70-3be2-9a97-ecf9b58f0e35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/c7504c4b-7514-464e-a79e-1f4b462c7e7c.crl

            X509v3 Authority Key Identifier:
                keyid:BD:B1:CF:BB:D1:DE:D3:95:B4:EF:EB:D8:1F:97:D9:B9:D7:DF:45:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.212.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:ba:eb:e9:a6:e2:e9:79:16:9e:1e:a1:86:cc:5a:4f:0a:11:
         00:c1:c4:da:ff:5a:c3:97:a4:c5:82:1f:1e:97:4e:3e:b6:d9:
         fc:ca:57:ce:39:36:23:6e:35:7b:b0:e4:2b:56:be:d1:3a:f5:
         b4:dd:a6:d2:a8:41:f9:93:cd:b6:57:c1:2c:af:f0:f8:1f:57:
         83:66:0b:db:3a:86:fe:23:e3:65:44:7f:28:5a:2c:b5:ed:ca:
         6e:38:f7:dd:ff:46:89:f2:0d:af:de:3a:40:00:d9:e3:5c:49:
         92:21:e7:cd:1c:5f:5a:24:ef:11:39:e2:00:62:5a:53:fa:95:
         32:e3:6e:16:71:ab:14:9e:97:4f:d9:8a:b9:4a:1c:cd:2f:81:
         52:83:71:3e:4e:1c:90:7c:85:60:4c:6c:43:12:90:50:97:e5:
         e3:62:40:a6:29:9c:f2:e0:84:46:83:05:d4:0b:b8:03:68:38:
         21:cb:7d:7b:91:ef:d7:14:d2:7b:d8:bf:3c:da:a0:3d:b5:22:
         6c:9d:79:86:0c:57:dd:20:a9:01:7b:2d:11:d6:ec:67:d9:10:
         1d:a3:0e:d8:f1:34:8e:0e:1a:22:1b:66:49:a5:f2:cd:37:50:
         8f:ff:79:12:3f:9e:ba:36:f4:e6:54:a4:f5:23:1a:6d:00:45:
         28:86:cd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 02:27:19 2026 by rpki-client