Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/72bf8024-7990-3575-a709-44cb4cb8cc39.roa
File:                     72bf8024-7990-3575-a709-44cb4cb8cc39.roa (raw, json)
Hash identifier:          RvVNjQrpwVbw1Vx+t9PPjgNKnHefAx35pSevJa+y76Q=
Subject key identifier:   FF:0B:E0:49:39:09:DA:38:4E:C1:B1:0C:E8:C6:CE:6D:63:C4:70:60
Certificate issuer:       /CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Certificate serial:       010D0C9F4328584E736A194173A7996E75437700
Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/72bf8024-7990-3575-a709-44cb4cb8cc39.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     400196
IP address blocks:        207.22.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:19:41:73:a7:99:6e:75:43:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=ade4e478-af50-4db3-92a2-bd9fa57168bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a5:ed:1e:c1:43:b4:82:55:67:01:eb:d5:9b:
                    5f:77:82:9d:82:5f:13:48:d0:69:02:91:bf:ba:11:
                    a5:eb:64:27:b0:04:01:68:2e:04:b0:84:15:e2:b7:
                    f2:8f:1f:0e:5e:6d:2c:8c:bc:47:1a:ef:51:f2:39:
                    64:b7:d7:80:06:31:fc:b1:6a:56:6a:1a:91:fe:3d:
                    2f:fe:53:25:f2:5b:30:3c:47:56:de:dc:6a:4e:21:
                    f3:55:b3:89:28:a7:0d:f6:a9:51:0d:63:9a:55:60:
                    22:5a:d0:59:5d:b3:72:79:eb:7b:ee:3a:3e:d3:fb:
                    97:b6:d5:c8:46:e4:f0:52:fa:d6:f5:ce:e9:95:16:
                    99:9e:57:38:28:b1:72:d2:18:f9:08:af:d3:bb:7c:
                    83:28:3d:b4:79:07:c5:68:05:59:74:93:b2:87:fc:
                    99:cd:7b:32:f6:27:c7:6a:03:d4:e3:e3:c5:1b:73:
                    b0:7e:12:4e:82:75:64:dd:50:09:00:78:2e:a0:28:
                    83:b1:35:46:f8:c9:ef:6d:2f:da:87:e4:8d:fa:0e:
                    07:8d:06:4f:6c:75:a4:a3:bd:8f:c4:1a:fc:70:98:
                    41:1f:b9:1c:6f:3c:fe:a8:42:48:6c:fa:96:46:df:
                    a7:22:74:ac:2a:b8:7f:f8:37:7c:ab:93:e5:fa:a2:
                    27:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:0B:E0:49:39:09:DA:38:4E:C1:B1:0C:E8:C6:CE:6D:63:C4:70:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/72bf8024-7990-3575-a709-44cb4cb8cc39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.22.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:1c:1d:4a:69:db:4d:b7:03:ec:b1:91:a9:e3:9e:b5:2f:93:
         af:de:af:96:8c:77:b3:6d:0e:0d:88:6e:41:3f:ad:08:68:b3:
         8d:c0:1c:b5:0e:a2:10:82:18:a9:50:64:fd:ad:96:ec:46:12:
         8d:6b:5d:51:fe:83:bf:ed:02:86:46:c4:83:e0:0d:ef:6a:c8:
         b9:19:b0:36:4b:a2:5e:07:0e:83:9d:0f:49:00:9c:9c:32:6d:
         7a:2c:ce:2f:79:af:99:0c:bb:60:dd:6f:e1:04:e6:cb:53:ef:
         6b:d6:60:6b:ba:5e:8f:08:44:24:be:96:be:0a:88:a2:17:a5:
         0b:d6:c5:a3:a8:0d:bc:49:ba:e9:c4:d7:55:a0:89:cc:f5:9a:
         1c:b3:56:6b:12:01:d4:b3:67:1c:9c:c4:bb:ce:3a:72:da:5a:
         b7:ae:58:00:b2:17:95:c5:2d:8e:d8:a1:a5:d8:cf:7d:b4:35:
         e9:48:d5:58:83:46:58:eb:2b:89:ea:09:1f:47:15:a8:16:64:
         e8:c3:f8:cf:3b:2f:29:eb:c8:1f:c8:c9:d1:25:12:70:4a:7f:
         1d:98:a9:c6:d1:69:5d:e9:ea:37:db:64:60:7b:78:15:b1:f8:
         a4:5b:1a:13:c5:8d:98:36:fb:65:97:c3:bf:67:2a:8b:7b:5f:
         8c:7b:a3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:11:16 2026 by rpki-client