Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/7b7debff-9c09-3442-9d1d-53ec5c8e5ac7.roa
File:                     7b7debff-9c09-3442-9d1d-53ec5c8e5ac7.roa (raw, json)
Hash identifier:          V6CgNDDZkKmtGQTe5JDgNn9AYqbDnp6UV0fhPEqqtQE=
Subject key identifier:   1C:D9:AA:0C:EA:A5:8D:97:2C:6D:62:69:8C:13:6C:F4:0A:E3:BF:A9
Certificate issuer:       /CN=5d7f827b-f59c-40f4-83a5-cd0c4b16f42e
Certificate serial:       010D0C9F4328584E104F2BE2CC09903C7FF7AB00
Authority key identifier: D3:F5:EC:E0:5E:22:D9:CF:D6:34:82:88:FC:38:89:5F:E6:57:C2:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/7b7debff-9c09-3442-9d1d-53ec5c8e5ac7.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     393806
IP address blocks:        198.184.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4f:2b:e2:cc:09:90:3c:7f:f7:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d7f827b-f59c-40f4-83a5-cd0c4b16f42e
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=9a8f25cc-e697-4a37-bc71-615fc8fb9a3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:37:77:a0:9b:81:94:68:99:8f:2b:19:93:69:
                    3e:dc:ec:3a:4f:4f:a4:82:42:3b:ea:f6:05:9f:34:
                    fa:64:c7:83:9d:1c:ec:e7:72:b6:a3:a0:6c:67:0a:
                    cf:aa:96:50:38:ed:c1:6f:60:68:86:5b:bc:cd:65:
                    a4:a6:17:c3:f1:3d:5a:47:1e:8d:b9:0b:dd:24:1f:
                    ea:69:13:3f:49:a3:18:04:ee:12:e7:fc:38:c8:18:
                    01:15:bb:c5:38:a1:6b:77:e5:75:ef:9a:bd:99:88:
                    92:26:f2:5d:23:e2:4d:de:bc:f3:06:f0:9d:ea:44:
                    72:96:55:4e:6c:90:db:23:19:0c:ee:c4:65:8a:f7:
                    9b:fd:36:c0:f3:46:96:c7:42:67:6d:0c:33:43:74:
                    ed:4f:f1:aa:dd:1d:50:4f:19:ad:c8:7f:12:6c:cb:
                    22:46:43:f8:ba:74:a1:8f:1f:dc:b1:03:11:6a:ce:
                    c1:cb:41:3f:c3:00:05:2f:85:57:03:66:19:64:d0:
                    30:25:9e:42:bd:5f:e2:6b:3d:65:b9:d8:aa:5c:96:
                    ba:9e:0c:71:c1:e6:e0:40:c5:ee:e4:6c:44:92:5c:
                    34:2d:3e:66:2d:95:a4:64:91:51:82:95:53:69:fe:
                    7b:c8:04:9d:42:3d:1b:77:35:d2:a9:52:54:94:ac:
                    f8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D9:AA:0C:EA:A5:8D:97:2C:6D:62:69:8C:13:6C:F4:0A:E3:BF:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/7b7debff-9c09-3442-9d1d-53ec5c8e5ac7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.crl

            X509v3 Authority Key Identifier:
                keyid:D3:F5:EC:E0:5E:22:D9:CF:D6:34:82:88:FC:38:89:5F:E6:57:C2:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.184.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:cd:fa:04:eb:a4:ed:0d:94:1a:9e:04:45:7e:e5:90:04:7c:
         05:49:8f:29:f7:e1:f7:1c:d6:d4:03:56:fc:1b:1b:9b:91:e5:
         76:51:06:bd:d0:ec:e9:b2:b5:cb:96:32:29:24:5e:bf:95:00:
         be:9e:09:56:a5:03:de:08:82:db:01:04:15:cc:75:5f:c9:1b:
         1a:c1:65:20:c3:57:b4:23:44:1c:cb:46:43:3a:4a:fd:40:b1:
         a9:2b:27:9d:1d:23:20:8e:50:7e:76:f8:c8:99:22:0b:64:41:
         a8:6a:51:05:05:dd:f9:e1:e0:b7:f6:3f:91:8b:14:52:03:e1:
         e0:70:f6:20:bd:81:37:b9:bf:9f:14:7b:0f:cc:d1:17:c2:a5:
         2b:91:ab:c6:b9:6e:7c:cc:54:4b:1d:09:ed:e5:04:9e:e6:f3:
         48:3c:57:8c:b0:15:c0:ef:0e:bf:25:30:38:ca:9f:f8:f2:b2:
         d1:16:fb:6d:e9:8e:f8:40:16:9a:ba:70:79:34:f8:e2:25:e7:
         aa:eb:d7:99:48:d3:b6:78:dd:88:85:6f:0c:7b:e6:8a:24:42:
         12:23:91:32:27:12:a0:4e:98:4d:12:6f:8e:bc:df:bc:b7:3d:
         bd:9a:d9:01:3b:87:20:be:2e:af:f1:ef:f9:ab:6e:fd:1f:dd:
         27:3c:fc:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:21:45 2026 by rpki-client