Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/3d9f0136-966d-3a28-9974-2dd2c1a185ff.roa
File:                     3d9f0136-966d-3a28-9974-2dd2c1a185ff.roa (raw, json)
Hash identifier:          Q4MgCtY+IKJuMqACOZ8p+FoIugqCNknGtOUjql+2E4M=
Subject key identifier:   8E:3A:3C:76:A4:3E:C9:AC:4A:DC:29:3E:FB:D4:27:78:20:80:10:48
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F4328584E8DEFA12A9ED991D47CECDA80
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/3d9f0136-966d-3a28-9974-2dd2c1a185ff.roa
Signing time:             Sun 19 Jul 2026 21:00:12 +0000
ROA not before:           Sun 19 Jul 2026 21:00:12 +0000
ROA not after:            Sat 17 Oct 2026 21:00:12 +0000
asID:                     14618
IP address blocks:        207.202.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:ef:a1:2a:9e:d9:91:d4:7c:ec:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Jul 19 21:00:12 2026 GMT
            Not After : Oct 17 21:00:12 2026 GMT
        Subject: CN=a3d39556-741c-40d5-ba60-105ce4a1d79a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ad:98:05:f8:a3:05:4b:28:73:5f:91:50:5b:
                    a3:90:02:20:f8:f5:49:f9:a9:51:ed:32:a6:34:be:
                    7f:69:19:5d:d5:77:68:bf:0e:27:92:0c:08:69:21:
                    5d:c8:35:ba:20:11:2a:41:93:b7:cd:ad:df:72:24:
                    fc:d9:2c:3c:cf:f6:b7:b0:ea:ef:63:21:a6:68:e1:
                    2b:5c:19:35:52:ae:b4:25:97:9e:6f:a5:ff:34:6d:
                    96:a4:f0:f0:b7:0a:e9:79:f5:89:f1:12:73:cd:19:
                    31:2d:b8:dd:b8:cf:68:c7:8d:d4:d7:b2:ea:91:e0:
                    1e:58:8b:85:77:c2:00:6b:52:7c:c6:8a:5b:ba:1e:
                    4e:cd:82:32:81:f2:52:c5:1d:9c:db:6b:e6:87:f6:
                    50:4e:1c:17:55:f5:5c:30:a4:d2:c6:de:c2:52:a7:
                    ae:42:f5:a4:16:fe:6b:ab:67:23:73:6a:9f:e0:a7:
                    f6:1c:67:23:e6:44:4b:f3:96:a5:4f:67:f7:26:2e:
                    fd:6c:5f:1b:98:a5:03:53:c2:c6:1e:4a:a1:63:ba:
                    e1:66:3f:76:ff:bc:67:69:d9:da:ef:38:38:3c:8d:
                    65:c7:3e:de:91:19:1e:2a:91:84:51:be:fd:4d:54:
                    27:ca:d8:c5:5e:46:e7:49:46:0d:48:8c:a3:f1:6b:
                    6a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:3A:3C:76:A4:3E:C9:AC:4A:DC:29:3E:FB:D4:27:78:20:80:10:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/3d9f0136-966d-3a28-9974-2dd2c1a185ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.202.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:3c:e7:f1:67:26:30:37:80:e3:dd:72:48:ec:f2:89:2c:fc:
         7a:32:33:2c:c5:0e:73:64:f0:22:2b:6e:db:2f:89:fc:8c:32:
         8a:8f:81:1c:8a:fc:51:bc:a1:f6:a6:56:74:22:1a:01:a0:db:
         55:79:b3:99:cb:78:96:81:35:3d:ec:26:1e:eb:a9:17:a1:a9:
         cf:6a:46:78:e0:cd:66:15:80:21:ca:7f:cd:64:cb:01:af:b6:
         05:b8:15:40:17:c2:4a:d5:dc:2e:47:ab:b6:ad:12:da:1c:7e:
         21:9e:1d:e7:96:77:a9:9e:95:e1:27:47:72:65:d3:8c:f1:15:
         fb:12:64:ed:e4:e4:90:82:60:92:ed:f9:d7:e6:19:8f:e4:ea:
         ce:89:c9:29:0e:35:5d:d2:4a:d5:53:cd:8a:9d:68:52:22:b0:
         8f:ac:5e:dd:ca:79:a2:45:ce:08:7c:5c:d4:b5:8b:d9:7c:ed:
         94:f2:65:4b:74:3d:43:99:1f:d2:4c:15:09:6d:38:07:70:1b:
         c4:f1:6b:a8:c4:51:cd:9e:53:a9:a4:89:15:db:2e:1b:f0:b8:
         c1:11:14:d8:d5:3a:f8:4f:89:da:ea:3a:c0:00:e7:a4:85:63:
         db:05:7f:d5:fc:8d:36:57:1b:85:0b:7d:d6:d3:81:eb:59:db:
         76:2b:32:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:44:27 2026 by rpki-client