Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/0799c6c3-fa33-38b0-85b7-253ce955c08d.roa
File:                     0799c6c3-fa33-38b0-85b7-253ce955c08d.roa (raw, json)
Hash identifier:          cpvlUva2A+TbF8GrIWn0OV4tU5J9bFuD846J8jXpc0U=
Subject key identifier:   46:A6:1E:C1:7E:11:E8:5F:27:5A:07:08:B4:92:5A:40:3E:48:70:0A
Certificate issuer:       /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial:       010D0C9F4328584E50848E18007CF13C7AD16400
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/0799c6c3-fa33-38b0-85b7-253ce955c08d.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     13807
IP address blocks:        97.107.198.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:8e:18:00:7c:f1:3c:7a:d1:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=cbc83868-32d3-40a0-befc-85ae0875eeee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:74:7e:12:48:70:6e:cd:dc:9f:7e:ba:4c:70:
                    08:7d:29:3a:c5:00:c5:42:53:db:7f:d7:d5:15:a3:
                    a0:71:06:4c:d0:d0:74:90:99:70:34:6a:5d:aa:b8:
                    db:35:df:e0:ef:5a:12:51:dc:c9:8f:73:ef:72:e9:
                    73:e6:4d:a2:8c:24:cd:01:10:c4:16:60:8f:fb:08:
                    14:34:17:50:3b:12:9f:6b:57:9d:d2:53:63:9d:56:
                    11:88:54:45:b5:f6:0d:58:38:6e:07:55:b2:2a:eb:
                    67:1b:5b:57:06:43:ff:7a:dc:b5:06:58:44:92:8d:
                    79:a4:d0:3f:a3:d9:a4:2c:10:36:3f:0c:5b:f6:cf:
                    5a:d1:ab:dd:32:c4:e5:b0:f6:53:70:49:37:05:23:
                    80:29:e8:4c:d6:a2:65:00:ef:a2:7a:92:97:b6:0f:
                    e7:b6:bc:47:66:8d:f0:e7:92:e3:04:e8:9a:56:a2:
                    39:e0:e7:5a:b4:b2:52:6f:b2:db:70:6f:c7:63:ca:
                    d7:8c:76:bb:50:7e:9d:a4:79:36:9c:c3:bc:a2:c3:
                    05:0f:1e:8a:b2:f0:9c:5a:c8:06:57:cb:cf:31:5d:
                    a4:ec:2f:2c:84:d4:16:53:b2:ad:71:9f:f0:9b:3a:
                    40:77:91:bc:f0:c7:2d:c7:f3:05:56:1d:fa:bd:cc:
                    2a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A6:1E:C1:7E:11:E8:5F:27:5A:07:08:B4:92:5A:40:3E:48:70:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/0799c6c3-fa33-38b0-85b7-253ce955c08d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl

            X509v3 Authority Key Identifier:
                keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.107.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:81:7b:30:bf:61:28:e3:fe:07:53:ef:52:ce:c9:b7:33:6c:
         86:12:c6:7a:c0:3b:f6:59:4a:8a:63:0e:2f:be:57:67:b7:23:
         84:ef:ae:1f:2c:b3:b6:c1:11:59:e5:32:04:d5:8c:c4:e2:63:
         4c:12:e1:d5:71:cd:98:61:73:b1:37:57:73:7a:93:cc:a5:f7:
         1c:97:20:9a:d3:64:8c:44:db:19:5c:60:0e:55:1e:a3:cc:f7:
         06:e6:1f:84:03:df:95:74:78:a8:8f:53:f7:e6:09:71:ed:2f:
         6c:fa:59:6b:e0:83:0a:23:b6:d3:18:0f:d4:fd:5b:35:19:32:
         52:9a:fb:de:3c:a5:b0:63:b9:82:1a:cf:78:df:a7:40:46:52:
         a6:72:f7:65:c0:4e:2e:a1:6c:b2:3c:73:d2:c2:84:c6:4f:59:
         00:dd:ca:0b:5e:73:98:2c:6b:ec:c8:ad:1a:e0:46:20:cd:ee:
         52:10:fa:4f:a2:54:a3:f2:f3:35:dd:81:0b:f3:1b:b5:c7:b2:
         60:e7:da:82:88:cc:16:20:41:b6:ea:23:c6:81:65:4a:91:96:
         1d:38:64:a1:c1:de:96:52:69:8b:8b:85:0c:ac:b6:e8:6c:b2:
         c8:22:32:f7:88:1d:ba:73:91:b6:96:04:8f:33:6b:6f:00:9d:
         d7:7d:be:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 11:55:25 2026 by rpki-client