Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/308dc337-8592-3e39-bd79-d5b7cb14ad8b.roa
File:                     308dc337-8592-3e39-bd79-d5b7cb14ad8b.roa (raw, json)
Hash identifier:          xKxbRzCC/AwIsqwHPJoBIVS2S5Xlvsme4Qv/hxMfaK0=
Subject key identifier:   17:96:2C:41:D4:97:2D:B9:06:FC:A3:8C:CA:C9:56:88:0B:74:92:51
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F4328584E3E5F4255EA80A1290BA26600
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/308dc337-8592-3e39-bd79-d5b7cb14ad8b.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        207.202.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:42:55:ea:80:a1:29:0b:a2:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=c9527e3a-2d08-462b-88db-d3c788bff37a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:23:ef:ee:95:a2:89:a7:1e:50:1e:c7:04:01:
                    80:0a:de:bb:3e:da:a4:8f:6c:38:bc:57:69:20:9b:
                    97:63:f6:4c:90:5b:2d:85:a4:9c:ab:ca:bb:da:b5:
                    6e:e8:9f:1d:c9:c8:84:2e:88:f3:bb:10:75:bc:06:
                    4b:6e:af:e4:4f:b2:85:ec:6a:e7:77:e0:5b:c7:38:
                    a6:f8:38:2d:06:24:ae:45:c8:c4:2c:10:7e:95:83:
                    82:ee:78:c8:99:fb:f8:e8:6a:c2:3c:ef:1e:a7:4a:
                    d6:cd:6c:4b:30:5b:72:28:ff:b6:65:4d:4d:50:ee:
                    e0:55:19:8e:c8:df:24:41:e3:75:da:40:40:11:95:
                    75:cc:2d:a7:04:1b:2e:37:ee:ab:5c:57:1b:02:9f:
                    07:4f:ab:b7:4f:26:88:86:b4:0c:50:4c:f9:c5:fd:
                    3a:6b:54:f1:12:4c:d6:d0:6f:f3:34:4e:8e:e6:ff:
                    b6:3e:a7:e0:ee:77:e2:c4:70:37:e7:8f:46:16:4a:
                    fa:99:35:b0:4f:0b:5d:af:41:01:21:4a:e0:a8:21:
                    3d:86:26:e0:62:b1:7d:86:27:65:85:7b:9b:cf:58:
                    9c:c5:a5:06:3b:9f:26:2a:d1:70:a3:3f:56:06:ce:
                    9d:ef:b1:f0:60:d8:05:6a:9d:ac:da:14:79:bf:77:
                    eb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:96:2C:41:D4:97:2D:B9:06:FC:A3:8C:CA:C9:56:88:0B:74:92:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/308dc337-8592-3e39-bd79-d5b7cb14ad8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.202.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:93:17:d6:aa:e0:92:f0:d8:f6:62:2f:56:ae:2f:83:bd:59:
         87:9f:69:b1:f2:6f:02:6c:aa:78:2d:4a:ef:42:34:00:a1:a1:
         9f:22:96:66:c2:91:1f:40:d1:52:4a:bc:55:2f:e3:3c:93:6b:
         75:19:bf:a3:a9:de:26:eb:bc:6b:d2:dc:90:7a:d7:e4:c0:8a:
         45:3b:10:47:e1:1e:9e:7c:e1:1a:67:d0:39:e3:65:7b:4c:b5:
         ec:b5:5d:dd:40:c0:cc:3e:07:f2:2f:c8:45:25:4e:d5:39:47:
         82:3f:cf:b1:81:a2:66:88:8a:ca:35:45:22:9f:05:9b:9f:bb:
         18:70:ec:c6:ed:d8:a8:15:62:48:62:a8:31:33:72:00:ac:a7:
         74:75:07:f5:c0:fc:3b:49:0f:7e:09:72:18:01:0b:15:d7:47:
         dd:93:30:a8:a1:02:88:7d:35:05:46:63:2c:6f:23:f0:9e:f7:
         43:29:5a:97:9d:3c:7f:f8:48:1b:e8:5a:c1:e5:c5:81:70:34:
         66:48:cd:d3:a9:8a:71:cb:2e:4d:69:f4:d7:f6:c9:24:62:ec:
         61:c9:46:35:c9:83:7b:d0:33:80:26:13:5f:f8:d0:d4:be:b6:
         18:5c:9a:67:8a:92:cf:fd:b4:09:02:b0:53:ec:89:9c:e6:ef:
         61:b1:8b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:44:27 2026 by rpki-client