Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/190da15e-c06a-3eb9-87c5-9d8fd604a77d.roa
File:                     190da15e-c06a-3eb9-87c5-9d8fd604a77d.roa (raw, json)
Hash identifier:          iI7dBSNcByQZwo0ovW5JtGEVZ9M6WQ9bHcY2I9AMMyU=
Subject key identifier:   9A:72:77:46:F7:03:61:31:51:74:35:15:F3:C5:D2:F4:32:6A:61:DB
Certificate issuer:       /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
Certificate serial:       010D0C9F4328584E2AD458AF8C45185445D89A80
Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/190da15e-c06a-3eb9-87c5-9d8fd604a77d.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     3807
IP address blocks:        207.196.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:58:af:8c:45:18:54:45:d8:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=cae00205-e96f-4278-98de-9a5dc135daa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9e:40:2d:47:44:f6:2c:ff:ce:85:c3:5e:d5:
                    a8:ed:d2:1e:6e:b5:e6:f0:d0:5a:62:6a:19:82:45:
                    66:3a:db:01:61:ed:59:47:71:b7:d4:f6:37:86:da:
                    51:82:ab:8f:10:3b:d9:53:cb:cc:54:c5:e6:90:61:
                    df:c3:2c:cc:f9:c7:ac:d4:59:60:3a:e5:f5:50:14:
                    a5:29:12:a9:99:11:b6:40:50:5d:30:2b:6d:47:f6:
                    25:10:f0:d0:2c:da:0a:9f:29:d4:03:cd:f3:3b:18:
                    16:66:c3:91:a5:2f:c7:20:01:b0:2e:f1:2b:24:c4:
                    9a:2c:58:cc:66:16:54:4f:40:ae:05:d4:eb:fd:ed:
                    05:a5:6b:29:18:2f:07:cc:85:71:de:f6:e7:e0:67:
                    e7:12:c2:c6:1f:1c:83:10:8f:95:06:1d:2e:d6:42:
                    b5:e2:2a:cf:02:51:ed:a7:cc:9a:86:7a:cb:db:40:
                    55:94:15:86:00:39:77:bf:de:f6:c1:cd:07:74:c7:
                    ca:12:fe:56:f7:6e:43:b7:e2:74:4e:aa:4f:e4:9b:
                    43:d2:66:61:ca:96:cc:31:e2:d3:ef:5d:4f:72:c9:
                    49:8b:b1:d0:63:62:70:8d:ea:07:f7:f2:de:41:3f:
                    3c:8d:2f:6b:ec:81:c7:14:f5:75:94:db:64:15:ff:
                    40:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:72:77:46:F7:03:61:31:51:74:35:15:F3:C5:D2:F4:32:6A:61:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/190da15e-c06a-3eb9-87c5-9d8fd604a77d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl

            X509v3 Authority Key Identifier:
                keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.196.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:aa:86:db:73:2e:c6:ac:37:08:a8:19:04:40:28:1c:37:c7:
         17:a3:5b:41:76:17:00:b5:3c:ea:7a:ad:da:bd:74:c3:69:1a:
         83:94:7e:f6:38:d2:30:86:9a:6c:d4:eb:10:a5:e6:2f:00:11:
         bb:9a:87:ac:bf:75:b9:8f:3a:91:34:a4:0b:5c:bd:c0:95:45:
         bb:47:5e:df:58:95:c0:ca:83:c5:a8:24:2f:56:17:0a:32:38:
         d8:21:22:bc:62:a5:44:ae:71:80:0c:7d:1c:e3:9e:b7:11:d6:
         83:b7:ff:89:b6:f2:1d:25:d6:86:26:5d:0a:de:04:7a:9d:7e:
         bf:96:7e:61:f3:b9:15:46:e8:cc:ee:f4:3e:39:13:fa:fb:56:
         07:3c:ac:43:57:2c:e1:8f:09:49:d4:ba:c1:ea:d6:b4:b4:4e:
         ab:b7:7b:8b:c4:2b:c5:7c:7d:68:4e:c1:1c:15:29:96:a1:f1:
         28:ff:f6:19:f7:54:72:a8:b0:00:85:fb:11:6b:b2:ae:9d:1b:
         1f:c1:e3:9d:fa:d1:8f:cf:b5:3e:98:fb:a8:2d:db:2f:89:11:
         20:6f:31:56:f9:4d:2c:fe:6b:5c:dc:cf:c6:dd:e2:22:8f:81:
         b5:46:00:0c:b6:14:ce:dc:c5:06:dc:83:10:4a:d6:ff:d6:0f:
         a5:da:b4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 11:14:26 2026 by rpki-client