Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7c3bc679-7f26-38de-b562-b430ec117b80.roa
File:                     7c3bc679-7f26-38de-b562-b430ec117b80.roa (raw, json)
Hash identifier:          pd+CxE23jnLzFhq2qMKBopkZbvEfVaPWFDb/UnhH88c=
Subject key identifier:   21:CB:B8:71:7E:71:A1:FA:91:BD:AF:E0:3F:D9:6B:E4:03:DB:99:2A
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584EA17A85EC31995696CAAEF200
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7c3bc679-7f26-38de-b562-b430ec117b80.roa
Signing time:             Sun 26 Jul 2026 21:00:11 +0000
ROA not before:           Sun 26 Jul 2026 21:00:11 +0000
ROA not after:            Sat 24 Oct 2026 21:00:11 +0000
asID:                     22652
IP address blocks:        75.98.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a1:7a:85:ec:31:99:56:96:ca:ae:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Jul 26 21:00:11 2026 GMT
            Not After : Oct 24 21:00:11 2026 GMT
        Subject: CN=ae93586c-b695-44e8-808e-47ba5c14edf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4b:b9:b9:7f:6e:2d:e8:d9:ed:6a:74:b5:aa:
                    1f:de:d9:5f:16:09:ee:4a:ca:1d:48:28:fb:da:0f:
                    b8:d3:e1:f1:74:61:ea:b8:9f:31:bc:61:ff:4a:6d:
                    06:ac:5d:fb:16:7c:8d:d8:77:41:65:81:d7:1b:2d:
                    bb:93:7b:c7:be:c9:4f:65:69:1c:58:d8:aa:46:0f:
                    37:56:5c:20:43:b5:ab:11:c9:50:6f:d5:f4:af:e5:
                    bd:8f:0d:93:e9:a0:91:e3:c9:ad:f2:5c:ea:ef:a6:
                    33:d3:51:9f:a5:d6:10:69:04:a6:84:11:78:b2:7d:
                    0e:7a:cf:8d:80:57:b9:11:42:3d:f3:7b:eb:93:21:
                    3c:d4:69:96:a0:d4:51:44:e4:96:f0:1c:e7:e1:ab:
                    2a:bf:08:58:d9:87:2c:40:7b:fe:0c:91:32:36:69:
                    9d:8e:fe:c3:08:ad:7d:84:71:e9:9a:d8:71:fb:29:
                    08:d0:ad:1a:a5:99:1d:78:79:e9:46:25:e2:f2:0e:
                    4e:e3:a0:c3:9a:c5:6d:5d:8b:9a:3c:f6:d8:11:6b:
                    51:d6:92:bd:ed:eb:a9:8c:d3:99:b1:c2:8b:fc:a2:
                    2f:96:33:a4:83:79:11:12:39:67:2e:a6:9f:8d:a8:
                    06:9d:31:ab:84:27:c9:d0:8b:69:cd:8e:43:27:6d:
                    b1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:CB:B8:71:7E:71:A1:FA:91:BD:AF:E0:3F:D9:6B:E4:03:DB:99:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7c3bc679-7f26-38de-b562-b430ec117b80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.98.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:03:e1:66:6d:b3:03:96:7c:23:58:26:9b:81:47:55:b6:3f:
         29:c4:a1:6a:02:d3:53:e1:d9:13:d0:ac:32:91:b3:fc:94:17:
         ac:30:a7:59:10:98:ad:98:3f:86:a6:9d:6c:26:11:fe:f3:2f:
         68:79:40:b9:83:0f:d2:7a:07:df:fc:5b:02:a6:c2:ca:ef:a9:
         29:02:8c:19:14:85:5e:fa:4d:6b:c2:00:42:45:b3:ac:69:43:
         33:e1:c6:97:f8:e0:f2:26:03:0b:b8:dc:eb:50:28:a4:2c:6d:
         a1:13:8b:78:4a:d1:02:80:ef:4e:cc:49:a9:de:95:3b:20:22:
         3b:8e:28:ba:e3:6a:e8:ee:2a:12:3d:71:57:fb:e8:4a:7f:a0:
         4c:80:d4:53:1f:fe:43:89:b8:a2:b0:f2:65:78:d6:97:f1:2b:
         2d:b5:34:f0:68:f8:a0:ca:56:26:b9:83:09:15:0a:a1:3e:08:
         8b:80:46:fe:e0:3d:ad:c8:b0:22:96:dd:d9:06:ab:98:e8:04:
         8f:e1:9f:32:9c:6d:28:67:09:7c:56:65:67:b2:19:e3:02:03:
         0e:f8:e7:9c:1b:30:31:9b:5e:a4:e7:d7:5c:49:50:61:d0:ce:
         a7:0d:60:7d:20:12:fd:3d:81:fe:5e:9a:07:11:75:b0:b9:d3:
         f7:c7:9f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:58:25 2026 by rpki-client