Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6653704b-dbc1-4715-bba6-8fb7a6c4d910/8ff1655e-292d-3e62-ad6a-dbc6eaa1a8eb.roa
File:                     8ff1655e-292d-3e62-ad6a-dbc6eaa1a8eb.roa (raw, json)
Hash identifier:          skiKRltnvm4zb1TVuoRxS4slhrrddRm8uIMsA9XnwOI=
Subject key identifier:   71:C5:96:6B:C0:1F:19:16:88:9E:BE:82:B3:3F:5B:71:AA:FC:F8:33
Certificate issuer:       /CN=6653704b-dbc1-4715-bba6-8fb7a6c4d910
Certificate serial:       010D0C9F4328584E94EA57B8631560F46CE3DC00
Authority key identifier: 53:08:3B:83:C5:0C:C7:18:C1:2D:0A:A0:BB:A1:53:5E:A2:69:05:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6653704b-dbc1-4715-bba6-8fb7a6c4d910.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6653704b-dbc1-4715-bba6-8fb7a6c4d910/8ff1655e-292d-3e62-ad6a-dbc6eaa1a8eb.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     18474
IP address blocks:        207.90.248.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6653704b-dbc1-4715-bba6-8fb7a6c4d910/6653704b-dbc1-4715-bba6-8fb7a6c4d910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6653704b-dbc1-4715-bba6-8fb7a6c4d910/6653704b-dbc1-4715-bba6-8fb7a6c4d910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6653704b-dbc1-4715-bba6-8fb7a6c4d910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:57:b8:63:15:60:f4:6c:e3:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6653704b-dbc1-4715-bba6-8fb7a6c4d910
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=619956dc-96cf-44a5-b3c6-d615df66d248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:53:3d:fa:6f:72:2a:5a:99:2b:41:91:40:46:
                    e9:b7:94:53:1f:1d:48:e5:e7:3b:5c:69:65:89:da:
                    08:84:c0:82:54:7c:ff:4c:5d:30:ed:3e:7b:0f:2a:
                    5c:26:74:d0:5b:32:8e:af:a3:00:87:55:c6:f7:51:
                    c1:42:6e:03:28:9e:68:03:08:13:20:b4:71:9d:d8:
                    dc:34:93:85:2e:3f:3d:99:cd:65:62:11:e4:24:fb:
                    47:9b:ce:32:f5:d8:0d:ef:94:27:63:c2:3b:4b:57:
                    b4:2f:10:ed:0f:3c:c2:c0:da:af:62:0a:9c:fa:91:
                    64:c3:f3:72:c0:e5:cd:a1:2e:d3:5f:98:fc:d3:d4:
                    95:75:c2:5f:2d:c5:7b:12:6d:ed:c4:47:e8:f4:1c:
                    75:6c:25:93:58:e2:3a:b2:85:da:3c:b1:3b:8b:92:
                    c8:0e:4b:e7:83:ab:f4:41:af:82:2a:42:8e:3c:00:
                    14:2e:71:98:c6:df:71:07:b3:5b:05:d4:f2:01:2b:
                    de:69:71:04:81:08:aa:51:1b:09:f7:ed:13:37:56:
                    f3:5f:8f:57:96:d0:39:25:43:eb:28:c3:65:ac:96:
                    fa:a1:5a:13:e5:0e:2b:4d:b0:14:0f:56:96:55:22:
                    4d:56:a7:18:11:16:e1:d1:5c:8a:38:4b:b9:9b:47:
                    73:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C5:96:6B:C0:1F:19:16:88:9E:BE:82:B3:3F:5B:71:AA:FC:F8:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6653704b-dbc1-4715-bba6-8fb7a6c4d910/8ff1655e-292d-3e62-ad6a-dbc6eaa1a8eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6653704b-dbc1-4715-bba6-8fb7a6c4d910/6653704b-dbc1-4715-bba6-8fb7a6c4d910.crl

            X509v3 Authority Key Identifier:
                keyid:53:08:3B:83:C5:0C:C7:18:C1:2D:0A:A0:BB:A1:53:5E:A2:69:05:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6653704b-dbc1-4715-bba6-8fb7a6c4d910.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.90.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:57:86:4f:61:4f:1f:87:f9:ad:dc:92:96:73:91:ee:de:53:
         aa:da:c5:2a:19:b4:4f:b0:fd:19:38:4e:3b:3b:c5:23:b7:b2:
         a3:87:c9:7e:dc:7a:42:1d:3c:d8:75:7b:a2:73:82:4c:a9:45:
         36:4f:ff:bb:e8:ad:68:05:49:93:eb:9f:15:99:56:7b:3d:c9:
         4f:41:60:ca:b4:f9:a6:11:cd:be:31:00:3d:19:88:e1:f7:3e:
         e7:25:32:3e:d2:a4:c3:be:3f:21:87:4b:fb:9d:ba:ae:2b:e5:
         c7:40:76:a9:ec:dd:f7:f0:3d:34:54:32:8c:35:33:07:5f:be:
         f2:5b:e3:a4:5f:db:c6:14:a7:a9:65:63:d6:84:1d:a2:a6:9c:
         ba:5a:09:1a:3e:2d:24:98:37:5c:70:bb:e0:f8:5a:4c:f6:0d:
         d3:c0:35:21:d3:82:16:8a:67:2d:39:dc:8e:35:0d:a1:7d:97:
         76:c8:14:17:8f:b7:be:ab:fd:72:25:42:ba:3d:27:bc:35:3e:
         e5:39:c5:34:ad:57:32:a6:2d:9e:b8:63:42:00:44:4e:11:9b:
         18:59:b6:2c:0e:c9:f0:6c:ec:23:e7:eb:80:76:d2:06:3d:1b:
         2b:cd:c7:a8:41:28:3f:21:cd:d1:8d:c7:72:e4:99:4c:e4:d2:
         11:a4:d5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:48:34 2026 by rpki-client