Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/d5fe870a-1fd2-3fbb-8dec-9246ffc8bcbf.roa
File:                     d5fe870a-1fd2-3fbb-8dec-9246ffc8bcbf.roa (raw, json)
Hash identifier:          3N1HALBIh/uUHHS7YWKa0GiJA6Wd+x0dY/nvVtKalPg=
Subject key identifier:   91:EA:36:CC:96:39:EC:B4:BE:79:D1:EC:62:56:02:C8:8E:06:D4:99
Certificate issuer:       /CN=e5c2b906-947b-452e-a546-6011e1a0e535
Certificate serial:       010D0C9F4328584E4129D260F1A9A3EB5FAA0320
Authority key identifier: 07:4F:E3:D0:AA:F0:11:BF:7A:CB:C8:51:6B:21:E5:BC:9E:5E:9F:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/d5fe870a-1fd2-3fbb-8dec-9246ffc8bcbf.roa
Signing time:             Mon 22 Jun 2026 09:00:11 +0000
ROA not before:           Mon 22 Jun 2026 09:00:11 +0000
ROA not after:            Sun 20 Sep 2026 09:00:11 +0000
asID:                     101
IP address blocks:        207.231.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/e5c2b906-947b-452e-a546-6011e1a0e535.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/e5c2b906-947b-452e-a546-6011e1a0e535.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:29:d2:60:f1:a9:a3:eb:5f:aa:03:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5c2b906-947b-452e-a546-6011e1a0e535
        Validity
            Not Before: Jun 22 09:00:11 2026 GMT
            Not After : Sep 20 09:00:11 2026 GMT
        Subject: CN=82f9f466-c480-4999-98b2-685720c7c269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:46:13:f2:b4:a7:61:6e:b4:9a:80:0d:7a:c1:
                    14:da:e2:f3:f2:68:d3:e8:e4:67:a9:c0:75:26:82:
                    6f:31:3c:90:ee:9c:3a:93:2e:d2:58:d9:bb:e4:4e:
                    71:cc:32:0a:b3:02:15:b3:8c:eb:53:d3:c9:21:06:
                    a9:d7:13:65:51:ec:70:2d:72:de:4e:ae:5a:9d:57:
                    08:e1:a0:3b:9b:a2:79:3b:af:9b:9a:74:a3:80:29:
                    59:d5:60:a0:60:81:92:39:59:6e:bd:b9:73:fe:f6:
                    0e:2f:6c:db:39:a4:59:fb:fd:fb:b1:43:ac:65:36:
                    e4:d3:13:5c:94:78:97:4b:bf:4a:57:73:a4:06:c5:
                    bf:d7:00:ab:8c:ba:8e:54:aa:b0:d0:ed:ad:27:ee:
                    aa:c9:69:0f:93:41:be:cb:b4:3f:65:c0:2d:4c:f7:
                    e8:c4:7b:26:cf:3b:eb:98:26:be:2f:ff:97:e0:5c:
                    40:4e:d4:ac:f2:b3:83:4f:90:87:d2:9c:a4:b2:7a:
                    d1:95:8d:fc:b3:21:1b:72:24:7c:b9:a8:88:73:79:
                    6c:93:ca:fc:17:70:5e:e8:e3:23:19:36:83:04:fc:
                    84:44:bb:16:69:6b:06:00:a4:5e:ef:99:09:bb:87:
                    4f:4e:32:24:41:66:f1:f2:47:31:6a:4f:35:2f:5a:
                    32:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:EA:36:CC:96:39:EC:B4:BE:79:D1:EC:62:56:02:C8:8E:06:D4:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/d5fe870a-1fd2-3fbb-8dec-9246ffc8bcbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535/e5c2b906-947b-452e-a546-6011e1a0e535.crl

            X509v3 Authority Key Identifier:
                keyid:07:4F:E3:D0:AA:F0:11:BF:7A:CB:C8:51:6B:21:E5:BC:9E:5E:9F:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e5c2b906-947b-452e-a546-6011e1a0e535.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.231.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:94:fb:75:bb:43:46:18:82:be:69:d5:49:ab:f9:84:60:26:
         95:e1:1c:60:c7:49:ac:7d:4c:15:71:43:fa:23:3e:f9:99:9d:
         83:db:ac:cb:37:ed:d4:0b:39:f3:45:d3:66:9a:7c:af:10:fa:
         e6:5c:98:08:eb:48:13:46:19:dd:1a:c5:d7:8e:db:a8:d6:24:
         65:57:2a:e9:db:b7:28:cc:49:06:81:ff:e1:51:39:6e:8d:eb:
         16:31:5b:d5:69:84:bc:82:ad:63:43:a7:88:a0:c4:56:78:d7:
         27:63:19:6b:da:79:99:11:6c:bb:ab:95:ca:6f:be:f4:cc:3c:
         9a:a2:b0:99:d5:04:38:0d:ce:37:c6:40:ad:53:3c:b3:30:3c:
         fc:9f:e3:fc:4a:68:0e:40:ff:48:90:04:1c:54:76:3c:33:ec:
         5c:61:32:88:d4:b8:b3:28:8a:8a:e9:b6:be:77:ea:c0:38:eb:
         d6:73:5c:35:f9:d5:b1:4c:58:a1:43:d8:ab:4b:61:cd:7d:00:
         b8:a8:be:0c:d0:95:ac:d5:e1:c8:b9:af:22:d8:a3:91:bc:62:
         a2:45:6a:b7:24:6a:f2:ec:cc:89:03:fc:2b:97:c7:bc:df:9b:
         85:36:d2:34:45:89:63:9a:69:4a:c7:a2:30:20:08:b6:6c:99:
         df:d8:ea:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:03:09 2026 by rpki-client