Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/7782712d-1e27-3c4f-bb3f-01c6dad76529.roa
File:                     7782712d-1e27-3c4f-bb3f-01c6dad76529.roa (raw, json)
Hash identifier:          0dSTb3/IcEd40euTQsBbH4Grv0OCVXSVpXP1VbxJVy0=
Subject key identifier:   33:6A:78:CD:96:AC:16:B1:80:DA:99:06:24:4F:CF:B7:0F:20:23:40
Certificate issuer:       /CN=2a71f00e-0200-48df-9cb4-008df9a4a854
Certificate serial:       010D0C9F4328584E9384F9E4D8BF437AA9478100
Authority key identifier: 38:0D:64:C0:FC:18:06:FB:A2:13:99:2A:01:58:BD:19:46:77:76:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/7782712d-1e27-3c4f-bb3f-01c6dad76529.roa
Signing time:             Tue 21 Jul 2026 21:00:12 +0000
ROA not before:           Tue 21 Jul 2026 21:00:12 +0000
ROA not after:            Mon 19 Oct 2026 21:00:12 +0000
asID:                     22855
IP address blocks:        199.230.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:93:84:f9:e4:d8:bf:43:7a:a9:47:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a71f00e-0200-48df-9cb4-008df9a4a854
        Validity
            Not Before: Jul 21 21:00:12 2026 GMT
            Not After : Oct 19 21:00:12 2026 GMT
        Subject: CN=14def3d3-89ea-495d-b964-0d9bbb5e7b20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:dd:81:6b:57:37:92:61:a7:01:a6:5c:59:fc:
                    94:6c:97:b9:15:c6:e5:d6:e1:0c:b3:ec:b4:67:ad:
                    58:6b:75:3e:70:c5:1f:ba:2c:2a:aa:69:4f:c1:b8:
                    5e:5d:cc:1c:1b:6c:03:0c:62:2e:6f:42:9b:5a:a3:
                    7e:fe:e7:d6:b4:06:01:02:e2:c1:39:94:c1:e3:c9:
                    10:c2:f3:8f:79:96:97:d0:6b:e2:29:55:16:1c:f1:
                    43:5e:92:cd:9f:89:34:bc:18:f9:e9:19:7c:18:70:
                    61:31:37:6c:25:5e:15:c3:fd:e8:5a:95:54:f2:6d:
                    bf:4d:e8:66:9a:5c:77:d3:75:92:40:b5:60:a2:77:
                    24:a8:87:a9:8c:b1:c1:68:6b:13:50:1a:09:92:95:
                    cd:84:5c:7d:22:10:7a:60:d8:b0:b7:2c:ae:71:55:
                    bc:b0:b2:f4:86:3c:4c:d7:8d:77:69:eb:46:bb:e0:
                    c7:72:9f:9c:56:f0:5f:b9:00:1c:1c:76:77:fd:dc:
                    ee:41:2d:27:bf:83:96:66:c8:67:ef:c5:d2:e7:ba:
                    24:75:ff:d6:b9:9e:57:d8:53:39:27:e8:e0:39:16:
                    74:9a:4c:e4:3a:fe:8f:10:aa:cd:86:f5:f4:d1:96:
                    6a:b2:81:ee:1f:a2:f5:0c:4c:ee:0c:6c:dc:b2:97:
                    2e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:6A:78:CD:96:AC:16:B1:80:DA:99:06:24:4F:CF:B7:0F:20:23:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/7782712d-1e27-3c4f-bb3f-01c6dad76529.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854/2a71f00e-0200-48df-9cb4-008df9a4a854.crl

            X509v3 Authority Key Identifier:
                keyid:38:0D:64:C0:FC:18:06:FB:A2:13:99:2A:01:58:BD:19:46:77:76:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2a71f00e-0200-48df-9cb4-008df9a4a854.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.230.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:df:09:fb:40:4c:c7:ce:7a:24:7e:d8:74:05:6c:de:dd:b8:
         27:ad:0d:fc:39:8d:14:ba:f8:21:4b:89:38:c6:6e:15:18:6d:
         23:94:de:c7:ff:81:0b:6b:f0:f2:d0:62:16:7d:d4:61:8a:06:
         ac:a7:44:34:3d:8f:e4:2c:68:72:59:e5:23:14:be:c1:91:30:
         4e:d7:ff:c7:22:4a:07:64:3f:a1:d4:17:7d:66:34:c5:44:0a:
         2f:4a:06:40:fa:68:ad:7f:e1:9f:84:0b:99:a6:51:63:d3:1d:
         78:b9:f8:a6:a7:c4:34:3b:66:77:be:0a:2e:dc:37:ac:f0:2e:
         8f:63:4e:a6:a8:c2:a2:b0:44:16:79:98:fb:5c:e2:b6:12:b6:
         d8:1e:96:8b:09:c4:c2:cb:13:a8:f3:72:48:b3:cf:48:85:18:
         dd:ae:2d:71:c9:ea:60:e9:83:2c:ad:5b:79:2a:80:fb:e7:a1:
         e0:a1:fb:13:0a:d8:5c:ef:f6:ff:d9:e0:40:2d:f0:e7:6f:aa:
         2a:32:32:5c:69:33:54:e9:19:70:25:84:85:a1:e9:d7:83:77:
         8e:ec:bd:02:17:8b:99:4f:89:8e:f2:fe:15:49:5a:87:87:47:
         ac:08:80:18:e6:ed:e7:49:c1:2c:3b:b9:d3:ee:1b:24:5f:10:
         fb:fc:dc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:49:51 2026 by rpki-client