Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e/2e3e6440-7cd8-3fe7-ba25-143db8a290a5.roa
File:                     2e3e6440-7cd8-3fe7-ba25-143db8a290a5.roa (raw, json)
Hash identifier:          ItK6TN6K7nT1sQVchHTDid/0e2T1uM0NfYqYvYHJHeM=
Subject key identifier:   DF:4D:26:15:42:CC:90:8A:E6:EB:7E:8A:40:76:4D:03:66:9C:F7:5C
Certificate issuer:       /CN=d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e
Certificate serial:       010D0C9F4328584E640F64E0C94D70AAD7697C00
Authority key identifier: 7C:91:C6:7F:1B:47:BE:6C:FB:32:32:50:EF:07:52:69:F4:55:AE:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e/2e3e6440-7cd8-3fe7-ba25-143db8a290a5.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     393444
IP address blocks:        207.162.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:64:e0:c9:4d:70:aa:d7:69:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=5e4c6005-6198-4351-b2be-dcc7d918cecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a3:02:1a:07:55:d3:66:8b:a0:a5:bd:fa:9d:
                    65:2d:97:04:88:6a:07:40:dc:ee:6a:6e:f4:32:48:
                    4b:ee:09:2d:db:69:2d:57:53:62:79:7a:6c:6e:3d:
                    b3:b7:ed:38:bd:ac:59:51:92:1b:c8:66:e5:05:f4:
                    51:a4:00:c1:a3:4c:33:3f:da:5c:b0:1b:31:c3:bd:
                    6d:89:3d:ea:78:77:bc:6b:31:70:85:d3:43:10:da:
                    a2:d1:10:77:ef:38:1f:fe:20:15:47:ca:04:e9:8d:
                    90:a0:bd:16:95:ba:53:a6:0c:13:eb:a6:ae:7c:00:
                    6d:ff:e7:23:a9:ec:19:13:f9:17:96:97:54:29:f8:
                    6f:2a:c3:d5:b5:83:27:34:8f:96:10:b6:cd:a7:37:
                    eb:42:0a:41:6e:3e:80:58:da:32:1a:63:26:47:0b:
                    d6:49:89:42:1a:ab:fe:7f:d5:44:1a:03:29:a2:b8:
                    81:be:80:3c:e3:ec:7a:69:21:47:9c:f7:fa:f3:5f:
                    d1:c9:06:45:aa:30:ed:5c:e1:00:b0:f6:9a:fa:35:
                    47:bb:9d:fb:98:bc:a7:4c:ee:dc:4e:a0:04:7c:bf:
                    d8:27:ed:08:8a:d1:87:60:01:ba:64:fc:ad:0e:b2:
                    ac:44:d3:61:7a:45:2b:dc:7a:33:bd:09:bc:e0:c0:
                    18:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:4D:26:15:42:CC:90:8A:E6:EB:7E:8A:40:76:4D:03:66:9C:F7:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e/2e3e6440-7cd8-3fe7-ba25-143db8a290a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e.crl

            X509v3 Authority Key Identifier:
                keyid:7C:91:C6:7F:1B:47:BE:6C:FB:32:32:50:EF:07:52:69:F4:55:AE:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d3b707ab-b4a6-42de-a7bc-6115ca4b3b3e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.162.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:7d:d0:47:ed:a7:47:4c:1a:46:16:89:b9:60:17:d4:db:3b:
         21:9d:69:fd:fe:65:6a:a8:3a:38:47:89:e4:31:a2:fd:b1:20:
         95:b5:f1:5e:49:82:46:1f:09:0f:8d:05:c1:c7:7f:d4:ae:e6:
         70:40:5f:d3:46:3a:39:ad:b6:7a:09:ea:1d:f2:ee:3c:e8:36:
         f7:2f:cf:78:8a:cd:c5:14:79:58:a1:ce:fe:3d:1e:8e:40:f7:
         d5:94:53:96:64:2f:23:54:2a:00:ee:75:06:ea:b3:4b:93:0c:
         52:10:33:de:af:fe:c4:23:21:10:c9:f1:bc:e3:f4:a8:6b:fc:
         0c:47:35:2d:1f:be:13:23:c7:62:07:c9:26:81:79:94:bc:fb:
         4f:3b:3b:60:87:f9:23:ba:a4:70:73:45:a8:ca:dc:5c:44:cd:
         5d:75:31:f7:0d:a8:a4:16:75:a9:8c:f6:fc:2b:0b:d8:fc:c1:
         75:02:5b:ea:c2:60:94:03:c6:ee:14:26:e3:35:71:da:7d:18:
         e0:bd:55:d3:78:d4:28:7d:b3:ac:cf:48:2c:61:b6:d8:26:09:
         39:e6:06:e7:bb:2f:ca:c0:fa:94:2c:07:58:f8:c4:c3:9b:e0:
         df:97:0d:2a:09:33:a7:76:36:78:52:89:32:36:47:2b:1c:1e:
         60:2c:86:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:26:50 2026 by rpki-client