Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/7e5c8f56-693f-3313-9ab6-bed527f4d4a9.roa
File:                     7e5c8f56-693f-3313-9ab6-bed527f4d4a9.roa (raw, json)
Hash identifier:          ZjURUvu0TT+9jwZYKwSSxGpDJ/ZegCGhpl86E9Q2bnY=
Subject key identifier:   CB:16:01:D1:1E:41:48:C3:F8:53:E0:7A:84:79:C4:23:FC:41:1E:44
Certificate issuer:       /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
Certificate serial:       010D0C9F4328584ECD3722D015AE415497257080
Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/7e5c8f56-693f-3313-9ab6-bed527f4d4a9.roa
Signing time:             Tue 11 Aug 2026 13:00:11 +0000
ROA not before:           Tue 11 Aug 2026 13:00:11 +0000
ROA not after:            Mon 09 Nov 2026 14:00:11 +0000
asID:                     3807
IP address blocks:        207.196.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cd:37:22:d0:15:ae:41:54:97:25:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
        Validity
            Not Before: Aug 11 13:00:11 2026 GMT
            Not After : Nov  9 14:00:11 2026 GMT
        Subject: CN=25d682ce-5227-4e57-afd9-7aac3a350f3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7e:4e:95:66:34:66:aa:0b:20:c4:c4:b8:ac:
                    9b:3f:c3:99:12:4d:fd:28:68:7b:00:51:ba:b7:ce:
                    fe:95:15:48:90:cb:ec:e0:19:8c:a1:79:d3:b2:a7:
                    71:7c:27:32:66:3d:71:2e:3d:0e:89:82:87:ee:95:
                    42:c5:40:9e:2c:fd:69:0d:e7:65:5d:0d:a0:0e:03:
                    c5:ce:2e:38:f5:58:4a:1a:36:22:4c:a7:23:5a:63:
                    91:90:db:f2:99:10:1d:fd:79:da:db:0d:65:4d:e2:
                    c4:ac:9c:95:e2:9d:cf:d3:13:9b:3e:e4:15:80:6d:
                    7b:2a:27:fc:9e:17:34:36:35:ca:f2:e1:80:80:1f:
                    e4:93:57:5c:57:00:55:fe:6f:50:5f:bd:ee:e1:d2:
                    f5:b0:43:aa:8c:5c:ca:15:42:9b:c4:41:ab:8d:b5:
                    1e:a7:17:0a:f7:c9:e8:52:e7:66:eb:1e:de:27:c7:
                    f7:71:ed:22:34:44:d6:ca:78:0d:fb:90:80:65:23:
                    b4:d7:e9:b5:f7:93:07:75:c0:44:a9:87:ad:7c:20:
                    f0:60:07:b4:68:71:c7:a7:3a:a7:cb:6c:2e:a8:94:
                    a0:40:f8:dc:81:b1:23:2d:04:6c:a7:8d:f7:41:58:
                    b8:94:95:78:3b:6a:b2:3e:6b:f6:61:17:d7:ec:03:
                    af:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:16:01:D1:1E:41:48:C3:F8:53:E0:7A:84:79:C4:23:FC:41:1E:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/7e5c8f56-693f-3313-9ab6-bed527f4d4a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl

            X509v3 Authority Key Identifier:
                keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.196.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:5a:4d:a3:06:9a:ec:b0:e3:d1:fd:f1:c5:26:ce:78:79:8c:
         d6:78:33:18:e1:8d:a0:f7:d9:e2:01:d7:c1:4e:d1:a2:7e:f9:
         b6:d4:02:8a:94:9d:b0:ab:51:c6:45:b0:e4:de:75:7c:1e:d5:
         8f:14:34:7e:51:ff:9c:03:d4:94:4a:c9:6a:f5:6d:ec:53:64:
         96:be:1f:9f:e4:58:0d:c3:1a:43:58:e2:bf:e1:38:84:7b:fb:
         f2:66:e5:4c:54:44:44:af:ac:03:50:8a:5c:e3:5b:65:a2:ea:
         74:09:69:4a:ba:fe:d3:6b:c1:e7:82:ce:72:bc:63:f7:da:80:
         cb:07:7e:c5:a4:f4:c6:4e:77:51:55:a6:d3:2d:42:05:ce:7d:
         49:48:1e:07:ed:39:27:66:8c:fe:6d:3c:75:a7:43:12:2f:15:
         9c:aa:79:4d:1b:6e:38:fc:c7:cd:0e:92:c2:88:5c:d5:32:9a:
         00:b9:8f:a2:01:ee:f1:13:9f:5e:e9:7c:cf:aa:5e:7a:46:b0:
         ff:da:e5:db:61:4f:1e:81:fb:45:19:58:85:36:f5:7b:f4:9d:
         1c:75:f1:a8:1f:d1:d3:c3:05:50:71:a7:50:b5:d0:f6:ec:54:
         80:52:f8:d8:94:24:ea:5b:2e:80:98:32:6b:b3:ea:b3:be:a2:
         5a:62:5a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 13:00:12 2026 by rpki-client