Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/6aceee50-e9f3-3e04-824a-83e6ee62650c.roa
File:                     6aceee50-e9f3-3e04-824a-83e6ee62650c.roa (raw, json)
Hash identifier:          KMvGAHkrPa7aoyExYq9r1hGdrrAeiDeNvGDqaz5Jv8g=
Subject key identifier:   DC:73:89:CF:94:83:EB:B8:22:17:F1:40:B2:BA:27:72:4F:F0:8A:C7
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584CF157737792B1AB80A52A9580
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/6aceee50-e9f3-3e04-824a-83e6ee62650c.roa
Signing time:             Sun 22 Feb 2026 02:00:32 +0000
ROA not before:           Sun 22 Feb 2026 02:00:32 +0000
ROA not after:            Sat 23 May 2026 01:00:32 +0000
asID:                     395075
IP address blocks:        207.96.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f1:57:73:77:92:b1:ab:80:a5:2a:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Feb 22 02:00:32 2026 GMT
            Not After : May 23 01:00:32 2026 GMT
        Subject: CN=2c08a2a6-2fe7-4e5b-be86-6ba5c9ac331d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b0:0e:98:c9:c2:80:cd:f6:91:c3:06:07:26:
                    e2:75:f2:c9:10:c6:42:a4:9b:c5:2a:cb:7f:6f:96:
                    59:c5:7f:43:e1:7c:a4:e0:9e:b6:44:a4:2e:b2:90:
                    79:8e:67:67:f3:be:b3:c4:7c:4c:89:74:fe:2e:0a:
                    5f:60:ad:b5:6a:3d:36:ab:82:0a:9f:34:f9:81:c5:
                    70:9d:1b:ea:4e:66:53:4c:dc:f5:a2:a3:79:c5:0b:
                    0b:59:51:04:e3:46:cd:08:15:bb:8e:3b:73:71:94:
                    f5:a6:52:86:15:51:23:0b:1e:6c:3a:a5:e8:bb:20:
                    34:52:b3:5e:88:b3:34:1a:db:1a:8b:ad:54:be:6a:
                    7c:15:98:b7:85:c8:d3:14:2e:84:06:c3:24:5e:ba:
                    54:d1:a9:b7:89:d9:d0:8e:ca:1b:1b:fa:4f:24:75:
                    c2:a1:46:ba:4b:ee:ca:f8:f3:e3:b3:88:91:93:5c:
                    df:e5:44:8d:60:99:75:78:0d:7c:f4:ce:7f:04:c7:
                    9b:45:4f:28:4a:19:62:0a:24:1f:f2:ac:6c:25:b3:
                    41:d7:53:40:6f:fc:6f:27:2a:6b:7a:11:ab:ef:92:
                    8b:7b:9e:e5:33:32:a7:b4:99:0b:28:80:bf:1a:3a:
                    63:2d:6a:da:62:f3:e7:fd:0b:be:1b:23:54:cb:9e:
                    52:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:73:89:CF:94:83:EB:B8:22:17:F1:40:B2:BA:27:72:4F:F0:8A:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/6aceee50-e9f3-3e04-824a-83e6ee62650c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.96.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:0a:eb:20:5b:b2:87:ec:cb:a6:50:15:3e:ee:29:65:f4:87:
         7d:b1:81:e9:6f:25:86:8c:40:68:43:a0:2e:32:f9:2e:7c:91:
         b0:39:43:04:8f:b4:d8:a3:31:a1:d4:11:d1:54:94:11:3f:5d:
         a4:ca:8d:65:43:bd:a3:d6:87:1c:c8:e3:41:4c:9f:d8:85:3e:
         9e:c9:c9:b3:f3:e1:35:bb:1f:aa:50:dd:ed:cc:e6:dc:8e:06:
         5a:9e:79:6c:3a:26:96:aa:04:be:ec:87:99:2d:da:9a:fb:9d:
         64:1c:cf:cd:76:20:b6:4c:f1:15:eb:b4:c4:12:0a:5d:a8:e3:
         70:1d:07:a1:aa:e8:12:21:15:9b:a2:bd:a1:b7:15:97:96:32:
         fa:9c:b7:5f:e7:22:d0:53:be:7e:e1:ae:06:b8:c4:eb:f6:06:
         f3:df:d1:49:ba:94:ca:ba:4b:ba:2a:98:17:e1:c7:e1:bd:66:
         5d:a5:04:8e:e2:e5:91:09:6e:18:67:6b:9d:28:ad:88:96:8c:
         32:27:a0:7c:2d:20:6e:d6:41:9c:24:e7:34:b9:9e:66:ea:03:
         93:35:c4:44:1b:33:b7:70:d6:c1:31:96:d7:07:8f:02:9e:80:
         c6:e6:a4:4a:7e:34:82:59:a5:8e:f0:4e:db:af:95:82:a9:91:
         90:84:97:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:56:22 2026 by rpki-client