Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/707d631a-d412-38f5-9343-e28292c33e52.roa
File:                     707d631a-d412-38f5-9343-e28292c33e52.roa (raw, json)
Hash identifier:          y0lACFOqrFC8Q6lAJ52yrWqMmx/t0ix8dDuXj7N2QDs=
Subject key identifier:   A5:CB:77:4C:23:8C:7A:79:BE:3C:CC:E8:23:F4:42:52:91:F6:E2:1D
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F4328584F1467A6E432CF933D2BE5FA40
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/707d631a-d412-38f5-9343-e28292c33e52.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     32461
IP address blocks:        207.237.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:a6:e4:32:cf:93:3d:2b:e5:fa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=942706ea-7304-47c6-a185-abc0d619db98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8c:56:37:50:14:a7:f6:94:14:31:f7:b0:cc:
                    89:28:cd:7e:75:e7:ed:73:b1:0a:da:3f:02:be:0d:
                    c2:ce:64:5f:7a:91:83:b2:5a:82:e7:4d:df:78:7b:
                    47:42:2b:84:d1:83:50:1b:be:13:6c:48:f1:11:c6:
                    fa:9f:95:da:18:2a:15:43:6c:e8:61:83:f9:f3:70:
                    b3:22:88:f4:cc:69:b2:30:d7:f6:7e:25:ac:d8:65:
                    c1:33:76:27:95:13:13:dc:96:31:71:35:c4:7a:ac:
                    92:c1:2e:03:9d:29:62:10:ad:a7:43:15:70:27:a1:
                    49:95:99:d4:fb:17:c2:3f:d8:2c:1e:e8:cd:b6:30:
                    fb:f9:f0:fc:08:d9:bf:6b:1d:3b:36:d6:70:8f:7d:
                    56:af:62:fe:32:10:52:8a:61:c6:9a:30:5f:90:48:
                    13:8e:db:b7:01:9f:ce:15:d9:b3:84:62:0c:62:67:
                    f9:41:c3:dd:27:fd:3c:96:f1:74:bd:5e:77:e8:35:
                    e7:dc:db:b1:a0:e9:d5:6f:e6:c1:65:10:34:d3:97:
                    e2:d7:74:f0:68:d8:63:37:2a:56:94:c2:35:97:ca:
                    ea:d1:74:c6:db:a5:14:76:39:4a:f5:ad:4b:ad:58:
                    de:d6:17:76:26:2b:d0:47:1e:d2:db:bf:9e:04:d2:
                    c1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:CB:77:4C:23:8C:7A:79:BE:3C:CC:E8:23:F4:42:52:91:F6:E2:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/707d631a-d412-38f5-9343-e28292c33e52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.237.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:f6:83:76:5b:3b:cc:99:b2:fc:57:fd:85:df:b9:09:0f:a0:
         44:e7:aa:6e:b5:a2:c1:f1:12:c2:69:7e:9d:03:14:d3:5b:0b:
         8e:4a:e9:7b:bb:4d:b3:a0:95:ec:30:98:4f:1f:ea:48:f2:cf:
         6e:b8:10:6a:14:b1:84:03:8c:cd:8c:ba:b8:4a:7c:8c:18:7c:
         e2:dd:2e:c5:cc:29:61:3e:02:43:49:17:11:19:8e:f3:eb:39:
         3b:50:c4:d4:9e:de:85:b9:1d:00:04:c8:50:b2:73:05:dc:2b:
         19:cd:74:74:09:e3:a9:d8:ae:42:30:4a:6b:c5:a6:0b:a6:5d:
         71:cc:4d:15:20:55:a8:71:74:43:63:15:b5:95:64:1d:bd:58:
         c6:4c:c7:89:c7:0e:80:d6:01:c6:5a:ef:53:4e:f0:f4:11:2a:
         40:2a:cd:83:c3:0e:b5:f0:8d:20:67:a9:f3:cc:45:bf:f2:15:
         59:3f:a3:b6:16:0d:1e:68:98:ce:eb:cc:de:9c:75:6f:6c:db:
         8b:a8:f5:6d:12:16:df:5a:89:fc:63:36:76:db:57:42:63:d1:
         6a:27:29:84:11:49:e0:0b:4b:96:0a:74:4f:14:7d:ce:30:ab:
         77:57:e8:42:41:90:66:52:12:43:64:dd:ce:23:2a:09:78:6b:
         31:99:30:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:09:32 2026 by rpki-client