Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9e1245ff-6811-4fe0-81b3-13b19cf54aab/7fefe28b-054d-3109-ba03-0b9fb68c6755.roa
File:                     7fefe28b-054d-3109-ba03-0b9fb68c6755.roa (raw, json)
Hash identifier:          N74oRoaTs9c9Xdh112h0ZiB8t1VOawkHJPI38qH9DAs=
Subject key identifier:   F3:21:A7:4D:87:16:E3:7B:26:7E:69:F1:09:28:EC:DA:66:58:9A:9C
Certificate issuer:       /CN=9e1245ff-6811-4fe0-81b3-13b19cf54aab
Certificate serial:       010D0C9F4328584F119CDB13C5F1305BA0E73700
Authority key identifier: C6:EB:16:D5:0A:71:1C:99:F4:31:6C:19:E3:93:8C:3D:26:9C:40:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9e1245ff-6811-4fe0-81b3-13b19cf54aab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9e1245ff-6811-4fe0-81b3-13b19cf54aab/7fefe28b-054d-3109-ba03-0b9fb68c6755.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     8075
IP address blocks:        205.210.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9e1245ff-6811-4fe0-81b3-13b19cf54aab/9e1245ff-6811-4fe0-81b3-13b19cf54aab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9e1245ff-6811-4fe0-81b3-13b19cf54aab/9e1245ff-6811-4fe0-81b3-13b19cf54aab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9e1245ff-6811-4fe0-81b3-13b19cf54aab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:db:13:c5:f1:30:5b:a0:e7:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e1245ff-6811-4fe0-81b3-13b19cf54aab
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=c9778b27-9023-4d34-9788-c85dd4fe055f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c6:26:a4:55:a0:e4:bc:07:7c:58:86:9f:10:
                    d3:c8:c7:6d:3e:54:1a:75:34:a7:3a:49:84:40:82:
                    22:24:25:48:e6:21:f5:f0:2a:d3:5c:f8:9c:c6:00:
                    79:97:66:34:73:a9:4a:e8:8f:51:8b:31:1a:75:4c:
                    25:c4:2f:f7:e6:56:44:a8:f8:5b:39:9f:35:25:e5:
                    4a:74:ad:97:23:7a:a0:89:9f:bc:65:43:4b:e5:43:
                    5c:88:1e:1b:d7:46:f9:24:7c:59:c6:94:32:d3:92:
                    c1:c8:18:7d:09:6c:1b:f9:14:44:50:11:1f:7e:92:
                    ee:81:28:82:e2:f1:cf:87:0c:5b:92:62:74:17:48:
                    8e:75:f2:64:82:8f:79:fd:40:cc:f5:b5:a8:65:b3:
                    1f:7d:46:23:8d:1c:b0:f8:87:78:0b:c2:a1:5d:29:
                    51:6c:7a:1a:c6:af:f0:89:32:02:4b:dd:51:2c:5c:
                    3f:9a:3a:20:20:ec:f3:f9:7b:8b:cb:8b:48:22:95:
                    df:7b:a8:1f:a7:a4:58:c5:b9:c0:0b:12:ec:23:a5:
                    53:43:fa:02:9b:25:ac:1e:74:ee:bf:0d:00:e9:c6:
                    6a:e0:3c:84:ce:c7:b4:ef:6d:59:f9:02:b8:d4:fb:
                    db:85:7a:2a:57:a6:1e:d6:d2:77:11:93:a7:2f:be:
                    27:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:21:A7:4D:87:16:E3:7B:26:7E:69:F1:09:28:EC:DA:66:58:9A:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9e1245ff-6811-4fe0-81b3-13b19cf54aab/7fefe28b-054d-3109-ba03-0b9fb68c6755.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9e1245ff-6811-4fe0-81b3-13b19cf54aab/9e1245ff-6811-4fe0-81b3-13b19cf54aab.crl

            X509v3 Authority Key Identifier:
                keyid:C6:EB:16:D5:0A:71:1C:99:F4:31:6C:19:E3:93:8C:3D:26:9C:40:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9e1245ff-6811-4fe0-81b3-13b19cf54aab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.210.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:bd:ac:03:0c:8b:6f:f3:a1:14:37:f8:03:cb:7c:83:01:82:
         b9:5d:55:79:ec:f2:a4:30:71:c5:90:ae:d2:33:e2:8d:80:9a:
         43:c5:1a:e0:8a:b1:9a:68:9a:ec:12:f9:d5:32:c5:32:1d:aa:
         f2:8d:d7:ef:85:9c:d9:bc:d8:35:09:23:ad:69:06:62:97:a1:
         ea:8b:f8:93:bd:52:71:15:1f:4d:1d:6c:34:7c:bb:f1:80:31:
         03:51:4b:9b:17:86:6b:24:cf:ed:09:50:97:0a:cd:02:1c:d9:
         2f:2b:35:0e:9f:0d:08:a6:85:28:41:08:e3:33:06:04:5c:46:
         64:83:4a:23:89:89:0d:9b:6c:35:c1:8a:be:d3:21:ab:cd:f3:
         3b:63:37:82:8f:ae:b2:d5:31:6f:06:38:67:4a:29:5e:8d:23:
         85:10:20:4a:33:6f:96:6d:60:73:9c:7b:f8:80:11:d8:08:e6:
         21:20:e3:5a:ba:eb:cd:b2:53:bf:82:74:25:16:3d:ab:6a:a6:
         1b:76:4a:47:23:c2:1c:7c:7a:b9:df:e7:32:aa:ec:6e:26:5f:
         41:31:2d:85:25:ac:f2:2c:d4:05:12:42:1b:13:4f:46:f8:75:
         8b:a7:1d:2a:90:b0:65:a9:97:44:c1:17:59:d8:7a:1d:8d:ef:
         cc:bd:0c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:05:35 2026 by rpki-client