Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/2499c115-1fa9-3f68-b225-9be53cada24a.roa
File:                     2499c115-1fa9-3f68-b225-9be53cada24a.roa (raw, json)
Hash identifier:          h0nFZh5fBKa4AtXwTQPlLekKXu+Hik82+/qcTdjusNg=
Subject key identifier:   44:A7:72:6C:7D:E0:52:54:6E:1F:BB:4C:F7:CB:E0:54:94:FF:65:0C
Certificate issuer:       /CN=1226980a-2c43-43da-83fd-198696a9b02e
Certificate serial:       010D0C9F4328584E6F3A44C7AD48DBB4029DC6A0
Authority key identifier: E8:73:DD:6F:FA:D7:67:3A:F2:9A:83:1C:E0:12:63:99:41:57:9E:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/2499c115-1fa9-3f68-b225-9be53cada24a.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     14618
IP address blocks:        207.110.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/1226980a-2c43-43da-83fd-198696a9b02e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/1226980a-2c43-43da-83fd-198696a9b02e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:44:c7:ad:48:db:b4:02:9d:c6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1226980a-2c43-43da-83fd-198696a9b02e
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=1230585b-c16c-4a69-96c1-168aef409a7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e5:f5:b3:29:63:8c:1b:90:9c:02:5e:fb:d7:
                    e6:8d:e2:ea:65:4b:6c:9d:53:64:7b:dc:26:ec:55:
                    d8:f6:49:82:71:1f:f5:f6:25:6e:f6:ec:b0:9a:82:
                    55:72:93:ea:a4:c8:0c:45:4d:3b:fa:c1:4a:6e:de:
                    cd:9b:b9:b8:93:6f:06:3a:83:48:d7:bf:db:e5:ca:
                    69:7a:bb:24:ea:42:cd:f3:4d:62:16:83:05:c1:7b:
                    cf:a8:37:2b:55:53:90:79:65:10:f1:b9:0b:44:72:
                    92:2a:e1:d0:ec:c4:e2:15:12:20:0d:1e:68:df:60:
                    10:bf:6a:1a:57:eb:ec:03:04:56:1a:5a:44:30:97:
                    9f:a5:d6:da:1f:0a:57:6a:81:6a:7f:8c:ec:f7:93:
                    87:da:85:6a:b7:4e:77:e8:62:62:b1:c2:af:e6:38:
                    0b:e7:e1:e3:12:9c:ce:74:bc:8a:2f:d1:cf:a9:b4:
                    b2:00:04:8c:ba:96:66:d1:2d:f7:b1:68:b1:c8:7a:
                    99:69:12:06:b6:9f:ca:12:85:97:91:d5:a7:69:23:
                    53:d5:c0:5d:4e:4e:ec:09:83:30:9d:c0:c2:80:41:
                    1c:c6:36:8b:30:69:d3:28:83:a1:b9:21:a0:b4:14:
                    52:ca:d0:00:1b:d6:41:78:53:83:b0:29:f5:9f:98:
                    5f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A7:72:6C:7D:E0:52:54:6E:1F:BB:4C:F7:CB:E0:54:94:FF:65:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/2499c115-1fa9-3f68-b225-9be53cada24a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/1226980a-2c43-43da-83fd-198696a9b02e.crl

            X509v3 Authority Key Identifier:
                keyid:E8:73:DD:6F:FA:D7:67:3A:F2:9A:83:1C:E0:12:63:99:41:57:9E:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.110.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:20:0c:2a:f6:15:49:af:ec:d2:fe:b8:17:10:98:1f:35:3f:
         01:ea:54:b6:0f:1b:df:4a:ac:2a:d9:4d:bb:81:11:4f:30:d2:
         a9:c8:98:95:4a:48:4a:45:40:aa:eb:49:08:ef:cd:b7:e4:de:
         17:7e:8f:bb:1e:17:d1:c2:f3:f3:77:ea:f6:2d:70:47:4c:33:
         aa:19:62:f2:72:b0:7d:f8:49:5f:52:f7:79:80:8f:07:58:cd:
         ec:f1:ad:2c:22:a9:62:1a:eb:09:67:c6:be:83:2c:d6:4e:ff:
         a8:42:71:21:4c:33:eb:a1:d0:7e:5d:90:3b:c0:4f:5a:ef:89:
         14:45:cb:30:52:d0:a6:31:44:84:d5:99:b7:ae:c1:cf:aa:de:
         51:07:04:d3:c4:68:2b:72:b8:4f:63:03:8b:ed:09:5f:7e:ee:
         54:d4:92:47:b8:e3:88:be:3e:67:cb:1f:eb:61:87:a7:23:5a:
         a2:82:8d:39:d3:db:82:6b:90:4f:75:61:d6:b3:1a:30:fc:07:
         33:1a:0e:ce:f2:f6:94:9e:7d:08:98:f2:58:34:77:1e:15:a2:
         18:7d:ae:49:44:d2:6e:8b:bf:01:d9:11:26:ea:f4:f5:5a:87:
         eb:6d:f0:81:5f:f8:e8:9d:ef:6c:92:d4:c8:1d:46:01:e4:15:
         d6:a9:0d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:43:56 2026 by rpki-client