Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917bf66f-fa51-48f2-813c-8b0191c1aa76/d442156c-4d4b-307b-9416-612333104ee4.roa
File:                     d442156c-4d4b-307b-9416-612333104ee4.roa (raw, json)
Hash identifier:          7sx5FuXOZisJByQ3A39CblYDuZQySzgTKYPUp1IapCo=
Subject key identifier:   0A:E2:DC:E8:0B:11:7B:4D:2F:A4:BD:3A:0B:08:C0:0C:78:CC:B8:3A
Certificate issuer:       /CN=917bf66f-fa51-48f2-813c-8b0191c1aa76
Certificate serial:       010D0C9F4328584DB4A583EDE30B8BE4C97752F0
Authority key identifier: DD:43:56:99:72:BB:27:1F:0F:3A:19:36:38:E8:D0:FA:84:20:D0:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917bf66f-fa51-48f2-813c-8b0191c1aa76.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917bf66f-fa51-48f2-813c-8b0191c1aa76/d442156c-4d4b-307b-9416-612333104ee4.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     5065
IP address blocks:        199.7.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917bf66f-fa51-48f2-813c-8b0191c1aa76/917bf66f-fa51-48f2-813c-8b0191c1aa76.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917bf66f-fa51-48f2-813c-8b0191c1aa76/917bf66f-fa51-48f2-813c-8b0191c1aa76.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917bf66f-fa51-48f2-813c-8b0191c1aa76.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:83:ed:e3:0b:8b:e4:c9:77:52:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=917bf66f-fa51-48f2-813c-8b0191c1aa76
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=82beee2c-308f-4cee-bed3-2b9efb2d03ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ca:0b:32:10:da:7d:70:05:a3:c1:d6:f1:66:
                    9e:bf:4e:cb:0f:65:6f:38:32:77:e9:08:24:ea:64:
                    55:03:8c:ff:47:4a:4c:cf:bf:f3:a0:27:c8:dc:7d:
                    88:68:52:0b:68:d9:2d:d7:2f:2c:ef:97:f4:23:0f:
                    cb:a0:04:01:6d:60:eb:55:94:ea:36:bb:e2:0a:6f:
                    04:e0:6f:24:95:ef:c5:04:25:50:52:05:5c:87:9d:
                    3e:20:12:9c:d4:87:0d:c6:e3:09:9a:0d:40:c1:0a:
                    af:b3:e3:dc:ef:b3:1c:f7:43:7c:d7:a8:e4:6c:10:
                    6a:58:f1:cf:eb:be:67:0b:0c:a9:c0:3d:0c:09:c7:
                    b2:f3:bf:f0:f3:e4:51:66:90:60:c9:e7:9b:2d:69:
                    d5:69:d8:18:eb:e3:46:68:2d:5b:76:32:c2:4c:8a:
                    ab:e7:32:f6:8b:20:77:a2:06:f8:b5:7a:8a:a6:30:
                    52:25:ad:0c:e7:90:38:a9:db:7e:03:09:26:10:9f:
                    69:22:b2:25:5a:48:8e:ab:e1:94:c1:03:04:93:e9:
                    75:49:23:c2:45:23:ef:87:06:0d:7c:96:00:08:4c:
                    4a:cd:e0:f2:b4:0d:4c:88:9c:a5:1b:11:b1:f8:2f:
                    94:4a:74:0d:fb:2e:87:b4:5c:c9:d8:9e:f9:32:01:
                    09:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E2:DC:E8:0B:11:7B:4D:2F:A4:BD:3A:0B:08:C0:0C:78:CC:B8:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917bf66f-fa51-48f2-813c-8b0191c1aa76/d442156c-4d4b-307b-9416-612333104ee4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917bf66f-fa51-48f2-813c-8b0191c1aa76/917bf66f-fa51-48f2-813c-8b0191c1aa76.crl

            X509v3 Authority Key Identifier:
                keyid:DD:43:56:99:72:BB:27:1F:0F:3A:19:36:38:E8:D0:FA:84:20:D0:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917bf66f-fa51-48f2-813c-8b0191c1aa76.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:be:b4:e5:37:a2:59:59:66:3f:e2:fd:98:f6:6f:dc:44:aa:
         00:3c:d6:a3:9a:f6:94:6d:f0:b2:b9:04:39:7e:1e:6a:5e:67:
         db:d2:13:df:bf:d7:58:ac:9a:a0:06:08:d1:9b:f5:a0:1b:1f:
         eb:f0:b6:a7:45:c6:90:c9:9e:06:bb:2c:2e:57:d8:4a:ca:b9:
         ea:d2:7e:5a:de:7c:62:69:f3:b1:20:52:6d:a3:f1:47:a0:4c:
         b7:35:48:c8:cc:b0:19:2a:b1:91:12:3b:b3:16:da:01:85:38:
         50:a9:69:68:e6:ad:46:1f:93:29:3f:95:78:1c:74:cc:8f:5f:
         f1:ec:2c:94:e0:b0:f5:fb:c7:83:5a:44:9b:7e:a3:a5:1c:4a:
         e3:c0:18:6d:e4:73:d2:a9:7a:b2:a9:c9:fe:1c:83:f3:56:e8:
         21:2f:ee:e4:2b:8e:56:e0:8b:00:1e:00:c9:84:5f:28:79:73:
         28:57:b4:6e:13:bb:90:4c:38:f9:7c:73:4e:1e:96:fa:ac:8a:
         b4:b0:11:8b:6a:68:c7:c3:4c:ef:a8:d7:25:33:b0:1d:db:a6:
         c2:2e:99:77:70:7d:b7:c1:f9:23:b5:d3:12:e9:df:86:20:5f:
         00:c5:10:44:29:db:06:11:ab:93:5d:c2:43:03:84:c8:9f:1a:
         5f:9c:37:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:04:14 2026 by rpki-client