Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/ed3eb783-8f94-3d0c-9b5e-e26d751b90d7.roa
File:                     ed3eb783-8f94-3d0c-9b5e-e26d751b90d7.roa (raw, json)
Hash identifier:          /RHZQ/Avh3xQwEPZMRZiiqIeFZQBm8Q8KIk1qM8QaFM=
Subject key identifier:   37:A3:A7:43:26:23:0B:6B:C1:41:D6:CF:08:30:90:A3:7C:19:10:80
Certificate issuer:       /CN=d3c880fd-17d6-4b37-9537-456ee6369ed4
Certificate serial:       010D0C9F4328584DC565A15BCE3EC348B85DC480
Authority key identifier: 62:F0:90:50:95:6D:09:D8:EA:93:D9:5F:50:8A:FA:E5:1E:79:13:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/ed3eb783-8f94-3d0c-9b5e-e26d751b90d7.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     16509
IP address blocks:        207.174.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/d3c880fd-17d6-4b37-9537-456ee6369ed4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/d3c880fd-17d6-4b37-9537-456ee6369ed4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:a1:5b:ce:3e:c3:48:b8:5d:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c880fd-17d6-4b37-9537-456ee6369ed4
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=be3a47aa-60f8-431b-9cf6-137b2e0c7f63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:23:cc:fd:78:08:c0:2e:2c:bc:79:33:fa:93:
                    c5:0b:8f:e0:11:62:e1:11:d2:a0:d6:1b:08:7d:78:
                    01:0c:b5:14:8d:44:09:7c:59:1b:2c:a1:ef:13:ca:
                    c4:d8:e7:35:d0:b2:23:fb:61:58:61:c3:d7:7d:f7:
                    e5:20:1c:ef:a2:f6:2b:eb:5b:5f:c5:f4:d1:84:b7:
                    50:e7:da:b2:0b:18:59:c2:4c:f1:15:bf:a0:c3:3d:
                    24:d8:ab:5c:e3:19:18:23:b3:4e:d4:dc:27:cf:a1:
                    18:86:3a:34:a8:c9:89:96:2c:19:ef:f8:13:2a:dc:
                    ec:a8:aa:f1:2b:87:20:72:59:1a:dd:59:b5:ef:6c:
                    4a:3c:b1:4d:35:b8:f3:c0:be:e4:3d:da:68:fd:fe:
                    1c:7b:62:01:9d:fe:b9:64:7d:1b:ad:21:f0:3c:05:
                    37:1c:8b:22:56:62:c3:c4:32:26:27:29:00:61:fc:
                    40:38:63:b0:de:21:87:6a:88:ea:71:bb:82:0f:20:
                    a8:62:2a:95:97:d2:77:96:e9:97:9a:9f:a9:a3:78:
                    cd:c2:dc:47:db:0e:12:93:98:c4:85:a2:a1:85:0d:
                    0b:54:69:a9:b4:26:17:02:bb:b7:20:d5:52:01:8a:
                    16:96:b3:f9:8b:25:52:aa:a7:06:5c:77:1e:79:c4:
                    92:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A3:A7:43:26:23:0B:6B:C1:41:D6:CF:08:30:90:A3:7C:19:10:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/ed3eb783-8f94-3d0c-9b5e-e26d751b90d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/d3c880fd-17d6-4b37-9537-456ee6369ed4.crl

            X509v3 Authority Key Identifier:
                keyid:62:F0:90:50:95:6D:09:D8:EA:93:D9:5F:50:8A:FA:E5:1E:79:13:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:c8:f3:20:a3:e9:aa:fd:5d:f0:66:df:31:69:65:f8:9e:80:
         45:77:9b:de:26:25:6a:25:a3:9f:07:8c:72:90:01:ff:10:82:
         ff:ef:06:28:d3:c1:f5:61:33:15:b8:1a:66:96:38:10:a1:33:
         b1:3b:26:fd:1a:0a:84:a6:f6:35:51:ed:b9:b2:6a:fc:35:55:
         94:84:06:05:34:76:12:9f:5b:07:df:c5:b6:b7:81:0e:b3:ba:
         4c:32:37:e2:80:cd:6a:76:46:90:d3:d3:e6:ae:d1:4b:ad:dd:
         85:fa:a1:1e:f1:37:f1:b0:7a:fe:3f:6e:df:f1:09:68:44:cf:
         4f:fe:0b:e3:20:89:e9:63:1a:28:ca:b5:f1:a3:8f:b4:74:fa:
         b0:0c:a5:a4:81:1e:4b:fa:f5:42:0e:ea:b1:9b:6e:29:11:66:
         41:bb:47:e6:d0:9c:82:10:1c:75:e3:be:ee:7e:a8:69:54:27:
         8a:a7:f7:b1:db:a0:75:9b:05:ba:21:99:48:e0:51:af:02:30:
         25:87:64:ce:0b:36:a0:20:37:18:ac:bc:ac:4e:06:42:97:3a:
         05:c0:68:60:30:90:1e:a2:21:eb:62:7c:a4:62:f2:8f:d5:0e:
         fc:eb:79:2e:9b:bf:f6:70:01:36:40:5b:47:d6:bd:f6:45:17:
         df:13:5e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:09:46 2026 by rpki-client