Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/d7985198-db94-3ad7-b94f-9a83cba2b147.roa
File:                     d7985198-db94-3ad7-b94f-9a83cba2b147.roa (raw, json)
Hash identifier:          cJMKZ09BfiatdW9aD9s2I04GOR28Up9tI/M1ubeDZLY=
Subject key identifier:   51:5A:A6:E8:0D:69:93:82:CA:47:56:0A:38:99:05:3C:01:0A:61:E9
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F4328584E61450EBD74C714E7377D70E0
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/d7985198-db94-3ad7-b94f-9a83cba2b147.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     398465
IP address blocks:        207.237.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:45:0e:bd:74:c7:14:e7:37:7d:70:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=62c6965c-3f10-4e76-bc06-6ea25982e867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c7:b9:10:cb:1a:81:d8:9c:ce:33:0b:ed:c4:
                    3c:da:56:e0:a6:91:e1:a4:d5:25:05:3c:ab:fa:a1:
                    f7:1a:26:7d:be:b6:fd:87:7d:25:1b:d3:1c:29:16:
                    f7:e3:65:b2:b3:6b:1a:70:2a:c8:37:68:7f:8b:7a:
                    db:25:3d:79:ab:49:c9:eb:2c:fa:1e:62:59:68:ae:
                    f2:16:a5:ed:25:61:15:a4:14:82:62:0e:16:53:3e:
                    ff:f3:7f:33:c1:19:63:b3:86:f2:c4:18:aa:fa:e8:
                    10:b6:c0:bc:13:bd:9d:93:d0:06:80:88:e6:62:4b:
                    60:a6:bf:fd:90:1a:51:fd:30:b8:73:8f:4e:fc:a5:
                    43:80:20:b9:fc:c7:dc:da:7a:e5:38:62:58:ea:e6:
                    b2:2f:43:1b:bf:81:dc:01:30:3e:10:dc:a3:7f:83:
                    7c:03:7e:d8:c1:4e:7b:3b:7d:d8:0f:9c:cd:15:7b:
                    e0:5a:91:56:4e:53:8e:0e:07:03:8b:96:cd:66:cd:
                    54:2f:2e:f4:b0:5e:e1:10:c8:a4:03:43:2c:3b:e9:
                    20:32:3a:bf:5f:25:0d:81:63:a2:d2:14:47:81:7b:
                    e8:86:b8:a5:f9:14:6e:04:f8:1e:3c:c5:9a:d9:67:
                    57:4c:1c:3e:4c:95:3c:20:01:a6:a6:8f:b0:f6:d0:
                    47:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5A:A6:E8:0D:69:93:82:CA:47:56:0A:38:99:05:3C:01:0A:61:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/d7985198-db94-3ad7-b94f-9a83cba2b147.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.237.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:29:8d:cc:a1:1e:e7:a5:be:a0:94:57:14:41:f2:38:c6:70:
         ee:5e:f2:c0:ce:76:20:5b:6a:d4:ca:55:63:64:ce:6f:c6:0f:
         42:78:88:2b:ef:50:fb:d0:7f:07:cb:77:07:75:3a:b9:44:c0:
         0b:20:9b:81:48:c3:52:c5:71:15:31:92:cb:73:f2:1a:3b:ff:
         3a:0c:24:e1:ab:24:0b:8d:c7:d2:16:c3:76:65:1e:09:7f:4f:
         f5:cc:97:b5:17:32:f9:37:20:6d:8e:b9:0e:fa:0f:7f:0e:7e:
         53:c0:cf:17:db:85:b5:cf:b3:43:89:33:c3:b0:54:27:e4:84:
         5b:82:90:7c:72:f4:e1:44:d2:5c:26:9a:eb:05:c8:ef:f8:3d:
         a5:3c:42:33:43:8c:49:45:e9:51:bb:26:e6:db:21:93:a6:65:
         a8:54:95:9c:28:04:47:a3:50:93:c7:6c:51:14:f8:a8:85:61:
         8f:79:57:ba:ab:15:4b:36:88:42:f8:51:b9:93:2b:59:50:84:
         a1:6e:c7:0e:01:a0:04:80:29:f1:da:56:4c:8b:69:44:a7:34:
         bb:37:97:7a:68:80:ca:3e:e4:53:b6:2f:1c:6a:5b:df:3b:f8:
         c9:d4:db:d8:88:c4:3d:01:a8:3e:d7:37:c7:3b:fa:b7:83:c5:
         16:13:9a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 12:03:54 2026 by rpki-client