Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f7e7e3cb-e1fa-40ed-9cdc-ff9f2dbd86f3/dc02f284-734d-3c32-a3af-db88eefdd521.roa
File:                     dc02f284-734d-3c32-a3af-db88eefdd521.roa (raw, json)
Hash identifier:          KIELDHtyuqZuNeoLJaFggDLcqTjF9KY+9GOHIrC5PRM=
Subject key identifier:   E6:AC:64:54:F7:92:1E:2F:2F:52:F5:F3:24:24:5A:BF:A2:3B:51:7F
Certificate issuer:       /CN=f7e7e3cb-e1fa-40ed-9cdc-ff9f2dbd86f3
Certificate serial:       010D0C9F4328584F45AE3AFE4BFB9DC68D43E980
Authority key identifier: FD:C7:BD:C9:49:06:E0:F1:34:EE:86:6C:C3:88:24:DF:12:06:F9:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f7e7e3cb-e1fa-40ed-9cdc-ff9f2dbd86f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f7e7e3cb-e1fa-40ed-9cdc-ff9f2dbd86f3/dc02f284-734d-3c32-a3af-db88eefdd521.roa
Signing time:             Wed 23 Sep 2026 16:37:17 +0000
ROA not before:           Wed 23 Sep 2026 16:37:17 +0000
ROA not after:            Tue 22 Dec 2026 17:37:17 +0000
asID:                     402687
IP address blocks:        207.241.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f7e7e3cb-e1fa-40ed-9cdc-ff9f2dbd86f3/f7e7e3cb-e1fa-40ed-9cdc-ff9f2dbd86f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f7e7e3cb-e1fa-40ed-9cdc-ff9f2dbd86f3/f7e7e3cb-e1fa-40ed-9cdc-ff9f2dbd86f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f7e7e3cb-e1fa-40ed-9cdc-ff9f2dbd86f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:45:ae:3a:fe:4b:fb:9d:c6:8d:43:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7e7e3cb-e1fa-40ed-9cdc-ff9f2dbd86f3
        Validity
            Not Before: Sep 23 16:37:17 2026 GMT
            Not After : Dec 22 17:37:17 2026 GMT
        Subject: CN=f43f3666-1423-472f-aeaf-a6af0b6e3df5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:82:6c:6a:2c:6e:2d:66:58:e6:54:b0:37:e9:
                    7f:b2:08:cf:a9:18:e3:52:e3:66:27:8c:1a:55:48:
                    ed:92:10:37:32:72:7e:bc:17:03:d4:5e:88:1d:ff:
                    31:90:02:89:25:80:ab:ec:7f:2c:6c:4f:77:cf:c9:
                    18:9a:4a:cb:f4:4f:60:ee:2f:52:86:2a:86:7f:da:
                    6c:97:b0:ad:70:85:24:46:df:7c:d0:1b:e7:26:7e:
                    ce:d1:92:bf:73:d0:ac:46:3a:3f:8c:3a:7d:b7:d5:
                    da:9a:b3:a2:2d:d2:75:ef:92:c1:e0:0f:ea:aa:76:
                    7e:7e:52:85:fa:af:24:aa:0c:27:dd:47:2b:80:d9:
                    29:3c:38:30:07:46:29:e7:67:6c:88:67:37:12:ec:
                    dc:d4:5a:1a:0c:2c:6b:e4:ba:6d:90:5d:c1:ae:02:
                    21:34:52:ad:ba:dc:e0:84:e7:c3:75:6b:a5:b2:b0:
                    c3:54:6c:48:2d:08:dd:80:c0:e9:86:9b:20:23:71:
                    fc:dc:d6:b2:89:d2:72:44:1e:ae:cb:5f:7f:ee:2b:
                    3e:69:d9:e1:c4:11:34:b1:05:ae:42:03:80:7c:4a:
                    db:aa:10:4f:d4:d7:47:c4:34:3b:29:90:74:89:6f:
                    0f:73:1c:ba:40:ee:17:fc:f5:d4:6e:58:ba:58:53:
                    44:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:AC:64:54:F7:92:1E:2F:2F:52:F5:F3:24:24:5A:BF:A2:3B:51:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f7e7e3cb-e1fa-40ed-9cdc-ff9f2dbd86f3/dc02f284-734d-3c32-a3af-db88eefdd521.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f7e7e3cb-e1fa-40ed-9cdc-ff9f2dbd86f3/f7e7e3cb-e1fa-40ed-9cdc-ff9f2dbd86f3.crl

            X509v3 Authority Key Identifier:
                keyid:FD:C7:BD:C9:49:06:E0:F1:34:EE:86:6C:C3:88:24:DF:12:06:F9:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f7e7e3cb-e1fa-40ed-9cdc-ff9f2dbd86f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.241.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:c6:c6:75:22:9e:83:12:0a:91:e8:89:bd:da:06:27:61:aa:
         f5:cc:e8:47:d5:65:93:52:36:c8:ca:0e:87:0a:d0:fc:64:69:
         fb:f9:e6:3f:81:4f:1c:7d:fb:cb:5b:13:33:37:3e:1e:50:c3:
         30:1e:45:28:44:5a:21:c6:45:5d:49:64:3f:95:dc:da:47:2a:
         0b:af:02:fb:25:49:10:d1:e0:65:f9:45:21:6c:17:1b:5c:a6:
         af:69:28:e4:ba:ef:70:a7:c9:12:42:be:18:31:7e:a5:d6:37:
         94:42:03:9c:f7:a1:e7:be:ac:97:2d:40:91:31:c1:0e:45:6c:
         d1:a3:5f:cb:e6:82:0d:d3:92:c2:5b:0c:d2:23:ca:f9:47:0e:
         a3:10:f1:59:98:8f:e9:bd:bb:78:78:4e:56:11:29:af:49:0b:
         7b:96:f0:d1:f7:d1:0e:b8:b0:2a:0f:f5:09:00:94:83:4f:35:
         d0:b8:69:cf:1d:0f:33:e7:c9:5c:59:af:1b:9d:e4:32:e9:47:
         e5:57:f7:0d:c3:e4:b2:9a:40:16:d2:3f:d7:bb:f8:b0:10:8f:
         fd:ff:19:24:3b:a0:b0:21:80:dd:f7:b4:24:c6:bf:43:d1:7b:
         27:c7:6b:35:04:42:63:91:96:78:77:cf:70:03:ca:bf:29:90:
         34:96:db:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:11:42 2026 by rpki-client