Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac31201d-d18d-4a22-837e-aa1c05197e8b/5860102a-aea6-36fc-8df0-f225930eaeb7.roa
File:                     5860102a-aea6-36fc-8df0-f225930eaeb7.roa (raw, json)
Hash identifier:          UFZAhJ+h64neing4JvNdHMpbJM3fGMVgtjiN+nQErCU=
Subject key identifier:   4E:3C:B7:E6:F8:DC:E9:0C:98:84:83:61:CB:10:C1:55:10:BC:A3:1C
Certificate issuer:       /CN=ac31201d-d18d-4a22-837e-aa1c05197e8b
Certificate serial:       010D0C9F4328584E577F55AEF45D5288CE5AD120
Authority key identifier: A3:28:A4:0E:AE:B3:94:DA:E4:56:60:96:36:DD:55:87:AE:00:5A:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac31201d-d18d-4a22-837e-aa1c05197e8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac31201d-d18d-4a22-837e-aa1c05197e8b/5860102a-aea6-36fc-8df0-f225930eaeb7.roa
Signing time:             Tue 30 Jun 2026 09:00:12 +0000
ROA not before:           Tue 30 Jun 2026 09:00:12 +0000
ROA not after:            Mon 28 Sep 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        207.210.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac31201d-d18d-4a22-837e-aa1c05197e8b/ac31201d-d18d-4a22-837e-aa1c05197e8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac31201d-d18d-4a22-837e-aa1c05197e8b/ac31201d-d18d-4a22-837e-aa1c05197e8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac31201d-d18d-4a22-837e-aa1c05197e8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:57:7f:55:ae:f4:5d:52:88:ce:5a:d1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac31201d-d18d-4a22-837e-aa1c05197e8b
        Validity
            Not Before: Jun 30 09:00:12 2026 GMT
            Not After : Sep 28 09:00:12 2026 GMT
        Subject: CN=d37c1225-8b03-4f99-a674-6f320219e0a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ed:be:c6:0b:01:d9:f9:cb:f6:42:11:fc:6f:
                    f1:c5:6a:de:fb:e1:da:4e:f8:34:cc:4b:e4:9a:5b:
                    4f:47:61:f4:95:df:1f:ce:28:14:53:67:39:bf:7b:
                    45:e1:16:f6:62:88:fc:f4:2c:4a:1f:4c:ca:e1:a1:
                    ab:33:00:5b:a8:5c:ca:bd:ff:f0:28:6c:81:35:13:
                    f2:11:90:25:24:dc:88:78:97:f6:81:e1:e5:2d:c6:
                    5b:a5:04:ef:b2:58:4f:8f:fc:7d:e0:87:37:54:54:
                    a9:77:15:5c:39:e7:26:6f:64:51:78:e1:1c:90:4c:
                    80:0e:5f:6f:9c:cb:fb:5a:de:7c:ed:c9:64:33:90:
                    f8:80:c2:18:ba:11:e8:ff:cb:3f:95:03:bb:14:e6:
                    0f:10:da:15:ca:62:d0:31:e1:7f:dd:d7:e0:42:2d:
                    c9:aa:91:42:a9:70:33:aa:19:d7:ad:81:56:8d:4a:
                    ed:f0:2c:a3:4c:bc:4c:d0:58:5d:7a:a6:65:2b:be:
                    b9:0b:43:57:6e:39:f0:19:3a:3a:18:18:dc:07:a9:
                    08:9a:03:c2:23:72:73:3c:27:63:b4:32:df:e8:76:
                    cb:68:fc:db:fb:9b:10:da:1c:36:d6:88:9c:7f:a2:
                    b9:ef:67:2a:95:8d:90:58:36:fa:e6:91:8f:fc:30:
                    23:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:3C:B7:E6:F8:DC:E9:0C:98:84:83:61:CB:10:C1:55:10:BC:A3:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac31201d-d18d-4a22-837e-aa1c05197e8b/5860102a-aea6-36fc-8df0-f225930eaeb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac31201d-d18d-4a22-837e-aa1c05197e8b/ac31201d-d18d-4a22-837e-aa1c05197e8b.crl

            X509v3 Authority Key Identifier:
                keyid:A3:28:A4:0E:AE:B3:94:DA:E4:56:60:96:36:DD:55:87:AE:00:5A:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac31201d-d18d-4a22-837e-aa1c05197e8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.210.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:c7:68:61:9a:b6:22:8b:02:7a:0c:9b:c7:f5:10:8a:b9:7b:
         4c:db:cb:23:cc:5d:0f:12:f6:8d:04:c8:9c:92:ba:15:35:35:
         eb:c8:0a:ee:92:17:87:7f:5e:f6:86:23:7f:be:63:61:3c:34:
         84:73:5c:46:20:c3:09:38:42:57:67:3b:be:16:07:45:ed:88:
         d2:cc:83:f4:4a:89:a0:fb:dc:45:ed:71:7d:35:01:14:e8:f3:
         e0:a9:e6:f9:67:3d:a3:b8:28:35:bf:5b:ca:59:79:4b:af:50:
         b4:a9:14:20:fa:3b:c5:79:71:72:51:20:14:c5:cb:75:eb:79:
         05:20:f5:10:fa:f8:7f:f8:e1:cb:f1:d6:c3:5b:fc:6e:34:1c:
         0b:8e:16:db:7e:42:2a:c7:09:57:b0:1f:0b:e5:6f:aa:a6:58:
         cc:0b:62:e6:95:12:5e:63:83:b8:d5:8e:cb:fc:a1:af:72:1d:
         e3:4d:ef:f8:e4:e2:46:99:4f:06:4b:72:a3:1e:12:36:28:cc:
         67:76:c3:45:d0:ca:35:9b:ac:f0:cd:36:54:97:c5:94:57:2f:
         7d:5f:f1:f7:18:66:82:ac:f7:53:38:14:79:17:57:27:22:d8:
         ef:1d:9a:70:a2:45:88:44:d9:1c:33:7f:5c:5f:b2:28:41:04:
         17:91:b6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:09:55 2026 by rpki-client