Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8/ecba2cf0-909e-3f35-bfbd-ff645bdb4962.roa
File:                     ecba2cf0-909e-3f35-bfbd-ff645bdb4962.roa (raw, json)
Hash identifier:          82jQ5fgFeP1ee+mzjLZ/KA+LmNj24d7pXbVydLeugzY=
Subject key identifier:   93:10:C2:47:E0:31:7F:1B:87:E2:61:7D:52:C1:06:FB:F7:4F:4B:90
Certificate issuer:       /CN=5f4c623c-0d0c-4995-9560-0507df4828e8
Certificate serial:       010D0C9F4328584E7FFA387C069E11058F155C80
Authority key identifier: 0A:07:21:55:55:AD:C3:06:34:0F:EB:1F:20:ED:B2:BF:34:13:67:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8/ecba2cf0-909e-3f35-bfbd-ff645bdb4962.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     54900
IP address blocks:        198.204.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8/5f4c623c-0d0c-4995-9560-0507df4828e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8/5f4c623c-0d0c-4995-9560-0507df4828e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:38:7c:06:9e:11:05:8f:15:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f4c623c-0d0c-4995-9560-0507df4828e8
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=2047b7d9-47a9-4d52-921a-b6d4bcfbce38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c8:ba:0d:61:8f:83:e1:25:75:26:80:6e:35:
                    7b:b9:32:e0:7c:81:fa:c8:e2:8b:1d:f3:01:f3:95:
                    78:28:46:ff:d7:2f:a0:4a:b7:4f:30:1a:3d:df:c1:
                    ee:df:19:4e:c5:d4:2e:99:a6:6e:f4:08:60:55:c4:
                    51:52:7a:55:19:16:46:2f:85:4a:fe:ca:1b:9c:22:
                    b6:61:9a:6b:37:24:9b:d6:cd:a6:19:9b:1e:9d:b3:
                    be:78:23:1d:80:75:b3:de:35:ac:c8:37:2b:ef:a7:
                    9a:23:db:31:45:3a:86:f3:4e:e8:cd:73:77:5f:db:
                    a7:a9:46:eb:9a:a4:2e:df:13:e6:93:43:d3:be:14:
                    cc:54:9f:1b:54:6b:0e:41:4f:c1:a0:76:c1:46:52:
                    48:7e:74:ce:a7:10:87:8f:48:63:63:14:9a:ec:b0:
                    ab:9c:bd:fe:e3:e7:01:a5:b0:74:b4:44:03:10:42:
                    1c:d3:c5:db:54:42:1a:fd:63:88:c5:74:48:43:f3:
                    ae:fc:42:71:d7:4d:bf:c7:1c:96:1c:1f:1f:5b:12:
                    f4:d8:13:68:74:1e:35:32:01:75:70:d2:6b:d5:75:
                    55:5e:62:a0:3c:0b:f2:c9:20:e8:e5:90:d1:ea:5c:
                    ab:c4:bb:97:49:2f:b5:eb:59:5d:76:09:dd:d6:62:
                    66:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:10:C2:47:E0:31:7F:1B:87:E2:61:7D:52:C1:06:FB:F7:4F:4B:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8/ecba2cf0-909e-3f35-bfbd-ff645bdb4962.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8/5f4c623c-0d0c-4995-9560-0507df4828e8.crl

            X509v3 Authority Key Identifier:
                keyid:0A:07:21:55:55:AD:C3:06:34:0F:EB:1F:20:ED:B2:BF:34:13:67:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f4c623c-0d0c-4995-9560-0507df4828e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.204.62.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:71:e2:17:29:ac:f2:2a:e8:21:60:98:97:60:69:6e:1e:3a:
         43:bc:a7:8a:8f:73:ae:51:72:cc:01:2b:ec:72:43:16:d1:01:
         4c:52:e0:34:ac:c6:58:4f:66:c9:17:33:32:98:59:85:51:26:
         df:b2:0b:11:d0:11:78:b1:70:6f:de:84:f7:50:93:94:2c:f2:
         0f:f8:0c:80:13:65:65:a7:89:fe:86:c6:08:f2:17:44:f2:1c:
         20:8c:60:fc:ed:d3:58:20:28:12:79:8d:81:75:19:72:47:90:
         37:5f:4a:2e:97:53:ab:ad:9d:79:9d:01:0a:74:fc:31:d7:25:
         c6:15:1c:0a:99:a6:fa:a8:1f:69:51:40:59:e1:62:cf:73:74:
         eb:7f:3e:3c:e5:ab:35:4b:6b:97:f1:ad:3f:d6:9f:e6:7d:fc:
         48:c8:5d:3d:a6:ca:2f:d3:4b:ff:c3:fe:3d:57:82:97:8c:22:
         80:36:e9:63:99:f0:df:b1:be:ac:de:e7:81:d4:57:01:e7:00:
         84:59:c3:d5:18:8e:e4:15:4d:94:39:e1:d9:06:1f:bd:0e:f3:
         e8:59:9d:7a:d0:61:31:14:e2:c1:1f:8a:fe:f4:ad:92:58:6d:
         1c:32:a2:90:39:a7:35:75:68:2f:a3:a5:3c:65:a9:c3:7f:25:
         ce:bb:3c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:17:41 2026 by rpki-client