Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/dfc8d6b7-753d-3700-b5d8-55f8146d0a53.roa
File:                     dfc8d6b7-753d-3700-b5d8-55f8146d0a53.roa (raw, json)
Hash identifier:          +x71YY9pZm3yTDPfznr1pLJj9Vp5jydcW9iV9C0TrGY=
Subject key identifier:   7B:9D:D9:D3:08:6E:E3:65:52:EC:78:51:37:35:F0:3C:FD:FB:8E:24
Certificate issuer:       /CN=7607f87f-d9ec-4a0f-b611-d0eeadde6b42
Certificate serial:       010D0C9F4328584EA78F3B8676AEAC9899F17D40
Authority key identifier: 94:D9:6A:80:59:34:44:86:89:4A:48:DB:CB:87:19:37:9A:09:97:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/dfc8d6b7-753d-3700-b5d8-55f8146d0a53.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14618
IP address blocks:        198.204.9.0/24 maxlen: 24
                          198.204.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:3b:86:76:ae:ac:98:99:f1:7d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7607f87f-d9ec-4a0f-b611-d0eeadde6b42
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8787f51a-1f6e-4fd0-8534-e3a40dbf2861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1b:fb:8d:bb:06:65:51:fd:69:34:e4:22:a2:
                    9a:86:3f:a6:4a:fd:60:0e:39:7e:ae:c3:6e:78:a0:
                    79:da:c3:0a:50:34:e9:c3:c3:f7:9c:ad:39:03:27:
                    06:9a:6e:9b:e8:4f:1e:dd:8c:89:f0:89:8b:72:da:
                    f3:ad:3b:69:26:73:d3:15:c6:f9:c3:f3:54:28:ee:
                    3c:85:04:ea:24:ae:7e:e0:ae:7b:2f:38:1a:55:a5:
                    6f:85:e9:3e:f0:d7:a9:21:bd:e1:9a:01:07:19:f8:
                    03:7b:7f:bf:c1:f0:94:3f:67:69:b7:23:9c:36:cb:
                    c7:14:1d:7b:50:96:e5:70:f4:7d:86:5e:9d:7e:de:
                    6a:1c:dd:3b:a2:96:4c:2b:6a:dd:31:a6:8e:95:7c:
                    2c:72:07:cc:32:e6:35:a8:ae:b3:89:86:2a:84:3d:
                    1f:7a:86:61:33:b9:c1:f5:cd:f3:64:c0:d8:9d:76:
                    bd:46:4f:67:f8:bc:fc:be:0a:8f:4a:df:d8:70:07:
                    9f:4b:d6:0f:80:bd:7c:25:d3:1f:32:f0:d1:9b:01:
                    87:65:65:bd:a2:fa:7b:b0:41:b7:df:5a:2c:0f:ed:
                    13:5b:d7:54:c4:24:8b:7c:68:4a:2c:be:e2:2a:53:
                    0b:db:29:7e:af:ed:06:7f:65:68:80:f1:ef:ba:c2:
                    23:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:9D:D9:D3:08:6E:E3:65:52:EC:78:51:37:35:F0:3C:FD:FB:8E:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/dfc8d6b7-753d-3700-b5d8-55f8146d0a53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.crl

            X509v3 Authority Key Identifier:
                keyid:94:D9:6A:80:59:34:44:86:89:4A:48:DB:CB:87:19:37:9A:09:97:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.204.9.0/24
                  198.204.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:52:21:cf:de:bf:90:35:6b:21:6b:a1:f2:7f:4e:59:dc:71:
         f9:08:71:e4:5f:f7:b2:d5:c0:0f:19:1f:f1:3e:6b:c5:f3:77:
         73:02:99:a5:1c:fc:ad:d3:3a:7e:5a:46:bf:28:5b:14:28:12:
         5d:87:4a:6b:5c:f5:83:ac:d8:15:37:07:3c:4e:62:6f:eb:f0:
         8a:eb:7d:2b:99:a8:b8:d5:c8:6e:3e:ff:51:91:8a:1e:52:ec:
         a9:77:49:a4:36:17:ef:e2:e0:77:fe:e3:84:60:63:4c:5f:c2:
         61:fc:d4:02:ad:6f:75:a2:bf:46:cc:1f:6c:b1:e2:6e:c2:46:
         60:88:39:bc:da:17:50:58:34:8e:14:b8:b6:f9:c0:53:f6:ce:
         36:ac:63:a1:02:bd:fd:47:e9:7e:bc:ba:6a:98:a2:11:8c:ce:
         0b:cd:c2:79:5d:24:85:06:ba:2d:f2:37:dc:fb:1a:83:d2:96:
         d1:95:bc:31:50:11:28:6f:9c:c1:ec:f9:65:7c:14:fe:bd:0a:
         bd:aa:57:59:b6:c6:42:01:be:5e:11:27:33:a7:0b:63:da:5a:
         13:40:4c:23:a0:8c:a7:e0:c2:af:e3:4c:c2:95:3e:e3:d7:bc:
         bf:bf:bb:58:63:7e:a3:d4:c7:1f:c5:92:ff:67:f2:ef:f5:7f:
         bd:05:14:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:57:09 2026 by rpki-client