Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8/9d837b7b-3840-3ded-a8a7-ff3088d0dcd7.roa
File:                     9d837b7b-3840-3ded-a8a7-ff3088d0dcd7.roa (raw, json)
Hash identifier:          F0OgM3YyD9PsgRZHl7vqwlCgQbFp9TQAj4zxLt8SI/k=
Subject key identifier:   B2:57:B1:58:6C:D0:97:2D:2E:1A:33:26:86:DB:A6:F6:5D:22:6D:41
Certificate issuer:       /CN=7b407ffa-7fa7-4255-8a63-77381712e9e8
Certificate serial:       010D0C9F4328584E82C4DA421AAC710D8B621C80
Authority key identifier: C2:73:CD:72:41:1B:04:30:9B:7B:F4:A8:41:65:FE:46:80:87:62:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8/9d837b7b-3840-3ded-a8a7-ff3088d0dcd7.roa
Signing time:             Wed 15 Jul 2026 21:00:12 +0000
ROA not before:           Wed 15 Jul 2026 21:00:12 +0000
ROA not after:            Tue 13 Oct 2026 21:00:12 +0000
asID:                     396982
IP address blocks:        192.35.85.0/24 maxlen: 24
                          192.52.228.0/24 maxlen: 24
                          199.71.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8/7b407ffa-7fa7-4255-8a63-77381712e9e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8/7b407ffa-7fa7-4255-8a63-77381712e9e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:82:c4:da:42:1a:ac:71:0d:8b:62:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b407ffa-7fa7-4255-8a63-77381712e9e8
        Validity
            Not Before: Jul 15 21:00:12 2026 GMT
            Not After : Oct 13 21:00:12 2026 GMT
        Subject: CN=631b8c07-6cbe-4008-a2ed-db8e5a6592a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bb:f4:c6:37:4c:68:c7:60:b2:bb:98:95:cc:
                    d8:7a:30:5a:c4:96:39:e5:e4:26:17:54:08:39:9a:
                    5e:1c:b8:9e:b7:38:c4:ef:06:dc:7f:9a:cb:72:94:
                    f4:75:d8:65:1c:33:b7:86:5e:3b:44:63:61:00:96:
                    55:88:26:f9:92:d5:a5:a2:11:22:28:19:d0:7f:c6:
                    a5:5d:6b:c9:f1:3f:4c:38:26:2e:2e:ec:87:56:7a:
                    5d:94:03:b3:6a:d7:f7:bd:ca:8e:f6:1b:54:e6:f0:
                    a1:cf:e9:14:bc:82:79:15:04:05:86:64:8f:58:d2:
                    35:6b:0b:19:78:7b:7b:87:9f:54:05:dd:5f:cd:79:
                    70:0f:96:f0:89:96:90:7b:14:1c:02:4a:37:33:ea:
                    b1:26:5a:b2:89:21:4a:74:a9:b1:3f:3f:0f:46:6c:
                    1d:99:97:fc:6e:5b:73:65:d0:bc:54:df:75:41:4e:
                    bd:d6:d3:52:61:7b:6b:eb:4c:ad:06:e6:36:34:bc:
                    fc:91:9c:51:1e:51:1c:6f:e2:40:1f:e7:33:0b:b5:
                    9a:6d:1b:1c:c0:03:74:67:d8:6c:23:8c:df:9d:c4:
                    16:81:e5:94:d7:08:ee:20:a8:71:f6:70:5a:40:05:
                    f5:e7:c3:47:29:56:83:18:26:fb:69:e6:fc:8c:59:
                    0a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:57:B1:58:6C:D0:97:2D:2E:1A:33:26:86:DB:A6:F6:5D:22:6D:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8/9d837b7b-3840-3ded-a8a7-ff3088d0dcd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8/7b407ffa-7fa7-4255-8a63-77381712e9e8.crl

            X509v3 Authority Key Identifier:
                keyid:C2:73:CD:72:41:1B:04:30:9B:7B:F4:A8:41:65:FE:46:80:87:62:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7b407ffa-7fa7-4255-8a63-77381712e9e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.85.0/24
                  192.52.228.0/24
                  199.71.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:ac:e7:6c:1e:7f:37:66:3c:d2:f0:b3:cf:c9:5c:54:4d:f6:
         a0:65:0f:e0:7c:6e:3e:e4:70:6f:f0:b4:91:b6:d9:da:2f:93:
         3f:c3:91:c3:a2:22:d7:35:fd:84:fc:1e:51:8e:95:86:f0:b1:
         a7:f5:7d:90:25:ca:0d:dc:9a:9c:c3:5e:1f:36:7f:bd:f2:93:
         f3:76:d0:63:5e:be:92:ed:6c:0c:47:04:ec:19:bc:d7:55:84:
         8d:ba:2b:81:62:49:cd:d7:fe:c5:4c:b4:6c:22:c3:d0:74:e3:
         f0:cb:6f:a8:ef:6d:5e:26:eb:00:e9:f0:f6:c7:6b:77:b9:52:
         bd:e4:58:b5:9c:a6:40:32:30:29:fc:95:c9:7e:f1:19:cf:b8:
         1a:5d:4d:9d:70:8e:0c:af:ce:d7:50:ac:41:62:ef:7a:10:42:
         01:c4:45:9b:ce:dd:a4:c7:d7:ba:fa:ec:2c:f8:12:2c:57:ca:
         81:70:44:e9:47:72:af:77:e3:88:d1:95:91:ee:f9:f8:9a:b9:
         61:b6:b9:15:26:65:52:d5:c6:eb:66:e0:60:7b:5b:d2:e6:64:
         6e:98:d1:75:39:df:49:49:bb:82:0f:75:55:0a:c1:80:04:0d:
         72:f9:ad:81:3f:93:5e:aa:f6:5b:74:ef:8c:ed:18:2c:15:a9:
         af:d2:b3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:06:10 2026 by rpki-client