Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/fc0068d0-a6ed-3e6d-8858-d68416365766.roa
File:                     fc0068d0-a6ed-3e6d-8858-d68416365766.roa (raw, json)
Hash identifier:          yNf9DDFwLDz0i7HSdaradi7X+9Gt8MzsTjTya2dwMB4=
Subject key identifier:   61:DD:E7:4F:6E:07:60:EC:4E:B1:B8:24:32:EA:F1:A9:10:64:FA:EF
Certificate issuer:       /CN=7770be2f-95a3-43e4-a139-53984564db4a
Certificate serial:       010D0C9F4328584EA5AA6CD08F085315DD94F880
Authority key identifier: 8E:FC:B1:77:D6:58:1B:C2:CE:12:0D:5D:2A:E9:67:7A:33:C7:6E:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/fc0068d0-a6ed-3e6d-8858-d68416365766.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     14618
IP address blocks:        162.213.204.0/24 maxlen: 24
                          162.213.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/7770be2f-95a3-43e4-a139-53984564db4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/7770be2f-95a3-43e4-a139-53984564db4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:6c:d0:8f:08:53:15:dd:94:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7770be2f-95a3-43e4-a139-53984564db4a
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=7979f738-0d6b-41b5-be75-d24c90b8a435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:62:08:21:0d:c5:4e:07:e9:84:f7:3e:01:5b:
                    4e:81:eb:73:c8:c3:da:29:a6:a0:81:b0:1f:22:74:
                    6b:8d:83:de:dc:c5:3f:20:05:77:06:33:12:08:a8:
                    6e:ab:f3:87:ad:e9:c2:a3:d1:63:7c:47:06:00:cf:
                    af:9e:bf:54:64:95:0f:3e:03:3a:b6:60:ba:67:55:
                    77:2a:11:a0:c7:3b:c5:cd:aa:ae:ce:8a:7c:ce:04:
                    ec:aa:04:1e:d0:17:62:3a:e9:e4:f4:4b:bf:14:59:
                    59:2c:18:cb:a1:3a:8d:10:0a:55:ca:93:81:70:73:
                    b1:00:0b:81:25:b7:09:c1:ec:17:b0:a7:45:07:60:
                    39:60:a7:40:2a:8d:d7:10:f8:be:ab:dc:d5:f5:90:
                    f1:7c:a1:2b:bc:2e:99:19:b4:34:50:32:c6:68:e0:
                    bb:6e:5a:a1:24:59:4e:fb:1e:84:86:78:27:3e:fa:
                    6a:d4:63:10:4b:81:dd:9f:17:e9:40:f0:6a:3c:28:
                    ca:78:d3:52:92:8f:2d:ed:68:6f:96:1f:0e:e1:47:
                    1f:4a:b7:26:18:57:b7:64:23:ce:26:7e:b3:df:43:
                    4c:35:7b:da:61:97:6b:73:af:26:64:6d:da:d2:f0:
                    7f:12:3f:fa:8c:a9:a9:4f:cc:d9:ce:08:56:21:58:
                    56:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:DD:E7:4F:6E:07:60:EC:4E:B1:B8:24:32:EA:F1:A9:10:64:FA:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/fc0068d0-a6ed-3e6d-8858-d68416365766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a/7770be2f-95a3-43e4-a139-53984564db4a.crl

            X509v3 Authority Key Identifier:
                keyid:8E:FC:B1:77:D6:58:1B:C2:CE:12:0D:5D:2A:E9:67:7A:33:C7:6E:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7770be2f-95a3-43e4-a139-53984564db4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.213.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:a5:6a:42:19:03:ee:90:d2:fb:0c:12:40:ef:50:6b:1a:0f:
         e3:35:1b:e9:a4:33:fb:a5:fe:67:7c:08:25:c7:d2:d2:aa:b8:
         e8:13:4a:48:b5:2e:6d:ba:d9:79:09:e5:18:e2:80:3b:66:65:
         e3:de:17:50:88:2d:41:99:de:30:da:75:01:62:6c:a9:8d:b8:
         a4:1b:97:b6:b8:d8:64:58:d0:e3:4e:e3:a9:40:a2:06:5d:82:
         24:71:a5:d0:8e:b6:03:90:7c:d2:ff:c6:92:bd:e1:42:53:8d:
         86:1c:31:1d:c5:fe:47:b4:92:e6:4b:d8:c0:7e:35:0f:0a:d9:
         72:b1:f9:07:cf:b0:3d:4a:aa:b8:70:4a:76:8b:b7:63:f2:83:
         9e:c3:2c:5d:54:ff:2f:b4:df:76:87:cd:28:3c:b7:30:ea:ec:
         cc:19:a7:05:56:8e:ad:67:e1:94:66:0f:50:a6:83:0a:0f:71:
         c0:05:61:17:9c:ac:ca:06:8d:09:95:dc:c3:b2:3a:fe:c3:97:
         3f:2f:fc:3a:0d:05:38:59:eb:6c:c5:af:22:38:04:4a:33:f9:
         51:df:a4:f4:00:79:69:45:64:0c:89:73:cc:ec:f7:6c:96:0f:
         3b:20:b7:f8:7d:da:77:32:2d:8f:56:19:bb:9b:91:59:e6:72:
         ed:ea:c8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 07:08:44 2026 by rpki-client