Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/63555432-fed5-3827-95ba-2c1139e7a9ac.roa
File:                     63555432-fed5-3827-95ba-2c1139e7a9ac.roa (raw, json)
Hash identifier:          SZTYlkSb33pOEVBIN/gnsixHPsAQy85G2tMuiwXF6yY=
Subject key identifier:   F1:13:67:68:9C:8E:20:61:A3:D9:58:EA:2D:A9:CA:99:6B:15:16:85
Certificate issuer:       /CN=21ea1051-d2f6-49a6-a553-b75eb9b83b11
Certificate serial:       010D0C9F4328584E885A3E2308F0252A237324C0
Authority key identifier: D7:BF:EC:A6:38:B4:D6:C5:30:21:19:BE:09:A7:4F:2A:F2:6B:E3:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/63555432-fed5-3827-95ba-2c1139e7a9ac.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     396462
IP address blocks:        207.44.1.0/24 maxlen: 32
                          207.44.67.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:3e:23:08:f0:25:2a:23:73:24:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21ea1051-d2f6-49a6-a553-b75eb9b83b11
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=1c350c3b-6c48-477a-b5e3-6e4facce2934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:44:8e:41:70:22:5d:01:1f:79:9f:6b:56:80:
                    56:94:1b:61:59:8b:0e:a4:d7:dc:59:ca:6c:8a:5a:
                    d0:ff:00:a9:bd:b8:ab:99:57:b6:b7:1f:05:14:c9:
                    4f:33:6b:14:96:70:30:f1:05:4e:03:16:3f:f2:07:
                    91:08:bd:a7:7d:29:6f:6f:a1:c7:ce:f1:5a:9e:e4:
                    ea:78:7b:bd:6e:5e:34:cf:a8:4c:7a:cd:21:fc:13:
                    2e:00:03:c2:5c:9c:86:51:97:4b:96:c1:90:c9:0d:
                    54:c9:34:35:17:51:07:2d:89:dc:4b:80:d0:f7:b1:
                    7c:35:b7:e0:69:16:1f:ae:94:e9:50:67:5c:39:68:
                    51:ee:86:be:43:0a:f6:a6:bd:fd:48:52:d1:58:24:
                    df:36:ab:9f:ee:93:c4:40:51:47:db:43:d7:4f:b2:
                    65:81:d2:08:db:c2:37:ea:e4:1f:4b:7c:d5:54:56:
                    e4:41:ad:8e:f0:5a:fd:09:2b:a6:44:e3:a6:35:a9:
                    2c:52:be:5d:f8:42:35:b8:f1:7d:7c:93:90:4e:ed:
                    22:fd:61:11:dc:ea:02:29:71:dd:a3:9d:37:53:f8:
                    1d:d8:c1:6a:0b:d3:5f:6a:d9:87:3a:72:0e:bc:e3:
                    01:32:5b:3f:0d:91:31:52:5e:56:ac:48:e1:31:a2:
                    eb:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:13:67:68:9C:8E:20:61:A3:D9:58:EA:2D:A9:CA:99:6B:15:16:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/63555432-fed5-3827-95ba-2c1139e7a9ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.crl

            X509v3 Authority Key Identifier:
                keyid:D7:BF:EC:A6:38:B4:D6:C5:30:21:19:BE:09:A7:4F:2A:F2:6B:E3:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.44.1.0/24
                  207.44.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:42:6f:a6:5b:45:6a:95:dc:a7:ae:e2:07:4d:ec:68:0b:e5:
         d2:10:a2:3c:44:64:c1:96:0a:2f:51:8b:84:1f:a8:af:cb:47:
         22:2c:20:f5:67:1a:1d:16:d3:bb:3d:7d:61:b4:29:ad:51:05:
         2b:f2:68:ee:8a:ea:47:1c:4b:2d:b8:b4:f1:6f:83:8c:70:94:
         29:ce:56:da:8a:af:a4:26:5b:ba:c3:38:b5:92:80:13:cd:47:
         8c:a5:87:38:6d:e8:c1:01:57:6f:62:0a:f6:4c:c7:4a:9a:94:
         67:23:f2:a9:b0:dd:c0:50:62:8c:b3:2a:ab:29:88:2b:a9:b5:
         65:1b:99:f4:14:b9:44:2d:fe:10:c1:13:41:dc:e4:31:87:39:
         1d:c6:1c:3c:a7:dc:e1:d5:9c:89:62:3a:fe:56:00:87:8a:e6:
         69:07:5b:ef:ae:6b:b3:03:5d:48:f3:44:fe:3f:7e:9e:c7:94:
         6b:41:77:d6:49:b8:a2:17:bc:51:93:0f:22:01:9e:b0:c6:ee:
         f3:dd:62:ee:dc:aa:ba:78:1a:11:51:8a:e2:5b:9a:01:3a:ca:
         3d:63:8f:2d:76:f4:14:c6:b3:2a:e8:de:2f:7b:78:6b:cf:b3:
         c5:6c:a0:52:d2:89:3f:35:79:0f:e2:ca:3e:a7:f1:79:7e:f1:
         21:70:f3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:59:14 2026 by rpki-client