Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/89eaa103-3d25-458b-b6a5-3911ed0da5c0/e7b738ad-dc1c-3eb3-979d-4b493f952550.roa
File:                     e7b738ad-dc1c-3eb3-979d-4b493f952550.roa (raw, json)
Hash identifier:          E7khxG8j2BcqVhqE+ZSXkwjMKM3HyH3wUE1zxhcvf3A=
Subject key identifier:   03:0C:93:6A:37:5F:0E:82:32:1C:B3:67:1E:CB:6D:EE:BD:4E:09:7E
Certificate issuer:       /CN=89eaa103-3d25-458b-b6a5-3911ed0da5c0
Certificate serial:       010D0C9F4328584E856226F9240CC014AB0C7740
Authority key identifier: E0:A5:22:F9:2F:0B:0E:82:12:1E:F5:F7:A8:0C:E9:87:A9:2A:F2:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/89eaa103-3d25-458b-b6a5-3911ed0da5c0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/89eaa103-3d25-458b-b6a5-3911ed0da5c0/e7b738ad-dc1c-3eb3-979d-4b493f952550.roa
Signing time:             Thu 16 Jul 2026 19:28:47 +0000
ROA not before:           Thu 16 Jul 2026 19:28:47 +0000
ROA not after:            Wed 14 Oct 2026 19:28:47 +0000
asID:                     22316
IP address blocks:        158.222.64.0/20 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/89eaa103-3d25-458b-b6a5-3911ed0da5c0/89eaa103-3d25-458b-b6a5-3911ed0da5c0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/89eaa103-3d25-458b-b6a5-3911ed0da5c0/89eaa103-3d25-458b-b6a5-3911ed0da5c0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/89eaa103-3d25-458b-b6a5-3911ed0da5c0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:85:62:26:f9:24:0c:c0:14:ab:0c:77:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89eaa103-3d25-458b-b6a5-3911ed0da5c0
        Validity
            Not Before: Jul 16 19:28:47 2026 GMT
            Not After : Oct 14 19:28:47 2026 GMT
        Subject: CN=35be21d8-e652-45ff-9143-ee1c740bcd57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8b:5e:cf:3d:f6:a3:19:e0:8c:8e:b9:b5:f8:
                    42:2c:9a:43:d9:0f:e0:24:32:d5:77:7f:27:3b:cd:
                    1c:b2:6d:39:ff:9c:7f:aa:81:e5:54:5d:1e:8c:bd:
                    10:d1:e5:5e:a2:e8:1f:3f:8a:ce:ac:fc:48:96:a5:
                    8f:25:ef:10:f1:5e:6e:ed:81:be:46:c8:4c:97:f0:
                    a4:89:6e:c7:56:87:ad:25:f8:f0:64:25:2c:5c:c9:
                    f0:77:7d:eb:79:f6:17:b2:d3:f3:c4:b7:56:02:ed:
                    34:a8:de:1b:52:74:26:1f:53:14:a5:63:8b:c8:88:
                    12:b8:26:4d:0c:aa:14:5a:1e:78:ce:ab:0a:cf:7c:
                    c2:cf:40:65:42:9e:d7:9e:36:d7:69:cd:6c:a7:3f:
                    93:53:20:94:f7:81:89:6b:d2:e9:a4:ec:4f:df:a8:
                    bb:06:3c:78:05:38:c8:0a:5a:33:f4:ad:d4:c6:f2:
                    8a:94:3d:83:3f:30:f9:3b:0d:eb:f5:40:c7:29:f7:
                    c8:5a:18:e9:af:f6:5b:b9:0a:5d:16:31:16:cb:58:
                    60:f6:f2:8e:3d:de:76:d7:e5:f8:9e:a4:2c:e9:23:
                    27:be:7c:54:51:9b:73:68:a8:10:6e:5b:85:61:5e:
                    7d:66:54:c9:72:4c:12:2d:c4:8e:75:3f:3b:28:ec:
                    97:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:0C:93:6A:37:5F:0E:82:32:1C:B3:67:1E:CB:6D:EE:BD:4E:09:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/89eaa103-3d25-458b-b6a5-3911ed0da5c0/e7b738ad-dc1c-3eb3-979d-4b493f952550.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/89eaa103-3d25-458b-b6a5-3911ed0da5c0/89eaa103-3d25-458b-b6a5-3911ed0da5c0.crl

            X509v3 Authority Key Identifier:
                keyid:E0:A5:22:F9:2F:0B:0E:82:12:1E:F5:F7:A8:0C:E9:87:A9:2A:F2:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/89eaa103-3d25-458b-b6a5-3911ed0da5c0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.222.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:f2:76:ea:e2:2d:eb:2f:a6:90:e7:b3:49:3a:b7:03:ae:c4:
         17:9e:37:d4:b7:f4:f4:6b:34:fa:e6:1f:da:4d:df:c5:b5:2e:
         1d:71:c8:64:77:bc:d1:57:82:14:09:08:a2:31:75:17:73:c6:
         b0:eb:5a:f7:d6:ee:a8:21:d3:96:13:a0:11:75:fc:7f:18:e2:
         9b:0e:a6:5e:a8:da:d1:14:05:a4:ff:3e:03:39:68:15:98:a5:
         19:2a:d0:61:6c:fc:b2:7a:56:57:1b:27:83:38:fe:8a:03:84:
         d2:1d:50:65:ff:05:09:0a:39:35:92:71:a1:26:ae:ed:13:13:
         ba:c3:e6:96:9a:69:d7:e1:3d:c3:35:46:01:8e:27:e4:0f:b1:
         0d:79:a9:ee:ef:f5:c2:e1:b9:3d:e6:fd:3b:b0:70:04:76:da:
         ab:fc:2c:37:18:6a:78:02:bc:53:76:ed:56:80:4d:c9:ea:44:
         62:2e:27:d5:ca:de:89:28:b5:ca:b0:07:fe:72:aa:3e:52:bd:
         e7:cd:28:b0:95:6b:e7:67:df:3e:e2:df:11:15:40:64:06:d0:
         6b:63:5b:bb:6e:a9:26:ff:7b:26:5c:f7:47:07:77:24:23:28:
         24:ac:58:9b:7b:37:ca:44:49:5c:99:24:7d:e3:3c:50:56:fc:
         60:cb:14:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:20:47 2026 by rpki-client