Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e7a073da-dbf5-3ec5-80e5-197d76d3ef76.roa
File:                     e7a073da-dbf5-3ec5-80e5-197d76d3ef76.roa (raw, json)
Hash identifier:          3d0G0+TKIsB6LLtegVHt471BSIgA+YjPJsu7V2oENOU=
Subject key identifier:   F8:85:97:57:98:CD:4A:B3:7D:56:70:51:B9:C2:8A:C5:BA:C3:CE:D4
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584E46BF27BE5620FA0CD915FCC0
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e7a073da-dbf5-3ec5-80e5-197d76d3ef76.roa
Signing time:             Wed 24 Jun 2026 09:00:12 +0000
ROA not before:           Wed 24 Jun 2026 09:00:12 +0000
ROA not after:            Tue 22 Sep 2026 09:00:12 +0000
asID:                     62044
IP address blocks:        205.220.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:46:bf:27:be:56:20:fa:0c:d9:15:fc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Jun 24 09:00:12 2026 GMT
            Not After : Sep 22 09:00:12 2026 GMT
        Subject: CN=ed2f494f-de5e-4b26-a59e-abcdc8e184a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:87:b6:9d:47:2b:1b:49:ca:7e:a3:c4:7e:2f:
                    6f:dc:8b:6f:52:84:ad:e2:57:8b:d2:b7:a9:18:00:
                    fc:fc:0c:02:0b:a4:26:32:99:26:02:14:3e:ae:b4:
                    21:10:b5:b7:6d:5e:ad:13:d5:7f:82:c4:8f:8f:2d:
                    64:eb:bf:1b:f2:25:3d:0d:12:b5:f9:82:88:19:a5:
                    5c:84:e6:3a:23:0f:19:b3:14:06:fb:5e:07:ef:19:
                    37:49:1b:a0:db:81:37:20:fd:f9:3a:6e:c0:11:6c:
                    4c:9c:22:3d:be:aa:bb:3d:0b:32:93:cf:8c:9f:75:
                    fc:ac:84:e8:39:7a:2b:93:b4:ed:e6:57:dc:f0:d2:
                    86:1c:9e:2c:4b:1d:e8:97:cb:cf:e2:10:47:39:1a:
                    b4:ea:77:e7:e6:77:b7:b0:e1:89:14:fc:e6:df:f2:
                    a4:45:24:50:b6:46:f8:0e:d8:65:79:c6:0f:cb:da:
                    68:8a:73:7c:fd:69:d0:4a:e5:9f:e1:a0:33:c1:be:
                    84:ac:06:c2:6a:3e:64:56:b5:9e:8a:8c:6b:a5:88:
                    c4:d0:34:cc:40:b3:59:43:84:5a:5d:43:29:95:24:
                    f8:fe:dd:d8:80:68:eb:3b:1e:4e:e2:d9:0d:d5:fb:
                    79:50:02:4c:a2:fd:c1:e5:2e:df:5e:fd:eb:6a:e6:
                    9c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:85:97:57:98:CD:4A:B3:7D:56:70:51:B9:C2:8A:C5:BA:C3:CE:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e7a073da-dbf5-3ec5-80e5-197d76d3ef76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.220.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:ee:f7:d4:1a:f1:d3:a0:78:33:6d:60:b4:cf:b4:98:f3:ff:
         a2:b3:4a:cb:23:89:f5:9e:d0:ec:2b:51:8c:13:98:89:d6:db:
         a9:f1:81:0e:0c:8c:ec:55:87:9d:03:7f:b9:31:8c:bc:1d:30:
         14:0b:e0:7a:e5:29:a8:14:1b:17:f7:ed:61:4e:1d:52:75:cf:
         5b:43:80:70:38:47:cd:c0:ce:e2:ae:c1:be:94:0d:d4:9c:6a:
         bf:1e:97:34:43:1f:80:92:8f:40:20:e9:70:64:e9:20:23:a9:
         0b:a6:19:4d:99:6f:4e:b5:6b:6a:6d:ad:24:99:5f:cd:b5:9b:
         08:29:b8:8f:d3:07:f8:e1:f8:23:45:3b:82:bf:83:2c:b2:db:
         49:6d:e8:1b:12:2c:09:af:5a:9e:54:fc:fd:b3:4e:25:bf:08:
         12:41:4f:85:88:f4:a2:da:25:2a:0e:9a:4f:36:7c:f8:da:cb:
         dc:91:11:b4:fc:32:29:34:ef:64:24:b8:f5:4f:24:ea:3f:78:
         3c:08:34:08:2d:46:1e:e4:07:dc:cc:cd:c5:f2:40:99:4d:5e:
         60:ef:55:7c:98:41:09:d8:0b:a2:65:6a:72:88:15:e0:41:67:
         af:0a:5e:1e:c7:44:db:94:df:3b:5f:11:3c:79:1e:43:31:1a:
         a9:6d:6f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:48:31 2026 by rpki-client