Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c/9e79db85-a328-3070-9d1a-db6b2a2e522f.roa
File:                     9e79db85-a328-3070-9d1a-db6b2a2e522f.roa (raw, json)
Hash identifier:          6dHJwmnixIQ5Vnk6hvvrqwEIeY3xkaZzZvYBWKidoTo=
Subject key identifier:   8C:2B:E7:03:67:25:8F:41:51:11:CE:0B:48:8D:52:87:7B:B9:86:34
Certificate issuer:       /CN=8e262294-f3c0-4a56-8c97-786e6ae2f14c
Certificate serial:       010D0C9F4328584EA4450D63B745986EEC578E40
Authority key identifier: 27:A7:46:6C:19:A9:9A:2B:26:07:13:D0:A7:19:8D:AE:5C:29:52:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c/9e79db85-a328-3070-9d1a-db6b2a2e522f.roa
Signing time:             Mon 27 Jul 2026 21:00:11 +0000
ROA not before:           Mon 27 Jul 2026 21:00:11 +0000
ROA not after:            Sun 25 Oct 2026 21:00:11 +0000
asID:                     2914
IP address blocks:        207.228.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c/8e262294-f3c0-4a56-8c97-786e6ae2f14c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c/8e262294-f3c0-4a56-8c97-786e6ae2f14c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a4:45:0d:63:b7:45:98:6e:ec:57:8e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e262294-f3c0-4a56-8c97-786e6ae2f14c
        Validity
            Not Before: Jul 27 21:00:11 2026 GMT
            Not After : Oct 25 21:00:11 2026 GMT
        Subject: CN=6c831249-8b6d-4284-a875-4636d7103eb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:42:46:04:e1:14:18:b0:53:e4:d0:aa:b3:97:
                    e8:53:b3:94:dd:41:18:91:67:5d:08:52:37:dd:b2:
                    14:58:a8:5e:99:cc:ed:bc:a0:11:49:6a:15:28:7e:
                    47:77:0d:e8:d3:9b:db:7d:67:d3:4f:62:14:b3:32:
                    18:10:d7:11:c2:df:62:b3:40:c7:a3:54:69:60:81:
                    42:b9:77:06:7a:30:8c:09:21:2d:9e:2c:9b:b5:14:
                    14:50:66:74:94:6b:94:88:8a:5a:a3:d2:8f:3c:b8:
                    43:8a:d3:84:a2:df:4d:10:cd:ad:18:57:de:09:4e:
                    d5:2b:58:df:45:e9:01:b6:4b:6c:4c:c0:60:f3:06:
                    59:be:3a:c9:d2:f6:34:bb:47:36:ee:e0:d9:5d:17:
                    ce:cd:62:97:50:7d:89:07:a6:59:5b:39:ea:d1:5a:
                    3b:53:2f:4d:ea:a6:84:9a:67:10:e6:52:b0:65:4b:
                    ed:8b:9a:b9:bf:4c:aa:d4:92:c0:a1:ba:43:4d:28:
                    80:25:37:5f:63:35:13:c3:4d:98:ff:bc:21:18:62:
                    fc:42:4b:ce:f4:b7:7a:b7:6e:3f:b7:6b:a4:1d:85:
                    a6:71:16:2d:9e:97:b0:c7:a8:cb:81:fd:61:b5:3f:
                    29:71:2a:4f:1f:43:78:82:89:74:8e:d8:1a:d0:cf:
                    94:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2B:E7:03:67:25:8F:41:51:11:CE:0B:48:8D:52:87:7B:B9:86:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c/9e79db85-a328-3070-9d1a-db6b2a2e522f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c/8e262294-f3c0-4a56-8c97-786e6ae2f14c.crl

            X509v3 Authority Key Identifier:
                keyid:27:A7:46:6C:19:A9:9A:2B:26:07:13:D0:A7:19:8D:AE:5C:29:52:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e262294-f3c0-4a56-8c97-786e6ae2f14c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.228.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:ea:d1:09:21:9e:d7:e3:40:fc:a9:f4:9f:aa:d2:cc:06:1b:
         c4:b8:23:a1:de:d8:e8:48:e7:51:e2:9c:23:a0:8f:a1:fc:2d:
         23:b0:8d:4d:c5:f4:40:e9:2c:e9:60:05:c2:6b:43:79:a0:5b:
         f9:47:63:d4:8b:48:00:c5:e4:20:dd:75:9f:a6:56:27:1c:9a:
         24:bb:10:d8:61:ac:71:73:ab:00:b6:cf:5f:ad:79:9e:96:58:
         89:20:8d:a5:cb:9b:ee:1a:96:0a:b8:86:95:70:af:b3:97:85:
         8e:dd:72:d7:fd:38:30:95:a0:35:8a:ac:b4:81:e9:ef:4c:3c:
         c5:3c:11:5c:43:67:5f:d2:c2:04:9d:31:96:68:6f:b8:5f:81:
         77:ed:f1:ab:3c:58:fc:94:f7:cf:81:a0:76:7e:05:6c:69:e3:
         61:d6:a1:92:df:e6:1c:8c:25:cc:41:db:cd:92:dc:7c:b9:39:
         5a:e1:b2:a9:a2:d0:15:4c:85:dc:c0:6e:23:c2:5e:be:ea:8c:
         67:a1:0e:cf:f5:3a:77:23:d9:b0:99:49:dc:dc:e9:36:30:08:
         64:7c:cd:33:3a:c1:80:3d:89:a9:7b:8b:c1:16:90:3a:5c:11:
         fe:84:bd:86:df:87:74:b8:39:51:84:7c:12:41:1b:77:a6:8c:
         2b:0f:73:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:17:58 2026 by rpki-client