Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/7ffc82e3-99fe-35ea-8f52-7dd9d98ed601.roa
File:                     7ffc82e3-99fe-35ea-8f52-7dd9d98ed601.roa (raw, json)
Hash identifier:          lXcGWAaJcclGwOLsg2U7dS0ua1UNrwvTz+pH8IwaroM=
Subject key identifier:   4A:4E:70:90:5A:E5:84:42:E1:36:8E:3D:10:F6:58:89:68:6E:BB:A8
Certificate issuer:       /CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9
Certificate serial:       010D0C9F4328584E66DA1581B155AE7161B3EC40
Authority key identifier: B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/7ffc82e3-99fe-35ea-8f52-7dd9d98ed601.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     400790
IP address blocks:        207.228.216.0/24 maxlen: 24
                          2606:f6c0:80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:15:81:b1:55:ae:71:61:b3:ec:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e69e55d-3baf-41e6-9e67-bbe5ed888be9
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=01f48023-d261-4155-9275-c5c1c0a7203e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5a:00:b8:18:ff:1d:e5:09:cb:e5:25:b7:9f:
                    8f:26:aa:6a:8f:f1:28:9e:15:3c:e9:fa:37:83:3a:
                    bd:a4:97:18:09:b5:a7:85:1b:a4:c1:9b:9b:05:29:
                    da:a1:c0:96:6d:99:35:15:2a:88:47:57:10:c8:a5:
                    a0:e6:7a:71:57:d8:44:78:af:f4:13:62:8e:39:26:
                    25:1f:6d:e5:d1:7f:8c:b8:55:ea:d2:29:e2:c1:1a:
                    c4:3e:4f:dc:b8:92:9c:39:b8:2d:de:7d:c7:37:84:
                    74:59:28:4b:10:37:28:be:82:28:d7:1f:19:ee:02:
                    a8:8c:c1:93:16:b5:0a:13:ec:63:60:7f:c6:d7:e7:
                    2b:c3:ef:a7:ad:9e:bf:0a:8a:ec:24:da:b1:e7:bf:
                    29:d1:e8:1b:82:7b:c2:62:31:fb:f3:a6:ab:32:e7:
                    60:a8:6b:03:1f:c8:4c:75:17:ee:43:39:8e:54:48:
                    69:35:62:47:75:b0:4e:6b:2b:d4:f1:f5:73:05:f7:
                    82:f4:86:f5:44:69:4b:55:49:98:4c:3d:5c:0f:e5:
                    bc:a0:9a:b4:db:fe:0e:be:86:19:36:fd:1a:c8:c2:
                    bb:eb:a2:84:49:a9:a0:73:04:90:07:c9:51:e3:56:
                    42:95:47:ae:08:0f:89:18:f2:16:b3:b0:6d:9d:14:
                    12:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:4E:70:90:5A:E5:84:42:E1:36:8E:3D:10:F6:58:89:68:6E:BB:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/7ffc82e3-99fe-35ea-8f52-7dd9d98ed601.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.crl

            X509v3 Authority Key Identifier:
                keyid:B8:E5:6D:F2:A4:FC:A7:9A:27:85:95:56:19:C9:6E:DC:38:85:74:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2e69e55d-3baf-41e6-9e67-bbe5ed888be9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.228.216.0/24
                IPv6:
                  2606:f6c0:80::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:ce:cf:79:c5:62:36:03:23:ec:2b:ea:0c:2e:ab:8f:c1:84:
         c6:e7:a8:82:18:7a:b0:7f:c2:3f:c2:3a:1d:17:88:87:28:74:
         ea:d5:3b:7e:fc:ca:45:7d:f4:7b:3b:bb:37:05:e2:a9:11:c6:
         cb:fd:3f:19:d2:52:02:16:cd:31:cf:fc:14:86:26:d4:0f:8e:
         ba:be:26:28:d1:6b:6b:e6:aa:e0:b6:f5:bb:4c:5b:2b:cb:43:
         d4:e4:a1:32:12:f7:b5:3f:41:7c:34:69:d2:45:f3:3b:4e:8c:
         a8:e6:e3:40:6e:cb:79:f5:a9:64:d9:a1:e9:23:d0:dc:16:5e:
         5a:c8:97:b6:51:7d:9f:18:18:a3:50:b5:78:87:3a:69:f0:b2:
         8d:93:48:7a:05:f3:98:16:53:53:25:45:c6:74:52:2d:14:20:
         f9:88:41:ef:84:50:40:7e:dd:1d:9f:43:82:38:c0:77:0f:22:
         a4:5e:7b:c2:f2:6c:fb:49:8b:0e:dd:02:01:38:bf:79:30:ff:
         93:38:a2:7f:b4:8e:7f:04:22:51:ba:0d:56:55:31:20:f5:79:
         ba:08:be:76:ff:21:70:37:36:5c:17:54:9f:aa:16:b5:38:ab:
         57:e4:62:f3:41:3d:f6:1b:1d:44:ce:22:7a:89:e3:61:7f:17:
         72:4d:22:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:11:43 2026 by rpki-client