Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/9ecd159a-1f96-32de-b9d1-11893c413104.roa
File:                     9ecd159a-1f96-32de-b9d1-11893c413104.roa (raw, json)
Hash identifier:          6YmzLan1nu7Y47s/t7IN6EzQTJIJm4SnPbvn0r/u9BM=
Subject key identifier:   F1:B4:80:47:96:6E:EC:98:7F:9E:14:63:55:AF:E3:62:2C:61:38:29
Certificate issuer:       /CN=10fde7ec-a369-497a-a493-87b3e2e08143
Certificate serial:       010D0C9F4328584EBB11BA687A3818544515BD80
Authority key identifier: 3D:EC:41:DF:B8:67:D6:9F:63:8A:F7:EB:1D:A8:78:91:98:4A:A4:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/9ecd159a-1f96-32de-b9d1-11893c413104.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     397606
IP address blocks:        207.174.68.0/22 maxlen: 24
                          216.152.68.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/10fde7ec-a369-497a-a493-87b3e2e08143.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/10fde7ec-a369-497a-a493-87b3e2e08143.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:ba:68:7a:38:18:54:45:15:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10fde7ec-a369-497a-a493-87b3e2e08143
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=48be1e7f-91f0-429d-a0e4-62e3e85a700f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:66:2d:6a:58:91:83:fd:35:10:5e:bb:b3:87:
                    bb:9d:76:c8:8e:88:ab:e5:c9:fa:56:91:c7:78:a6:
                    e3:5d:50:e3:52:dc:eb:fc:4d:a0:52:81:c3:fd:6a:
                    75:a1:74:38:8d:14:d1:27:9a:d4:59:8d:0a:98:fc:
                    b4:4e:2d:77:af:c1:fa:69:fc:fb:68:71:cc:24:62:
                    a0:00:05:b1:57:74:6f:03:bb:76:8b:56:a2:5b:eb:
                    f1:c3:96:88:98:1d:b8:a9:b1:e5:54:45:92:2b:d3:
                    f2:b8:ca:d0:d8:7b:4c:b4:20:7b:c2:f2:1c:87:ad:
                    db:a3:22:33:4d:47:48:28:de:08:3a:9b:de:d6:04:
                    0f:7c:8c:85:af:2a:fb:80:cc:03:8e:46:4e:a7:e5:
                    f4:9b:1d:9f:86:38:c1:11:1d:bb:34:94:e8:e7:c0:
                    91:77:5a:35:15:f6:29:e6:39:48:70:18:b5:35:60:
                    48:8d:52:6e:4d:dc:e7:a3:43:fd:4c:dc:da:1f:a1:
                    28:ca:70:0c:b5:3e:38:d3:0c:51:b6:47:32:5f:7b:
                    b9:b7:fd:5e:72:22:2f:96:d0:12:be:20:58:5c:8f:
                    94:6b:c1:2e:14:ad:27:d3:90:48:f6:16:dc:d2:cb:
                    f0:c6:e1:c7:1e:5e:82:5b:15:3e:03:a8:96:bd:d6:
                    c4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B4:80:47:96:6E:EC:98:7F:9E:14:63:55:AF:E3:62:2C:61:38:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/9ecd159a-1f96-32de-b9d1-11893c413104.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/10fde7ec-a369-497a-a493-87b3e2e08143.crl

            X509v3 Authority Key Identifier:
                keyid:3D:EC:41:DF:B8:67:D6:9F:63:8A:F7:EB:1D:A8:78:91:98:4A:A4:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.68.0/22
                  216.152.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:8d:14:75:0c:49:0a:da:9a:da:3e:a8:6d:d4:e9:fe:80:24:
         10:c4:0a:cf:06:84:f3:58:ba:b2:ec:0e:19:e0:91:05:cc:b1:
         c1:33:df:73:7a:6f:85:ba:9c:b1:d4:85:cf:ee:70:c6:d9:6e:
         12:a8:c5:b5:8e:e1:71:8b:99:12:6a:40:69:62:2e:51:b8:5b:
         65:48:79:58:cd:b0:0f:99:63:fc:2f:b7:0a:02:a9:f7:4c:db:
         08:fe:14:50:f6:f1:c3:c7:22:e0:8f:4a:86:35:8a:61:9f:cb:
         ab:41:6a:42:7f:bf:a0:fa:8d:35:c7:41:76:57:b3:a3:c2:90:
         ed:c0:bd:b6:87:df:10:ce:e2:b7:4a:ef:f5:59:63:32:a1:51:
         db:d1:90:39:fe:bf:87:db:2c:b5:00:03:5a:59:d2:f1:a7:41:
         e9:45:05:75:24:fe:38:07:a4:65:e3:75:76:d9:e9:fa:af:cc:
         a5:8d:92:f3:e5:08:01:ad:2a:88:fb:db:97:60:d0:0e:b9:3b:
         69:15:a6:75:92:4b:8b:f6:4f:97:af:a2:54:79:2f:a5:07:5b:
         df:56:85:7b:f9:74:8a:01:a1:d7:3f:53:3d:3a:b4:5c:6c:b6:
         8b:2f:4b:dc:0e:dc:15:bd:b9:a6:38:af:0f:4c:72:9e:56:36:
         a4:54:e6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 19:07:59 2026 by rpki-client