Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/aba0e795-b288-3568-a681-0012e747bf76.roa
File:                     aba0e795-b288-3568-a681-0012e747bf76.roa (raw, json)
Hash identifier:          fFOWiV2dOns9qqh1wy7ijJHPgm6nD1IPEDDn0Q7O7BU=
Subject key identifier:   1F:AA:AB:4A:9F:97:F9:C3:E0:7C:49:08:4D:03:A8:F3:B2:18:D4:8C
Certificate issuer:       /CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
Certificate serial:       010D0C9F4328584E376468B4C387C7524FAAA900
Authority key identifier: 6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/aba0e795-b288-3568-a681-0012e747bf76.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     396872
IP address blocks:        207.32.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:68:b4:c3:87:c7:52:4f:aa:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=37500661-4406-493c-a73c-6818aef5c217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:35:af:48:fa:2b:59:cc:be:b3:b9:54:20:e8:
                    ae:03:a0:da:5a:95:4c:dc:4a:ce:12:05:d1:3d:61:
                    f0:f3:f5:4d:9e:f1:8d:71:05:ee:68:c5:67:29:83:
                    0d:b2:70:8d:09:83:ca:ca:07:b8:cf:04:c4:77:4d:
                    5c:9e:a3:93:f0:cf:7e:48:04:a8:ed:ac:de:ed:f7:
                    c9:15:71:20:73:ed:12:af:c2:58:04:b0:14:fc:0d:
                    9a:4b:f8:0c:e7:8f:e1:0c:af:50:a3:5f:d6:62:83:
                    97:f2:5b:76:95:c5:a8:88:a3:c5:e0:49:2b:f3:3c:
                    4f:11:34:ac:f8:11:a9:85:94:42:30:db:9b:29:51:
                    68:f4:1f:a3:29:66:79:96:d9:e7:3c:ce:59:71:fa:
                    68:ac:bc:d3:af:b2:0b:f9:2b:b4:de:e3:7f:3f:ac:
                    65:2b:97:7b:64:06:38:31:06:6c:06:8a:9f:00:8f:
                    a9:10:bf:f9:8a:3b:87:08:07:39:89:d5:04:37:21:
                    f6:cd:c9:f0:70:d5:85:44:49:9c:16:ed:43:82:a1:
                    94:01:ae:17:5c:fc:b5:f6:81:f6:1e:2e:04:e1:79:
                    5f:02:a1:8b:14:95:ef:c9:c9:11:6a:b0:aa:20:37:
                    22:4e:0d:ce:e6:36:67:05:f9:05:28:da:ed:9d:be:
                    52:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:AA:AB:4A:9F:97:F9:C3:E0:7C:49:08:4D:03:A8:F3:B2:18:D4:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/aba0e795-b288-3568-a681-0012e747bf76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl

            X509v3 Authority Key Identifier:
                keyid:6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.32.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:ec:a0:af:d1:5c:94:0a:8c:61:76:fd:b2:d0:60:83:dd:32:
         c7:7e:5c:68:6e:36:18:4a:b1:1c:ef:85:35:4a:9d:f8:34:f3:
         78:88:58:77:b7:15:28:26:9e:44:fe:9b:98:8d:47:10:84:66:
         e3:67:ce:c2:67:cf:72:93:c3:87:1b:8d:22:3f:93:f7:12:36:
         09:c3:63:62:b4:d7:89:da:77:f8:1c:6b:5e:38:b0:c0:14:15:
         6b:6b:f2:7f:a3:1d:5e:6e:9c:3c:be:c0:12:0e:43:1e:ab:4c:
         68:a3:43:ec:6a:84:ea:3e:5b:aa:c7:44:3e:55:ff:9c:3a:fa:
         8e:d8:c4:78:6c:e4:11:60:0c:d1:52:15:72:59:2e:ba:d9:3e:
         16:2e:fc:13:72:36:fc:c5:f1:13:c8:bf:ab:87:57:65:e6:11:
         5e:3e:23:04:b5:c5:2b:2d:7a:aa:b0:c0:82:b6:e1:84:ca:c1:
         cd:ea:0f:bd:46:5a:c5:de:c5:ed:98:b7:0d:ab:0d:40:64:91:
         37:4f:63:66:b4:42:7c:a4:d6:ff:50:7c:dc:c1:f6:66:cd:25:
         ef:16:44:6d:48:a3:03:e8:1d:07:4f:47:cd:00:61:b5:4b:ea:
         37:b6:4d:95:7c:21:47:1b:3f:49:22:0f:85:ea:9f:bc:73:3c:
         24:7e:a8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:39:20 2026 by rpki-client