Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7b9c18c1-0694-310a-913c-6e4177983fb2.roa
File:                     7b9c18c1-0694-310a-913c-6e4177983fb2.roa (raw, json)
Hash identifier:          bCNulduLInsFNliRwdRIAGCc2CVxAn0MqgDE5M9hCdI=
Subject key identifier:   7B:C9:79:21:1E:ED:24:A5:23:8D:57:B5:AE:04:7E:9F:34:C0:AA:0F
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584E7A64D1A762AF744695D36F40
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7b9c18c1-0694-310a-913c-6e4177983fb2.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     62904
IP address blocks:        170.130.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:d1:a7:62:af:74:46:95:d3:6f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=faf50adc-c39a-4256-b240-ee90a9fdce8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:10:15:e3:52:fb:ad:2c:bd:a6:03:59:32:57:
                    9d:2c:61:b6:27:a1:00:21:af:5f:dc:9d:c6:6a:7d:
                    cb:eb:ef:9e:2f:0f:ec:37:d2:53:47:ac:73:9b:a0:
                    18:99:85:97:f9:c7:f9:f1:dc:41:0b:43:88:a7:d5:
                    3b:eb:e9:6c:36:9d:8a:d6:a5:b9:26:23:a6:9d:d1:
                    0d:55:36:1c:2b:42:54:2d:7e:2a:3d:dc:9b:ee:5f:
                    0c:b9:a0:10:7c:83:5f:c6:62:ce:34:2f:3c:eb:df:
                    e8:d9:b5:c7:d9:b3:47:8e:28:81:c7:3d:70:4e:84:
                    7c:27:b1:5c:5e:f9:14:ad:76:dd:8a:35:bd:73:d5:
                    a5:95:b9:3e:d6:aa:f4:bd:17:88:d5:a7:57:be:59:
                    8c:5e:41:06:a9:b2:1a:1a:0c:91:43:43:be:a9:d8:
                    68:be:90:27:7b:fe:2e:a8:78:25:3a:64:b1:6c:88:
                    3e:35:bb:dc:88:56:25:b1:79:cd:96:26:da:1b:2b:
                    83:90:9c:76:14:20:ad:d8:14:ca:6f:74:d4:95:79:
                    8c:57:2c:c9:c7:a4:2c:7f:7e:e8:7f:f0:1f:5f:22:
                    87:2d:3c:6e:b9:59:df:41:2c:9d:d2:0f:37:91:dd:
                    c2:a2:8b:77:b6:12:a3:c1:72:03:15:df:4a:39:1a:
                    af:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C9:79:21:1E:ED:24:A5:23:8D:57:B5:AE:04:7E:9F:34:C0:AA:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7b9c18c1-0694-310a-913c-6e4177983fb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.130.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:1a:c7:85:42:ab:da:92:6e:8f:a4:e7:fc:f6:37:2a:e8:34:
         ff:6c:cc:ac:4f:12:c2:06:af:23:92:9c:ad:4a:22:c5:8f:55:
         08:00:ea:b7:31:c0:df:d2:54:71:bc:8b:f4:b6:d2:9b:28:55:
         cd:89:84:c6:2d:4a:bc:3e:8e:58:98:85:1a:96:31:2d:13:0b:
         14:6f:5c:83:37:4c:74:01:e1:95:7a:ac:1c:84:eb:50:a3:f3:
         94:c8:88:a7:bd:c1:f1:23:4a:db:17:c6:df:c2:6e:91:0e:dc:
         c3:fa:47:2a:2c:f3:e3:d6:35:14:1d:de:ad:06:aa:77:63:3d:
         9e:b2:69:9b:6d:72:72:51:1e:c8:10:5b:00:3d:bf:79:6b:d9:
         fb:71:cb:35:4b:6f:9c:7c:03:e9:81:88:bc:ca:4f:f4:b6:05:
         d4:14:3a:c6:c5:4a:09:d6:af:7b:47:d1:3b:63:f5:1b:43:2d:
         73:65:ee:04:82:86:4c:23:35:4b:07:b8:9e:2b:53:d6:0f:6c:
         15:dd:b0:dd:69:be:45:ad:66:88:da:ab:19:b2:d8:d0:0f:df:
         54:e9:e4:98:02:58:2f:27:b1:74:58:fa:e5:1c:8f:26:be:f9:
         ed:75:4b:8c:d7:6f:d2:b2:ce:6a:29:59:7b:a0:c4:2a:35:2b:
         57:65:63:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:29:40 2026 by rpki-client