Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/368e19b4-4d74-35e9-8a13-f0b68747b2a9.roa
File:                     368e19b4-4d74-35e9-8a13-f0b68747b2a9.roa (raw, json)
Hash identifier:          zfimVz8kvFy1QwXsiyMg9sQ1odtzCMWCrd7WyhrVfAM=
Subject key identifier:   EE:DB:80:7C:23:E5:4F:43:8A:6E:1A:A6:8B:A9:2B:E2:81:C1:2E:37
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F4328584E7204D87E3C49820EB765B500
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/368e19b4-4d74-35e9-8a13-f0b68747b2a9.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     394966
IP address blocks:        207.172.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:d8:7e:3c:49:82:0e:b7:65:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=a968f46d-31bb-4a6f-970d-7912f87b079d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:17:04:4d:d4:75:fe:47:ea:22:17:f0:c8:e9:
                    6f:56:6b:3f:db:04:fb:b1:b7:52:68:5f:ff:4a:81:
                    12:5d:de:d5:f6:be:8e:ac:51:47:f1:34:4c:8c:7e:
                    c9:cc:6f:9f:01:f7:8c:fd:9d:9e:b3:40:4c:4d:18:
                    c5:ce:14:49:74:cf:1e:74:f5:62:41:9c:cd:e9:48:
                    d0:17:58:d7:60:6a:d7:a0:6f:0f:56:72:0b:ee:78:
                    1e:f3:11:62:d6:dd:14:78:26:2e:c7:33:a9:e9:a9:
                    15:c5:50:d6:35:b1:93:de:93:95:fa:6a:23:16:15:
                    97:c0:70:51:77:30:f5:0d:ab:dc:2e:5e:6c:11:e9:
                    6a:58:bf:2b:15:e1:07:48:b6:60:25:a4:fb:2f:0c:
                    d7:d2:e1:6e:f9:d3:c0:c7:79:dc:53:7d:6d:e2:42:
                    ae:da:71:6d:27:96:2a:e7:4e:fe:6c:35:7c:67:c7:
                    23:e4:ed:ea:ce:8f:d6:97:55:aa:d2:ac:5f:2b:63:
                    a7:09:c6:e1:51:6e:5a:63:f3:d6:53:15:1c:ee:cf:
                    ff:bb:41:a3:4a:78:50:d6:c1:34:df:40:8d:2a:17:
                    ea:94:6a:85:79:73:47:f1:00:77:b5:0e:9e:50:d1:
                    c6:41:8c:6f:48:67:5c:1b:37:94:57:11:61:b3:08:
                    71:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:DB:80:7C:23:E5:4F:43:8A:6E:1A:A6:8B:A9:2B:E2:81:C1:2E:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/368e19b4-4d74-35e9-8a13-f0b68747b2a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.172.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:5c:e1:58:07:99:2c:0a:0c:3e:58:6c:42:f0:a7:08:6c:6b:
         e6:5f:25:cd:3f:f4:d2:9f:6f:4a:29:86:31:31:9e:28:87:95:
         19:68:0f:7a:05:f6:ca:9f:6d:a1:3b:d7:0c:55:0b:be:65:56:
         4a:87:88:06:55:8e:4d:7a:24:3f:b5:bf:94:1f:99:66:e4:0f:
         de:72:91:e2:27:ee:df:28:3b:63:6e:46:08:be:a9:16:a8:4e:
         b4:9e:2b:70:0c:3f:2a:6b:36:84:ee:85:a1:b2:34:be:5e:b0:
         32:fd:fa:01:14:17:b0:d0:72:b9:f0:14:98:82:d5:7d:e7:05:
         2d:b5:1f:f6:ba:5c:5c:5c:27:01:99:66:44:03:f6:25:41:65:
         6d:8f:bd:e3:1f:30:47:08:ec:1d:26:b5:fa:0c:a9:97:c6:70:
         8a:b2:63:1b:8e:24:9b:16:b7:47:3e:f6:4e:52:6a:f8:04:79:
         c0:6b:b6:dc:8e:02:88:08:ee:54:29:c1:e4:ed:e5:85:0c:57:
         ed:12:40:41:47:68:f2:59:01:05:df:c2:af:41:7e:bb:eb:9d:
         21:1d:e2:7d:a2:98:b9:a4:65:55:cd:1f:64:28:f0:1d:b9:c8:
         63:14:eb:1a:f9:a2:95:80:a4:e5:15:6b:a5:12:e3:e5:94:25:
         77:5d:3d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:12:34 2026 by rpki-client