Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/b7718956-829a-3e02-9a2b-7cfb84f2012b.roa
File:                     b7718956-829a-3e02-9a2b-7cfb84f2012b.roa (raw, json)
Hash identifier:          DAMXokKadveH02KepWR2y14F3nYxXtlAHHdcqeNAxKc=
Subject key identifier:   1B:78:70:AD:15:D0:80:03:1F:10:45:A9:15:2A:F1:B5:62:E0:A3:CF
Certificate issuer:       /CN=add35f11-0294-4be9-94b7-49cac2bcb001
Certificate serial:       010D0C9F4328584E640F65BE84CB1FABC3B28800
Authority key identifier: A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/b7718956-829a-3e02-9a2b-7cfb84f2012b.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     212149
IP address blocks:        207.167.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:65:be:84:cb:1f:ab:c3:b2:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=add35f11-0294-4be9-94b7-49cac2bcb001
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=a121c344-5493-4440-93f1-c711200c1241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:69:0d:a1:62:e2:e7:cd:80:91:a8:29:4d:86:
                    7d:1a:d5:d7:e0:b2:1b:95:b8:45:ee:74:0e:5e:b4:
                    cc:2d:5d:33:80:d3:f3:32:17:7d:96:86:73:2b:31:
                    29:6c:53:7d:1a:b1:44:c5:9d:e9:32:e0:4d:ea:4d:
                    53:4c:48:9c:18:aa:24:d8:69:8c:45:ce:ac:2e:27:
                    29:d8:6e:f7:45:f3:96:26:dd:b1:6f:4a:d3:ea:86:
                    ac:0e:8c:6b:2f:1d:35:33:e6:8f:c4:1a:e3:1e:26:
                    9d:cd:78:96:21:be:cc:33:3d:87:66:3e:8c:51:5b:
                    aa:af:f0:c0:fc:5e:cf:8d:6f:77:57:31:69:90:10:
                    d1:d1:7c:77:53:c2:5c:cd:d0:11:0d:5f:2d:cc:23:
                    fd:47:45:25:d6:1a:fd:b3:74:fc:73:42:4f:61:b7:
                    14:88:d2:2c:dd:e1:51:49:1d:49:17:a1:45:8f:9a:
                    9d:47:2a:66:c9:bf:90:0f:4a:6a:68:ea:ad:ab:93:
                    c9:b2:87:de:20:00:e4:3b:0c:21:bb:8b:22:99:be:
                    67:08:9f:18:cc:e0:e1:00:af:3a:e0:e4:ac:d5:e8:
                    9b:2d:1f:9a:d7:87:05:59:d6:f6:44:1d:be:15:f0:
                    90:ee:e5:16:c3:54:6f:54:d0:f9:53:53:6a:e7:f2:
                    28:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:78:70:AD:15:D0:80:03:1F:10:45:A9:15:2A:F1:B5:62:E0:A3:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/b7718956-829a-3e02-9a2b-7cfb84f2012b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl

            X509v3 Authority Key Identifier:
                keyid:A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.167.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:fd:69:55:3b:12:3f:d6:e0:ed:e1:f0:5f:39:9b:26:d6:d2:
         56:b2:1c:35:68:f6:7b:8a:6f:f2:d3:99:8f:0c:da:9c:f7:7b:
         48:12:5c:a1:a4:5c:15:78:bf:a3:8d:ca:f7:7b:e0:a9:41:35:
         3d:e6:98:06:16:2f:67:20:3e:d4:47:38:32:b0:af:e2:63:98:
         60:bc:9c:82:ac:33:37:77:84:bb:97:61:8b:f7:49:38:63:63:
         57:c4:fd:84:57:f7:26:1c:ee:e1:5f:de:58:1f:0f:4e:f4:6a:
         36:35:4d:44:be:3e:69:50:06:6a:5b:be:89:b6:19:42:63:b7:
         db:66:6e:c7:d7:9e:1a:b0:15:ed:43:2d:9d:11:fd:4d:a3:8d:
         c6:e3:b1:c4:52:90:02:bc:db:4f:12:86:48:f7:13:0b:bf:e1:
         95:ac:6e:1e:3d:cd:e1:b1:ce:9e:50:e3:ef:8a:0e:bc:33:29:
         2e:b0:34:05:3f:f9:23:5a:9d:23:77:99:d0:14:52:67:f9:ef:
         fb:b8:1a:8d:b1:2f:7c:b7:5f:51:a7:66:d1:52:1f:5a:72:57:
         25:3f:c2:cb:ce:8a:28:72:54:af:54:53:bc:52:02:a2:f5:9d:
         a6:59:41:d9:12:c8:64:22:8e:80:db:9b:e5:a9:03:31:38:be:
         b2:4d:18:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:48:17 2026 by rpki-client