Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195/13ed9db5-321c-374b-bf2b-a85bf0e64e43.roa
File:                     13ed9db5-321c-374b-bf2b-a85bf0e64e43.roa (raw, json)
Hash identifier:          pFQD1hpASQW1SrFcFFkzgf8v4x2FPq612ACgR96wEOo=
Subject key identifier:   EE:61:FF:97:0E:9F:F2:17:3C:5F:78:7A:0B:7F:62:1C:C0:E0:D8:9B
Certificate issuer:       /CN=87edc032-d938-4504-bf4b-96c599e50195
Certificate serial:       010D0C9F4328584E35FF1E86CC653902BB41F2E0
Authority key identifier: 1B:EE:D5:18:60:7D:3D:A9:C2:E8:2D:B7:0E:0E:9D:D0:0C:8D:61:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195/13ed9db5-321c-374b-bf2b-a85bf0e64e43.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     27005
IP address blocks:        207.254.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195/87edc032-d938-4504-bf4b-96c599e50195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195/87edc032-d938-4504-bf4b-96c599e50195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:1e:86:cc:65:39:02:bb:41:f2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87edc032-d938-4504-bf4b-96c599e50195
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=f405e7e4-435d-44e7-b3e4-db40523cb2fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5c:b8:fa:84:10:a6:27:ca:55:4c:14:34:15:
                    9b:ad:b6:ec:d7:18:99:1e:85:55:e4:dd:0c:83:ff:
                    f8:c0:16:b0:67:c1:3d:69:3e:9a:88:b2:fa:08:10:
                    54:81:20:00:62:c3:4c:9a:85:7e:4f:eb:9d:bc:f6:
                    9c:7e:9f:34:f0:31:c8:1d:27:81:e3:41:c7:b3:7f:
                    ed:3e:0f:ea:54:56:4b:3a:6f:90:38:a8:96:c1:12:
                    f4:1e:d7:2b:92:91:57:21:91:48:92:65:44:16:8e:
                    02:57:a4:5e:c5:80:cd:d5:50:85:1d:25:12:56:03:
                    36:dd:72:18:21:01:dc:dd:0b:c7:ed:51:a4:79:62:
                    1c:90:81:d8:ab:01:a4:7f:5a:b9:60:a4:5a:70:5d:
                    c2:1f:a2:d5:ee:4b:82:ad:4c:73:54:9e:4a:d0:82:
                    ed:a3:95:99:9c:b3:2a:57:ca:f0:2d:0b:61:c1:d5:
                    67:f1:f9:3e:6c:ea:a9:c1:63:b1:dc:95:6f:4d:ac:
                    20:43:80:b2:04:ea:41:97:0d:7c:68:97:61:72:06:
                    1f:de:a4:5d:a0:bd:f6:66:e8:26:9b:4d:c0:fe:02:
                    d9:8d:05:d6:0a:23:04:88:7b:ab:16:0f:bd:3e:ad:
                    6c:78:7a:a8:ae:0e:e5:dd:29:3e:f8:5b:11:69:03:
                    c9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:61:FF:97:0E:9F:F2:17:3C:5F:78:7A:0B:7F:62:1C:C0:E0:D8:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195/13ed9db5-321c-374b-bf2b-a85bf0e64e43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195/87edc032-d938-4504-bf4b-96c599e50195.crl

            X509v3 Authority Key Identifier:
                keyid:1B:EE:D5:18:60:7D:3D:A9:C2:E8:2D:B7:0E:0E:9D:D0:0C:8D:61:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87edc032-d938-4504-bf4b-96c599e50195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.254.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:36:68:10:c9:d8:14:a6:ac:75:ca:37:6f:cf:91:2e:f8:aa:
         23:b0:37:b6:7b:a5:32:e1:3f:29:f2:3a:eb:68:8f:cc:97:50:
         4a:fc:6b:0a:f0:50:2e:e3:13:9b:02:3a:27:d3:cb:e7:83:f3:
         91:1f:96:6f:63:d1:e6:b9:1e:2a:30:36:a5:bc:6b:62:1d:b0:
         eb:f0:31:1d:9c:85:4c:92:1c:b6:67:ec:1f:75:a0:40:31:a8:
         23:a7:2d:93:65:a8:51:44:f6:ce:47:2e:66:df:6e:a7:cb:65:
         15:87:0f:48:9d:ef:78:22:c5:85:59:78:2b:2c:a9:59:bd:47:
         aa:83:19:6a:7c:93:c3:d4:d9:26:e8:48:8d:f8:3f:e9:32:68:
         56:ba:f2:b5:d0:32:36:38:18:f7:aa:c4:4e:d0:f6:ab:d4:bf:
         e8:3d:73:1c:c7:17:47:20:22:89:7f:a2:d2:66:6f:06:ab:4c:
         e0:40:a7:00:5b:86:a5:f0:84:ea:d9:f6:16:eb:02:4b:62:6f:
         a6:75:a1:e7:f3:d6:51:d1:4e:59:09:25:c5:0f:84:69:74:09:
         d2:95:ab:65:c6:1b:d4:68:35:ee:dd:73:0b:fb:09:e7:32:a6:
         52:72:ef:e4:c2:65:f4:7a:98:f2:b1:13:8b:33:fd:65:2f:00:
         01:e1:16:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 21:04:06 2026 by rpki-client