Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/be30136e-6694-30ea-8c55-a269f48ebff1.roa
File:                     be30136e-6694-30ea-8c55-a269f48ebff1.roa (raw, json)
Hash identifier:          uY6zpk0W7UtK7WGVke7mRRiPSkZjXNoen9fv8rT1wAs=
Subject key identifier:   AF:1B:22:E5:27:BE:F8:31:9F:1A:E0:7C:56:15:E8:D3:EB:48:AA:18
Certificate issuer:       /CN=7c313e39-91f1-41fc-bc5c-d213a429e287
Certificate serial:       010D0C9F4328584F331D2FAD530F609638352B80
Authority key identifier: 7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/be30136e-6694-30ea-8c55-a269f48ebff1.roa
Signing time:             Thu 17 Sep 2026 01:00:11 +0000
ROA not before:           Thu 17 Sep 2026 01:00:11 +0000
ROA not after:            Wed 16 Dec 2026 02:00:11 +0000
asID:                     40401
IP address blocks:        207.166.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:1d:2f:ad:53:0f:60:96:38:35:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c313e39-91f1-41fc-bc5c-d213a429e287
        Validity
            Not Before: Sep 17 01:00:11 2026 GMT
            Not After : Dec 16 02:00:11 2026 GMT
        Subject: CN=c9b5a9ea-fbe1-40b1-b358-b0d69096f130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a9:8d:ed:78:1c:c7:d9:13:08:94:93:e4:7b:
                    33:ed:b8:a7:08:50:b0:b5:5a:f5:ad:1e:03:02:ba:
                    6a:ae:2b:e4:f3:1c:a6:71:b8:58:56:24:5c:52:fe:
                    d6:ef:e0:03:3e:79:f5:b7:2c:c5:20:30:d2:0a:4d:
                    2d:e2:34:e1:d9:09:27:8f:5c:3f:5a:b9:c1:71:83:
                    a6:8d:ea:f5:74:ec:22:bc:15:55:07:4b:8f:0d:04:
                    a5:37:ea:43:36:74:2d:59:92:35:ef:39:f3:c0:b9:
                    d0:ea:62:44:17:d6:fc:93:87:ea:dc:43:ef:4b:36:
                    41:e7:32:f4:06:a5:9c:d4:2c:08:fc:7d:6b:c9:60:
                    79:d3:1e:0a:a9:dd:16:88:c2:ea:f7:0d:6a:56:be:
                    76:36:33:db:da:e7:5c:42:29:81:65:97:5c:3b:31:
                    41:51:c8:8e:43:e0:c4:b6:17:80:e7:57:e3:85:22:
                    ea:3b:f4:e9:b5:65:98:76:5e:b0:93:02:8f:e9:22:
                    fb:ca:ea:49:d1:dd:88:e2:69:5f:f1:71:7b:36:71:
                    17:7b:a5:95:86:9f:a8:3a:13:53:e3:27:d7:d7:9f:
                    b3:df:f9:c4:6c:af:87:b4:c5:2b:86:49:c3:4a:d0:
                    0c:c6:f5:ca:60:26:41:18:e9:eb:21:e8:5f:c7:c7:
                    89:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:1B:22:E5:27:BE:F8:31:9F:1A:E0:7C:56:15:E8:D3:EB:48:AA:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/be30136e-6694-30ea-8c55-a269f48ebff1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.crl

            X509v3 Authority Key Identifier:
                keyid:7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.166.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:fc:d8:1b:73:d7:d6:35:f8:4d:11:8a:80:11:21:ff:b9:e9:
         fc:42:ec:cb:eb:db:4a:29:f7:ad:ed:04:ac:0d:59:16:7a:c0:
         2a:87:bb:7f:84:76:4b:85:c4:a3:85:c7:d8:f5:bd:ea:c0:a6:
         8d:10:b1:a8:61:88:d1:bd:66:e3:7d:e3:ed:d2:03:38:fd:79:
         04:d7:28:6c:b1:d3:af:f7:d9:f1:67:36:39:f2:86:a5:61:04:
         87:c1:4b:53:ee:a5:d4:67:79:14:9c:49:73:42:f3:19:0e:91:
         e6:b5:c4:55:fc:22:94:8a:b6:8a:3f:da:70:49:4a:c2:f9:e1:
         33:9f:66:1f:71:bc:2a:52:d2:78:0f:8b:f8:af:5d:51:d7:ee:
         ff:1c:3f:c5:b7:69:4b:c3:6c:4b:a3:ac:8b:54:ae:3d:63:ad:
         d4:0e:09:1d:9d:ad:f7:e1:22:7d:db:e8:0d:92:54:8e:b2:1a:
         de:c6:3c:2a:c8:61:39:8d:2f:da:1f:f4:6f:b0:66:a6:5c:93:
         87:a2:05:70:d3:c2:20:0f:1a:82:09:08:de:d4:e5:09:3a:e7:
         56:47:f4:2e:4a:ec:c3:33:d2:9e:69:a4:09:15:95:d1:08:5b:
         83:9e:ad:0d:c9:c5:e7:d2:2a:06:41:de:3b:c2:73:10:c7:83:
         8f:38:ac:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:19:29 2026 by rpki-client