Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/7ee21358-47c6-3cca-beac-7797f2c27117.roa
File:                     7ee21358-47c6-3cca-beac-7797f2c27117.roa (raw, json)
Hash identifier:          yXdD3KkTiT+tPzGL3UDqNGIsvjGJtNT2JDVQg8FKi78=
Subject key identifier:   52:DE:E9:C5:30:A2:3E:B9:38:ED:DB:7C:24:4E:78:B8:9B:D8:F9:96
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F4328584E25C75407309DCB986D127E80
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/7ee21358-47c6-3cca-beac-7797f2c27117.roa
Signing time:             Fri 12 Jun 2026 13:35:03 +0000
ROA not before:           Fri 12 Jun 2026 13:35:03 +0000
ROA not after:            Thu 10 Sep 2026 13:35:03 +0000
asID:                     31898
IP address blocks:        207.148.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:c7:54:07:30:9d:cb:98:6d:12:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Jun 12 13:35:03 2026 GMT
            Not After : Sep 10 13:35:03 2026 GMT
        Subject: CN=929fa894-46df-4c6e-9714-ddc3c13cf364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:1d:99:46:24:9a:dc:86:ed:de:39:d8:0c:8d:
                    11:d0:b5:d3:93:c2:f2:eb:f4:c1:f1:48:b9:4a:80:
                    74:a0:fd:b1:12:fb:bf:1e:f4:64:ae:28:44:c5:ca:
                    cb:55:97:c1:bd:75:a0:3a:f8:6f:38:b3:21:8f:c7:
                    ab:21:31:a5:38:3d:1a:af:4f:ed:1d:ba:5c:71:5a:
                    39:3d:63:fc:43:d4:96:21:05:b5:0d:cd:35:f2:f5:
                    8d:94:21:cf:1d:07:51:84:6d:1d:ab:b0:e3:2c:73:
                    62:59:0c:5c:97:90:24:3f:31:2e:cc:3d:b0:59:07:
                    f1:2e:cc:99:db:ba:51:37:3b:2b:a4:6f:60:20:a9:
                    6c:f4:89:dd:f5:e0:85:91:d1:e7:c8:05:f9:41:1b:
                    c2:ab:b5:76:63:12:09:58:d8:75:44:8f:fa:9c:4e:
                    ac:93:0c:d2:b6:7f:73:25:ed:40:7f:77:db:60:cf:
                    74:1e:00:2b:4d:90:85:dc:d2:90:2e:80:fe:65:06:
                    6c:23:ab:30:5c:75:50:00:38:3a:e9:2e:e5:0a:97:
                    73:53:69:8f:21:1a:b2:1e:aa:9e:23:10:e9:0e:60:
                    71:48:ee:85:bf:53:48:e6:4e:d7:f4:6d:f3:9c:48:
                    78:68:47:12:e8:2d:ac:6d:7b:32:ea:04:46:69:80:
                    fc:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:DE:E9:C5:30:A2:3E:B9:38:ED:DB:7C:24:4E:78:B8:9B:D8:F9:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/7ee21358-47c6-3cca-beac-7797f2c27117.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.148.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:2c:57:c5:fa:6b:b1:2c:31:f1:f8:40:01:d0:73:04:f0:0e:
         ae:c1:99:c6:58:d6:4f:d4:67:6c:95:70:b0:7d:c5:79:75:ba:
         38:70:21:87:41:4b:2a:41:d7:f0:b0:46:1d:ce:10:4e:53:17:
         89:58:fe:dd:2c:92:e8:19:4a:6f:69:13:dc:01:82:09:3c:79:
         dd:d5:76:f7:01:9a:c7:c0:c2:cf:cb:ac:41:9f:dd:d8:c2:7d:
         d3:ad:85:ad:89:8d:64:4b:db:17:46:4f:ed:30:a6:f0:87:f3:
         5e:59:61:a5:0f:f1:41:6b:5a:d7:b8:23:0e:41:18:c0:6d:e7:
         47:60:7b:e7:cf:d6:2b:ab:47:14:ea:86:96:3f:61:3d:bc:cd:
         e4:fc:92:83:5e:47:f4:87:73:80:eb:58:92:92:b3:9c:dc:bc:
         c5:73:b7:70:86:4a:51:29:1f:bb:c5:bc:79:6c:37:03:da:6f:
         5d:ae:40:e0:b0:9d:f9:bc:e0:bb:16:ce:48:9b:86:22:46:4b:
         2d:14:24:57:3e:8b:e9:b7:a8:e1:15:f1:c2:a8:32:eb:84:db:
         bf:dd:a8:d8:7b:75:b0:94:50:65:30:5e:f7:ce:84:0b:83:a4:
         58:a3:16:be:64:c8:73:72:ff:34:5d:50:53:9d:92:99:62:5f:
         8c:f8:b2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:46:58 2026 by rpki-client