Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/3fd10732-1eb0-3925-8159-321291b44229.roa
File:                     3fd10732-1eb0-3925-8159-321291b44229.roa (raw, json)
Hash identifier:          GlTPOI+PLbC4yTC8cfjhLLACFFJfIupCMqXwfDzGzAM=
Subject key identifier:   EE:F0:BC:34:D3:9F:EF:17:E1:A9:D2:B4:95:91:D1:02:8C:99:3E:C8
Certificate issuer:       /CN=879f8f15-9dc9-4663-aff8-bf62864b859c
Certificate serial:       010D0C9F4328584EA786E27EC095CC1A4E06F380
Authority key identifier: 86:B2:CD:FC:31:BA:34:57:EA:64:CB:E1:DE:50:AF:13:98:CF:C9:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/3fd10732-1eb0-3925-8159-321291b44229.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     398296
IP address blocks:        192.207.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/879f8f15-9dc9-4663-aff8-bf62864b859c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/879f8f15-9dc9-4663-aff8-bf62864b859c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:86:e2:7e:c0:95:cc:1a:4e:06:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=879f8f15-9dc9-4663-aff8-bf62864b859c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ef747d61-2bb2-480c-a7b1-86f9515795a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a8:b5:46:1e:26:3c:51:6f:d4:21:c6:29:3e:
                    1f:b0:ea:2c:8e:09:30:87:4a:68:28:7d:33:b0:dc:
                    4c:36:dd:4a:1c:2f:59:19:08:0c:87:04:26:58:2b:
                    f3:0e:5a:7a:76:3f:f8:b4:d8:3d:2f:ba:89:11:9a:
                    52:11:b5:ee:00:c8:bb:83:ba:eb:f8:bb:61:22:08:
                    fb:9f:bd:89:12:7e:39:06:3c:70:a9:e2:4e:69:e4:
                    29:dc:75:b0:3f:5c:8b:37:e3:54:96:d1:6e:37:6c:
                    ff:de:65:0a:4a:fb:2b:61:e4:b2:f8:81:e9:44:01:
                    60:1c:80:e9:44:3b:8d:5a:63:91:43:d9:7a:29:65:
                    47:3f:f1:ed:b7:fd:a7:2b:a0:16:47:74:ec:27:3a:
                    67:2a:6c:41:da:62:8d:fb:63:c9:d9:b2:58:29:0b:
                    57:b1:43:9c:cf:26:fe:94:6b:aa:6a:17:c2:e5:52:
                    04:10:55:b4:27:31:59:a8:ef:72:3c:be:bf:91:32:
                    f5:b6:2f:b7:c7:01:68:01:34:fa:c5:86:42:37:da:
                    b3:0a:0b:cd:fa:28:a9:72:2a:b5:d4:4d:05:40:49:
                    07:92:f9:e1:75:b4:66:fb:2a:04:d1:bb:a1:48:ea:
                    8c:82:9b:b3:10:d4:f6:dc:f1:1e:26:af:71:d1:d8:
                    ce:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F0:BC:34:D3:9F:EF:17:E1:A9:D2:B4:95:91:D1:02:8C:99:3E:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/3fd10732-1eb0-3925-8159-321291b44229.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c/879f8f15-9dc9-4663-aff8-bf62864b859c.crl

            X509v3 Authority Key Identifier:
                keyid:86:B2:CD:FC:31:BA:34:57:EA:64:CB:E1:DE:50:AF:13:98:CF:C9:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/879f8f15-9dc9-4663-aff8-bf62864b859c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.207.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:3e:d5:92:ff:c2:58:d4:ef:27:e2:9d:77:ed:4a:30:16:3b:
         08:3f:dc:cf:d7:19:95:8e:09:37:0f:e2:88:ae:9c:18:43:7e:
         1f:b6:cd:4e:fd:ac:04:31:9f:9a:14:fb:61:90:71:5e:02:89:
         2c:47:ff:b9:8a:e7:a0:f8:2e:4a:d5:e3:c1:66:bc:2c:a6:a0:
         0e:ba:68:c7:47:f5:c4:49:ec:fe:96:ef:96:41:27:eb:24:66:
         c7:a1:c3:41:19:23:3b:6c:2d:9e:40:58:3b:fe:24:4a:19:87:
         cd:57:04:08:4e:25:80:aa:62:4d:bf:2f:49:f4:83:9d:07:94:
         02:d0:c7:fb:d2:a4:f5:36:a2:61:a5:76:0c:3b:db:63:3b:10:
         31:e7:2c:51:0a:23:ec:c8:19:22:b4:1e:38:f6:93:51:7f:ee:
         0d:b0:0d:74:93:af:8c:d0:fb:78:62:7f:cc:87:12:1d:d2:eb:
         77:37:bc:11:fc:3a:da:7c:b6:1d:59:83:ff:f4:48:7b:a8:2d:
         8a:c9:36:58:54:cc:74:4e:cd:c1:79:e8:71:c7:5a:db:29:dc:
         2f:3e:f7:2b:11:03:88:4e:62:07:06:da:bd:e0:41:3a:81:8e:
         74:78:f2:86:ad:4d:f6:f0:c1:71:f5:3d:e4:93:ba:21:e2:cb:
         bd:de:66:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 07:11:28 2026 by rpki-client