Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/194ace12-e4ed-4136-8094-1719b84ab2e5/7b9dbc3b-80e7-3f8b-a1d1-847953e63960.roa
File:                     7b9dbc3b-80e7-3f8b-a1d1-847953e63960.roa (raw, json)
Hash identifier:          qzQUnu3+xmPKJlR7ONsinchzSxGz1yrke7OSopQ+8Bs=
Subject key identifier:   D9:CD:1B:34:35:67:7C:3D:B7:ED:39:08:31:AB:3E:DF:8E:12:94:10
Certificate issuer:       /CN=194ace12-e4ed-4136-8094-1719b84ab2e5
Certificate serial:       010D0C9F4328584D97BA41AA0FCCB810181EF8E0
Authority key identifier: BD:B6:B7:78:AD:7A:99:55:87:DF:12:DB:4C:2E:C7:E8:D0:CD:10:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/194ace12-e4ed-4136-8094-1719b84ab2e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/194ace12-e4ed-4136-8094-1719b84ab2e5/7b9dbc3b-80e7-3f8b-a1d1-847953e63960.roa
Signing time:             Wed 22 Apr 2026 16:23:55 +0000
ROA not before:           Wed 22 Apr 2026 16:23:55 +0000
ROA not after:            Thu 16 Jul 2026 01:00:27 +0000
asID:                     27613
IP address blocks:        207.245.136.0/21 maxlen: 24
                          207.245.144.0/24 maxlen: 24
                          207.245.145.0/24 maxlen: 24
                          207.245.146.0/24 maxlen: 24
                          207.245.147.0/24 maxlen: 24
                          207.245.148.0/22 maxlen: 24
                          207.245.152.0/21 maxlen: 24
                          208.64.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/194ace12-e4ed-4136-8094-1719b84ab2e5/194ace12-e4ed-4136-8094-1719b84ab2e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/194ace12-e4ed-4136-8094-1719b84ab2e5/194ace12-e4ed-4136-8094-1719b84ab2e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/194ace12-e4ed-4136-8094-1719b84ab2e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:97:ba:41:aa:0f:cc:b8:10:18:1e:f8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194ace12-e4ed-4136-8094-1719b84ab2e5
        Validity
            Not Before: Apr 22 16:23:55 2026 GMT
            Not After : Jul 16 01:00:27 2026 GMT
        Subject: CN=5614aa16-916b-4f93-ab65-48a9022bc3c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8a:c9:86:fb:39:92:8e:e6:b6:c7:04:cd:7d:
                    e0:87:fc:a8:f5:5e:3c:9e:a9:ed:c0:12:79:1b:f3:
                    67:82:22:3a:26:43:10:51:74:0d:aa:8d:f8:4d:35:
                    51:d0:a0:05:67:b6:a9:33:22:f4:85:d7:42:4e:43:
                    ff:bf:69:f8:e7:12:fb:56:67:8b:74:89:8c:d4:bd:
                    53:b6:e4:0d:44:32:09:e4:9f:ff:ab:16:89:82:75:
                    14:34:84:f7:d3:b4:f4:53:a9:f1:36:0a:5b:d9:a7:
                    81:3d:6f:07:1b:73:d9:43:cc:04:70:03:f3:b7:d9:
                    e3:40:ae:f3:21:e3:86:53:95:95:2a:a6:ad:26:a1:
                    e1:c0:53:b8:ad:7b:39:1c:f1:7e:1a:52:d1:eb:db:
                    66:e3:b2:e1:5d:4c:04:2f:d9:b9:f1:ec:7b:de:22:
                    06:85:25:8b:3e:89:7b:4c:ea:fa:4d:c8:7b:39:2e:
                    87:fe:04:50:35:aa:00:f6:df:b5:35:39:2e:9d:9b:
                    d8:1f:82:11:73:e6:a9:e4:ac:21:4e:da:57:9b:8c:
                    0f:e3:ef:ec:78:a4:d0:d1:70:3b:b3:29:67:96:f4:
                    cf:60:a7:8e:b8:4d:d3:a8:7a:67:fb:9b:3b:76:98:
                    f9:39:46:74:bf:a5:61:94:10:78:be:07:7c:7f:b7:
                    2a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:CD:1B:34:35:67:7C:3D:B7:ED:39:08:31:AB:3E:DF:8E:12:94:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/194ace12-e4ed-4136-8094-1719b84ab2e5/7b9dbc3b-80e7-3f8b-a1d1-847953e63960.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/194ace12-e4ed-4136-8094-1719b84ab2e5/194ace12-e4ed-4136-8094-1719b84ab2e5.crl

            X509v3 Authority Key Identifier:
                keyid:BD:B6:B7:78:AD:7A:99:55:87:DF:12:DB:4C:2E:C7:E8:D0:CD:10:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/194ace12-e4ed-4136-8094-1719b84ab2e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.245.136.0-207.245.159.255
                  208.64.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:66:27:09:b0:cc:dd:61:42:a0:2a:62:04:77:cc:52:d9:3d:
         d6:79:ea:c9:c8:c7:76:8e:9e:a3:c7:8a:a7:e9:93:0d:e3:f6:
         ba:65:6a:ac:1d:c3:c0:1e:c0:7a:c3:10:d0:d2:27:f4:cc:a8:
         79:cf:37:c6:1d:1b:95:1d:94:11:f5:ba:35:03:7e:d9:34:9a:
         f2:df:cf:d2:13:0b:8c:c2:f4:29:b9:ec:25:2c:16:94:e1:0c:
         a2:29:3f:1d:0f:32:15:82:3f:13:6d:1f:c5:34:1f:63:91:b2:
         75:0a:de:37:7a:bf:d7:36:7a:fe:b0:f1:45:0c:55:10:48:3b:
         9b:f8:3a:1d:fe:6c:3f:18:d8:e2:1d:7d:8f:4b:3c:ad:07:d3:
         a0:39:19:64:87:2b:17:a3:ca:eb:e5:df:83:63:e2:66:94:d9:
         a1:27:0c:a8:8a:6f:a2:d9:69:74:ab:20:ac:31:bb:90:36:ea:
         43:fd:ea:ef:8b:17:cb:84:91:12:8c:42:9a:dd:f2:b5:57:ab:
         58:b5:6d:2c:d3:dd:1f:2a:5b:f5:ad:97:ca:1e:c5:c0:21:53:
         e3:95:a6:6d:56:66:f0:26:70:1d:46:08:66:e0:b4:a4:1f:4a:
         89:98:26:dd:b1:c3:01:d7:b9:7f:b0:ea:89:fc:7a:c1:26:dc:
         89:d1:8e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:21:20 2026 by rpki-client