Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/9858d804-8d14-3a47-ab8b-a149272638b7.roa
File:                     9858d804-8d14-3a47-ab8b-a149272638b7.roa (raw, json)
Hash identifier:          auA77RhMmQ+/UqYF9taCXW7XVGtawdLO24+iH0Y+fqA=
Subject key identifier:   87:98:D2:AD:63:7D:7D:2D:E1:9A:77:30:1A:C4:2B:A7:A2:55:13:E6
Certificate issuer:       /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
Certificate serial:       010D0C9F4328584E2AD450E1E7A3C95675060600
Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/9858d804-8d14-3a47-ab8b-a149272638b7.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     3807
IP address blocks:        207.196.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:50:e1:e7:a3:c9:56:75:06:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=4b87855d-0375-4137-822c-74afe73d608b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5a:1f:86:08:ed:21:4b:be:e1:aa:fb:b9:ca:
                    26:51:82:ee:a5:60:05:7d:8e:71:bb:b3:7a:15:50:
                    32:bc:02:8f:fb:7a:8d:86:7d:0d:b2:c7:a8:fb:c1:
                    cc:d7:fe:db:9e:25:1a:bc:28:fc:a3:8b:c1:2e:b0:
                    43:86:4b:6a:4f:87:8a:8c:41:45:b8:ff:c2:d9:c8:
                    ad:e7:b8:78:16:36:2b:7d:d8:83:01:e2:a2:9c:d5:
                    69:3f:44:b6:0b:aa:d1:44:18:96:47:02:e1:43:d3:
                    80:96:8f:01:73:aa:9d:4f:5e:af:c7:f2:ab:70:9d:
                    33:7d:be:c8:20:99:17:12:84:ab:75:7d:80:d3:f6:
                    ad:1d:26:0d:6a:4d:be:d0:aa:8b:e8:a6:75:0e:21:
                    2d:2e:dd:ce:0a:31:90:50:8f:1a:2b:bd:bd:e5:24:
                    02:03:f3:c2:28:9d:b8:f4:ef:a2:cf:49:82:98:0a:
                    a8:d3:b6:96:4b:e7:ac:59:fd:52:0f:0f:c5:dc:57:
                    f7:4c:43:13:b1:52:89:c9:d0:95:8e:b7:f1:52:e5:
                    e9:c7:ec:9b:81:17:73:bb:0f:a0:ad:09:bd:9a:b6:
                    d2:7d:ae:8b:ac:e1:e3:57:4a:bf:cf:7d:02:f5:40:
                    ec:73:0e:71:33:f7:88:07:3c:71:5b:ec:ca:d8:14:
                    be:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:98:D2:AD:63:7D:7D:2D:E1:9A:77:30:1A:C4:2B:A7:A2:55:13:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/9858d804-8d14-3a47-ab8b-a149272638b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl

            X509v3 Authority Key Identifier:
                keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.196.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:22:a5:1e:21:90:2b:6c:34:2c:c9:a8:32:e2:78:60:7c:47:
         83:76:6b:71:85:23:f2:7d:25:32:63:ef:99:9c:a3:bf:21:04:
         b5:f9:47:0e:40:f2:58:07:ee:d4:fb:87:66:a6:5d:be:61:82:
         94:c2:1d:36:8b:d1:d7:c2:e2:de:7f:5d:99:fe:68:d7:78:fc:
         a0:ae:76:ff:9c:c7:a7:f4:29:03:67:a5:95:7a:35:3a:6c:6d:
         03:ac:8e:c6:b6:3d:5f:d5:ff:d8:ac:db:32:bd:ef:af:1d:84:
         27:1e:dc:a5:81:aa:02:da:2e:72:77:24:da:9f:01:93:c8:4f:
         ac:43:e7:2c:98:01:ed:c8:2f:c1:84:8b:a9:80:57:1c:e6:39:
         af:c9:5c:e7:b6:ed:49:86:5c:a2:1e:aa:f9:ee:6d:ad:10:c0:
         75:e6:9c:de:bc:b2:34:80:f9:d3:ac:26:10:7d:16:ac:7a:68:
         99:45:3e:47:72:f2:fc:98:e6:f8:8b:ef:7b:37:35:03:49:e6:
         a1:e6:60:b4:b0:93:00:15:96:cc:33:59:b5:57:38:9f:05:26:
         0f:62:ba:85:68:b0:d0:da:85:f7:a9:cd:8f:43:1b:cb:c8:1f:
         63:2b:f4:8d:7a:68:dd:4f:5d:12:17:ca:b8:52:2c:55:15:5f:
         1a:ba:18:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 11:19:03 2026 by rpki-client