Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/8327bd7d-82fa-3301-85af-763f3c213104.roa
File:                     8327bd7d-82fa-3301-85af-763f3c213104.roa (raw, json)
Hash identifier:          eavV6T567uGZ7m4Jiiwd2o8goeOh/URVpp+P14a0GBo=
Subject key identifier:   53:A2:DC:B9:5A:C9:15:1B:29:71:FD:9C:9B:9B:AC:B2:CD:EC:27:B8
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F4328584DEDE0B0A54B060815C7E6D300
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/8327bd7d-82fa-3301-85af-763f3c213104.roa
Signing time:             Sat 23 May 2026 13:00:31 +0000
ROA not before:           Sat 23 May 2026 13:00:31 +0000
ROA not after:            Fri 21 Aug 2026 13:00:31 +0000
asID:                     834
IP address blocks:        207.210.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ed:e0:b0:a5:4b:06:08:15:c7:e6:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: May 23 13:00:31 2026 GMT
            Not After : Aug 21 13:00:31 2026 GMT
        Subject: CN=0aaef8b0-a83f-48de-adae-782813a7c4ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:92:05:a5:bf:3a:2e:cc:6d:63:d4:c9:12:66:
                    f8:db:11:10:18:47:56:4b:95:53:45:26:88:85:f1:
                    ac:1d:92:b0:df:3d:14:06:7a:af:81:3a:3a:cb:36:
                    00:fb:cd:bf:df:3c:63:e2:c3:b0:e6:00:f0:32:7c:
                    59:97:05:05:8a:69:5b:85:33:56:45:8a:24:c1:ce:
                    9c:4e:5d:e8:b6:88:ff:a6:0f:90:a5:22:8f:0a:94:
                    2e:25:a9:e2:d4:c3:f6:05:12:0a:d7:2d:be:4d:c7:
                    0c:0e:20:a6:c8:79:5e:bf:59:1d:1e:62:e1:66:9c:
                    1b:81:36:8b:44:78:63:ab:c4:af:e5:d3:d1:ac:f4:
                    84:37:57:c2:29:d6:2c:51:13:15:56:71:ae:77:8c:
                    5f:a8:51:53:47:b8:3b:78:c7:66:d0:b2:ee:96:75:
                    8c:5b:57:b4:31:8a:e0:ca:91:13:eb:2d:ab:85:81:
                    bd:29:29:9b:9b:17:c2:6a:74:d9:1d:52:17:b2:fd:
                    52:c1:1d:f5:ae:9d:56:7e:39:33:e5:76:19:f5:d6:
                    a6:49:dc:f6:98:37:90:a1:f7:c3:86:dc:32:51:2b:
                    d3:f9:11:eb:10:6c:ad:bc:d7:43:08:5d:61:f8:25:
                    26:44:df:69:ca:db:7d:da:eb:25:ed:2b:ba:6c:51:
                    1f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A2:DC:B9:5A:C9:15:1B:29:71:FD:9C:9B:9B:AC:B2:CD:EC:27:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/8327bd7d-82fa-3301-85af-763f3c213104.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.210.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:e3:6f:08:dc:08:19:d7:5f:13:f1:ac:64:49:bb:cf:b2:bb:
         ca:28:11:fe:0a:6f:d6:4c:d7:67:9a:15:97:8d:7d:86:68:4a:
         d4:a4:97:bc:f9:4d:2a:b9:a3:94:66:8e:48:27:54:85:7d:d3:
         05:db:e3:00:53:db:d4:08:82:2e:52:12:91:b4:6c:2c:4a:4a:
         5c:38:aa:39:b0:ae:ac:4b:9b:72:c6:07:4a:52:f6:57:1d:f3:
         64:f9:3f:1f:14:bd:b9:ca:91:16:bb:b7:01:3b:5f:76:a1:9b:
         78:58:8e:4a:1f:19:cf:84:9c:05:92:8c:3e:50:0f:f5:fc:8f:
         a9:a4:8f:ce:48:36:61:1e:4c:73:ef:47:08:99:b7:67:3e:6e:
         b1:24:8b:36:e1:d7:eb:1a:f0:f2:c5:72:a8:5d:56:24:31:81:
         9a:ec:84:0f:97:2c:05:4a:bd:45:db:aa:ed:96:35:75:26:ad:
         b7:5e:02:3d:7d:16:f0:8d:98:ff:3e:29:e6:7d:46:81:fd:13:
         f5:0a:bd:58:13:18:11:c2:02:7e:00:e3:d3:7a:ef:ee:92:d6:
         96:40:29:f7:fc:29:25:00:e1:a3:c1:cf:32:ed:80:fb:5b:26:
         3f:e2:8f:5f:89:33:bc:65:34:ca:d3:cb:e7:ad:66:e2:84:f5:
         d3:8c:9a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 08:37:02 2026 by rpki-client