Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/14234caf-f355-317a-bea9-066da207b0a3.roa
File:                     14234caf-f355-317a-bea9-066da207b0a3.roa (raw, json)
Hash identifier:          +XuC5RyHOIKkymXja/AptsAoEVZn2c8jhzE8KvFmwJE=
Subject key identifier:   4F:A2:F7:FC:9E:C5:2A:9E:51:53:7E:DC:B9:8D:1A:F9:7E:81:F6:AF
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584DE2B5E3D337481383F6C40420
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/14234caf-f355-317a-bea9-066da207b0a3.roa
Signing time:             Tue 19 May 2026 13:00:32 +0000
ROA not before:           Tue 19 May 2026 13:00:32 +0000
ROA not after:            Mon 17 Aug 2026 13:00:32 +0000
asID:                     30336
IP address blocks:        207.253.192.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:b5:e3:d3:37:48:13:83:f6:c4:04:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: May 19 13:00:32 2026 GMT
            Not After : Aug 17 13:00:32 2026 GMT
        Subject: CN=65b2325b-81b1-4939-9767-dcd29c8563b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:97:ee:9b:d4:b3:f0:83:1a:f9:d9:39:09:3f:
                    81:87:84:04:f6:f5:3f:36:00:98:41:1f:9e:20:24:
                    08:dd:d8:64:89:4b:d0:36:b2:b8:11:bf:38:3a:35:
                    1f:ef:92:48:aa:49:9f:63:14:72:e3:b2:a7:71:ab:
                    2d:f7:15:bd:1b:2c:8d:b0:60:90:39:dd:45:52:df:
                    41:b6:99:24:cc:8f:05:92:54:70:dc:4c:33:ab:c5:
                    af:b9:8f:c9:0b:0d:d0:ba:63:12:04:70:c7:8d:77:
                    14:a7:b8:2d:b7:97:24:c2:b8:29:e8:e9:f9:53:25:
                    9c:ed:6e:00:d5:6b:d8:80:ed:49:d6:f9:8c:42:f1:
                    de:cc:1f:28:59:47:e9:b3:dd:0b:f2:59:1a:ee:cd:
                    0a:5b:1e:eb:a6:94:18:ad:e4:7a:5d:ed:7f:22:57:
                    29:07:e6:73:64:07:e3:45:dc:db:b2:2b:59:78:b6:
                    80:d3:3b:5c:a8:b0:31:ba:7c:eb:38:84:bb:ee:c6:
                    56:9c:ac:1c:d5:d0:5f:86:2c:70:f2:f3:69:ef:27:
                    5e:26:d8:fb:d0:91:3a:cb:64:5e:d9:ff:c7:14:cf:
                    e6:03:94:e5:5b:fd:00:0c:bf:63:b7:2f:fb:11:11:
                    f9:71:4f:2e:0b:19:66:39:1c:43:e2:6d:cc:93:7e:
                    e7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A2:F7:FC:9E:C5:2A:9E:51:53:7E:DC:B9:8D:1A:F9:7E:81:F6:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/14234caf-f355-317a-bea9-066da207b0a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.253.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:dc:be:a8:94:4e:6b:4a:c9:e9:03:e3:0e:b9:68:2b:c1:4d:
         37:19:c9:0c:90:c8:b4:cc:38:b1:02:ef:6a:69:93:b1:ef:36:
         bd:61:d6:67:0f:2e:8a:37:1a:e7:df:55:9f:cf:9f:07:e4:0d:
         38:64:61:14:b2:9e:d3:a8:16:a5:ea:3b:01:6c:32:5f:9c:b3:
         f5:26:9d:6a:0c:d2:3a:2a:23:ac:fd:b3:64:77:b5:51:49:e0:
         ab:21:03:b0:b0:6d:c4:0e:75:19:75:ac:08:f4:b5:90:af:12:
         4b:70:7e:56:5c:bc:33:5c:ec:f4:33:68:b8:df:ac:61:4b:3d:
         d3:20:82:73:a0:2e:ce:51:25:ac:15:be:4b:e5:9d:92:76:79:
         ae:f2:4c:c2:c2:88:4d:a8:f4:a9:42:59:10:ca:49:66:f3:cf:
         6c:7d:de:94:bf:5f:3c:c1:ce:6f:ad:f7:7d:77:2e:40:91:03:
         83:9e:4d:78:d7:ee:a7:77:94:56:04:93:5e:52:88:39:a3:e8:
         95:2c:b2:20:26:04:d7:da:ed:33:75:cc:1d:2d:f3:49:bd:23:
         3a:95:1f:2e:86:36:2f:7c:5c:26:b5:84:f2:f3:03:3a:fc:97:
         39:18:0b:58:e9:3e:08:69:9c:41:33:95:61:0a:26:85:7e:54:
         e4:38:c0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:37:07 2026 by rpki-client