Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c4147360-87bc-49de-9f1c-3c020bc4f1ee/0e7d721a-8234-33e7-8827-d38683af20a1.roa
File:                     0e7d721a-8234-33e7-8827-d38683af20a1.roa (raw, json)
Hash identifier:          Yh6Y+UtwU/YKmf0Ktarrxwr/EOjUqKlhi+G44KtrPqs=
Subject key identifier:   19:70:04:4E:5E:B6:A9:A0:BA:39:BC:3C:C8:C5:5A:A2:E7:F2:95:88
Certificate issuer:       /CN=c4147360-87bc-49de-9f1c-3c020bc4f1ee
Certificate serial:       010D0C9F4328584E7BCA2A466F47FC33B471F040
Authority key identifier: 99:BC:B1:E3:04:DA:A9:29:0F:BA:75:31:F2:6E:85:53:FD:C3:CA:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c4147360-87bc-49de-9f1c-3c020bc4f1ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c4147360-87bc-49de-9f1c-3c020bc4f1ee/0e7d721a-8234-33e7-8827-d38683af20a1.roa
Signing time:             Mon 13 Jul 2026 09:00:12 +0000
ROA not before:           Mon 13 Jul 2026 09:00:12 +0000
ROA not after:            Sun 11 Oct 2026 09:00:12 +0000
asID:                     20210
IP address blocks:        206.109.104.0/23 maxlen: 23
                          206.109.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c4147360-87bc-49de-9f1c-3c020bc4f1ee/c4147360-87bc-49de-9f1c-3c020bc4f1ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c4147360-87bc-49de-9f1c-3c020bc4f1ee/c4147360-87bc-49de-9f1c-3c020bc4f1ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c4147360-87bc-49de-9f1c-3c020bc4f1ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7b:ca:2a:46:6f:47:fc:33:b4:71:f0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4147360-87bc-49de-9f1c-3c020bc4f1ee
        Validity
            Not Before: Jul 13 09:00:12 2026 GMT
            Not After : Oct 11 09:00:12 2026 GMT
        Subject: CN=7c5a3189-5e3e-4552-9ec3-82d91a71ff29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1b:59:62:1c:a7:c6:f0:c8:de:aa:ef:b9:ab:
                    db:54:50:5d:42:e5:f1:7b:fe:25:44:73:64:88:da:
                    8f:1a:65:0a:65:2c:c2:be:9b:44:24:12:17:b6:b9:
                    f2:89:20:eb:05:f7:2c:70:c9:80:28:1a:ba:cf:31:
                    24:6c:63:9a:60:61:5e:c0:a7:9a:4f:0b:44:fb:b0:
                    e7:4b:b6:e7:74:c8:82:5d:c9:63:4d:5b:a2:7e:f3:
                    a5:74:dc:e8:9c:a8:dd:9b:4c:9c:33:fb:04:e2:7f:
                    37:82:40:c8:5d:80:c2:8e:63:25:eb:32:5a:11:bb:
                    33:ac:cc:be:91:a5:38:0e:73:4f:53:8d:2c:a1:87:
                    fe:18:90:04:f4:8d:ca:df:98:3a:eb:20:d9:e3:54:
                    67:9c:94:d0:b3:57:04:b6:74:6b:9d:ba:4d:dc:00:
                    18:28:21:dd:3f:f6:d9:99:d5:17:84:cb:77:9b:18:
                    bd:c1:cf:87:b5:5a:fe:71:cb:05:33:f6:91:7e:9d:
                    42:1e:ef:f2:43:53:23:63:57:6e:8a:87:a5:23:72:
                    9a:c1:d7:47:ca:85:ac:5d:4b:30:24:f3:0a:22:e2:
                    6b:a6:52:6a:09:1e:fc:9d:f8:89:ba:54:a0:60:52:
                    b7:a7:99:3b:43:02:12:8e:38:17:c1:1d:3e:fd:04:
                    ea:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:70:04:4E:5E:B6:A9:A0:BA:39:BC:3C:C8:C5:5A:A2:E7:F2:95:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c4147360-87bc-49de-9f1c-3c020bc4f1ee/0e7d721a-8234-33e7-8827-d38683af20a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c4147360-87bc-49de-9f1c-3c020bc4f1ee/c4147360-87bc-49de-9f1c-3c020bc4f1ee.crl

            X509v3 Authority Key Identifier:
                keyid:99:BC:B1:E3:04:DA:A9:29:0F:BA:75:31:F2:6E:85:53:FD:C3:CA:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c4147360-87bc-49de-9f1c-3c020bc4f1ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.109.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:de:4e:0b:93:14:4f:7c:62:2d:06:d1:4e:34:40:b6:73:94:
         9c:39:20:d7:ed:5b:91:f7:49:bc:2d:cc:36:44:cf:5b:64:65:
         b5:de:33:87:6d:00:68:f9:56:f3:18:63:84:1e:b9:22:24:b8:
         ba:f2:f6:93:d2:e1:df:9f:4d:35:1f:63:4a:b2:df:a9:a0:df:
         95:4f:f6:a3:24:58:44:d2:d4:0b:70:69:7c:6b:26:ae:d0:5f:
         c9:4d:40:f7:c8:34:8d:54:38:ff:3e:e3:23:f2:ab:6c:d2:a9:
         a8:8e:e3:c7:bd:b7:a1:4d:30:a8:df:8e:eb:05:3a:e3:63:0f:
         6e:7e:83:22:c9:f0:d2:02:49:3a:38:67:fb:b5:cc:c6:7f:20:
         b4:13:2d:3a:68:1e:66:ad:cd:b8:76:3b:83:e0:60:d1:c2:63:
         f6:85:45:05:b7:46:9c:ed:1f:be:fb:68:90:62:d9:73:20:fc:
         d2:03:fb:49:3b:2b:42:e0:86:f9:75:bd:81:2c:82:e3:75:d1:
         71:cb:ff:8d:a7:e9:73:83:68:4f:7f:59:7f:80:e1:c3:9e:a2:
         02:51:b4:7c:c4:b9:78:b5:ee:f2:74:92:ec:f7:e2:a2:e0:29:
         2d:5c:6a:e0:0c:19:05:97:14:a0:c1:af:38:97:2f:4c:24:d0:
         8d:e8:a1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 05:26:11 2026 by rpki-client