Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/d28bb973-d770-325f-809f-41fd4697ed68.roa
File:                     d28bb973-d770-325f-809f-41fd4697ed68.roa (raw, json)
Hash identifier:          ulcbPm0QLqWBBqleK7VWwWdUiYnkD3iEi2XDceE+2TY=
Subject key identifier:   5A:6D:38:59:77:31:C4:43:34:5C:7A:62:89:4D:77:41:38:ED:C6:D8
Certificate issuer:       /CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
Certificate serial:       010D0C9F4328584E7E94E63ED9552FB20CEC6D00
Authority key identifier: 85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/d28bb973-d770-325f-809f-41fd4697ed68.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     19529
IP address blocks:        207.2.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:e6:3e:d9:55:2f:b2:0c:ec:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=5da9c470-d727-4096-868e-e9839dc52e7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:06:f9:7d:75:94:71:9f:6a:a9:14:97:c9:74:
                    d4:34:13:7b:60:15:1e:d4:6a:66:bf:60:5c:b5:9b:
                    09:45:e4:33:6d:01:9e:1f:fe:8d:9a:8a:2d:fa:52:
                    3e:6f:bd:25:35:c1:87:14:13:87:e1:64:cd:c0:c1:
                    2f:00:0e:e3:8e:3f:1b:55:43:0b:30:f5:77:97:ec:
                    b8:93:c4:9d:ea:26:cd:49:00:6f:ef:98:1a:89:1c:
                    6e:e3:a4:55:a9:20:a3:87:1e:b2:29:2c:72:02:52:
                    35:f6:b1:5e:0a:70:7b:86:c5:17:4a:8c:3a:1b:eb:
                    01:b8:26:4a:d0:e0:3c:29:c8:ac:30:63:3b:4f:24:
                    99:19:cf:df:1a:eb:21:9f:65:65:f9:5a:4c:26:b0:
                    1c:98:8a:db:bd:79:74:fd:a7:34:31:eb:cd:cd:c1:
                    34:e8:42:4c:8d:89:3a:9f:99:d0:f1:80:62:3a:7d:
                    66:3a:f2:c5:25:12:e9:db:a7:bc:ed:ca:48:91:27:
                    33:41:d6:9f:4e:6d:d4:13:3b:7e:81:e8:29:91:e5:
                    be:7d:a5:d6:62:5c:30:69:a6:e9:d1:19:f9:26:9c:
                    2a:49:7b:12:d0:08:72:a8:8e:da:fa:01:ab:97:97:
                    50:cb:c5:90:a4:23:3b:06:2a:2e:27:a7:92:d6:8e:
                    e8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:6D:38:59:77:31:C4:43:34:5C:7A:62:89:4D:77:41:38:ED:C6:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/d28bb973-d770-325f-809f-41fd4697ed68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl

            X509v3 Authority Key Identifier:
                keyid:85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.2.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:99:c1:08:00:c7:65:c2:75:d1:33:f9:7a:f8:b7:78:e3:22:
         12:6c:94:d2:32:8b:66:28:b4:4e:a1:73:7a:81:bf:9d:a4:c6:
         9a:cb:4b:b9:da:c4:ca:84:df:45:8b:3a:d8:42:5f:57:4c:c8:
         44:4c:fd:88:c3:4e:e7:44:fa:87:f9:fc:4e:e2:59:4e:07:a7:
         ef:23:3e:b2:d8:17:59:8a:a1:fa:ba:38:2e:2a:8b:09:54:c2:
         d8:59:fc:86:63:80:48:82:68:50:be:96:ae:44:18:52:5c:3f:
         37:4f:55:0f:35:d4:00:1d:78:c3:cd:99:3f:95:73:4a:34:b6:
         34:d0:6a:a5:ce:6d:cb:9d:bb:e3:81:e8:61:18:b2:05:b3:f0:
         95:49:09:d8:06:a5:3b:c7:ab:24:4a:67:51:75:3d:e2:ae:c1:
         3c:55:6d:27:8b:c8:ff:e6:14:0e:09:4f:48:99:39:10:4e:36:
         f0:7a:73:d1:92:36:c9:5d:fb:bc:a9:41:a9:3f:ce:16:72:a7:
         48:ec:b5:c2:9f:24:35:1b:f7:66:39:01:1f:6d:67:71:cd:c3:
         5b:82:b7:69:ce:b8:6a:49:57:24:cb:c4:9e:6d:57:e0:83:de:
         a5:59:01:10:bf:62:a0:75:68:9f:a9:4f:be:15:3c:b8:27:42:
         be:4b:18:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:36:38 2026 by rpki-client