Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/992dd614-e1c0-3f94-8587-58c55ac2c285.roa
File:                     992dd614-e1c0-3f94-8587-58c55ac2c285.roa (raw, json)
Hash identifier:          g5InkuHsqne3QPlpLc2y4lo57h3w8gcIV+FNG46IYlE=
Subject key identifier:   CC:2D:D6:29:C7:63:5C:51:E4:66:6D:1F:C8:3E:B6:DE:84:78:48:36
Certificate issuer:       /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
Certificate serial:       010D0C9F4328584ECBD1D8A678DDF931D951F900
Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/992dd614-e1c0-3f94-8587-58c55ac2c285.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     22742
IP address blocks:        207.210.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:d8:a6:78:dd:f9:31:d9:51:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=a2bf9cfc-b411-4705-a297-af776336a9d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:49:13:41:36:ec:40:dd:e8:91:a3:79:d7:29:
                    d3:13:c2:56:f8:c4:71:b9:1e:ee:28:e3:6b:f1:8b:
                    3e:c8:22:06:02:e9:91:9e:f5:aa:d1:9c:78:05:78:
                    ec:1d:d3:ba:56:2f:cd:dc:42:c6:00:ec:5f:ef:cf:
                    d2:f4:61:f1:04:31:56:0c:14:5d:a9:d1:7e:48:00:
                    a2:5e:54:88:23:ae:50:57:03:05:0f:2d:0f:4b:fa:
                    bb:7b:52:d9:b4:e8:4c:ce:92:f6:f9:2c:2f:c2:f1:
                    12:4d:7c:9a:ec:cb:95:d6:83:1f:84:5d:19:1e:86:
                    64:f3:ae:2c:6d:bb:75:31:f9:ec:9e:9a:63:80:b2:
                    c0:a0:51:91:e3:98:f2:18:19:b3:61:5c:c5:eb:14:
                    6a:a6:9c:7c:93:10:a1:26:9f:36:96:0d:49:e7:06:
                    55:3c:e0:27:fe:bd:bf:5e:b9:c1:f5:93:2c:b1:97:
                    08:e9:59:94:9e:a4:c5:e4:ce:48:46:d8:60:4d:09:
                    03:5e:ff:1c:53:97:89:b3:52:f3:83:c3:98:fa:e1:
                    69:d5:90:f1:07:63:1f:b4:f2:69:c9:80:12:5f:1c:
                    18:9f:7c:55:06:0f:53:67:0f:44:78:43:38:1f:71:
                    ba:f4:b9:c8:32:5a:d6:32:02:74:3e:cf:18:5e:59:
                    95:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:2D:D6:29:C7:63:5C:51:E4:66:6D:1F:C8:3E:B6:DE:84:78:48:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/992dd614-e1c0-3f94-8587-58c55ac2c285.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.210.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:5d:ee:2e:55:24:21:d9:3c:e5:f5:2e:b2:6c:a1:a1:fe:ee:
         99:34:6f:1b:c7:9f:26:f8:38:41:d0:60:07:8f:16:28:59:9a:
         87:3b:b5:65:e5:04:83:96:8e:8b:bf:7a:59:3a:95:35:a1:20:
         7a:3b:b6:e6:93:c6:0a:61:e4:4f:d9:3a:67:03:cf:b3:db:37:
         14:6e:19:94:77:76:0e:e1:9e:cc:f7:89:d2:6b:9d:ad:ea:c9:
         ae:c2:0f:e9:09:6e:6f:56:65:08:6c:02:01:70:cb:a9:24:13:
         af:35:ec:c8:19:ad:55:76:83:79:d2:a7:a2:4f:f5:67:12:15:
         3f:2c:35:b9:5d:7f:c7:b5:2c:e8:cb:bb:c3:68:c2:8e:f7:1e:
         fa:ec:45:55:52:02:c9:b6:e3:d1:ec:d2:e6:22:45:84:29:82:
         55:9e:9a:32:27:65:76:d5:da:b5:f5:d0:a0:e5:de:87:b6:57:
         51:a8:f8:b3:48:e6:0f:05:f9:da:e2:93:3f:0e:8e:2e:89:f1:
         91:63:25:61:f8:9b:c1:3e:2f:54:07:a5:79:0e:b1:dd:05:60:
         82:fc:97:ba:a1:45:b4:8f:f8:9b:52:7c:e3:c9:5b:b9:66:d7:
         94:0d:95:1c:e2:19:8f:9d:7c:2e:da:e1:f3:c3:18:66:7a:2e:
         81:90:f5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:53:18 2026 by rpki-client