Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/94e01c30-5024-3767-a8f0-c597a56a6988.roa
File:                     94e01c30-5024-3767-a8f0-c597a56a6988.roa (raw, json)
Hash identifier:          KkElceAld5Y1a37qXi96qxKwQOCIKOns2Amtfo0pLCU=
Subject key identifier:   E9:F9:C7:8B:24:C4:3F:5B:81:73:98:6A:B8:47:C9:D5:92:04:12:9C
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584EA7900E186E73C9AA69B78626
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/94e01c30-5024-3767-a8f0-c597a56a6988.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     22652
IP address blocks:        207.253.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:0e:18:6e:73:c9:aa:69:b7:86:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=16637991-5488-4622-80c6-a9c67cb338d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f5:87:aa:b1:57:6e:dc:2e:8e:13:4e:f3:09:
                    17:d3:01:ec:87:71:bc:2a:60:ee:e9:9a:4a:a1:00:
                    01:9f:75:26:da:6c:5e:90:be:ff:db:e1:39:be:be:
                    0c:70:87:40:b8:3d:1b:24:e5:78:fd:32:bb:79:1a:
                    eb:eb:b7:b8:53:fd:53:71:30:5d:6e:96:15:fc:47:
                    b7:74:fe:0e:f2:1f:a3:45:db:6e:06:66:b4:36:82:
                    91:e3:e4:fa:61:21:55:4f:be:20:65:56:b6:af:45:
                    35:29:89:ca:e3:a5:f8:2b:a2:ab:c4:10:4d:f0:9f:
                    75:f7:4b:72:6b:b7:12:78:3a:d0:b2:81:70:1b:9d:
                    79:30:fb:95:9a:01:44:15:2e:93:8e:6d:d4:45:94:
                    f1:b5:9b:69:b8:ba:de:7e:5d:91:1c:67:28:ca:ec:
                    f8:a9:12:c0:e0:dd:1b:58:3c:26:5b:77:3a:2c:6e:
                    12:74:8f:ed:b7:5a:c1:1b:d6:59:9b:17:7b:27:40:
                    31:e3:ad:ab:cd:10:9d:33:ef:07:bf:f5:13:b3:f9:
                    10:12:fe:84:5c:a8:1e:e8:64:f9:b7:4a:90:10:4f:
                    4c:31:a2:27:c6:7b:81:7e:cf:90:34:bd:0b:1f:34:
                    3b:9a:4f:54:b4:20:0b:78:d2:96:02:85:59:be:10:
                    07:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F9:C7:8B:24:C4:3F:5B:81:73:98:6A:B8:47:C9:D5:92:04:12:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/94e01c30-5024-3767-a8f0-c597a56a6988.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.253.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:57:53:48:c2:ac:f3:74:ab:73:61:be:00:7c:18:3c:be:fb:
         2f:6b:fc:5a:e1:dd:55:5d:e7:26:e6:da:9f:8f:59:c7:16:68:
         db:fb:8c:0b:9a:f4:d8:b1:60:b3:e5:db:f1:1f:a9:9c:05:1a:
         7b:31:38:d4:2d:79:aa:31:05:78:0a:08:95:66:ab:4a:bc:ca:
         ec:99:b9:33:31:0e:9c:41:a9:b3:3c:75:83:22:79:79:39:5e:
         fc:f5:aa:2d:51:9d:03:2d:eb:88:49:75:b7:d8:b5:29:c2:b7:
         78:90:05:3b:4f:16:c0:c7:8e:b4:ca:2a:bc:1b:e5:d5:e2:87:
         69:b3:75:5c:bf:64:1d:5d:f0:2b:78:53:b4:06:6c:fb:88:97:
         c9:31:3e:df:4a:1e:81:1f:dd:81:59:7d:db:b4:d1:43:df:36:
         e9:7f:ff:47:a8:a7:b0:a7:a6:d3:33:67:ac:5f:9b:d1:b7:8a:
         c7:e6:e6:4f:4d:98:b8:56:65:22:30:39:33:70:9d:10:88:10:
         e2:45:5c:a7:47:4d:e2:47:66:5c:95:f0:74:37:59:f2:d3:73:
         e4:57:57:4a:03:1b:0a:2b:98:ca:59:f6:41:61:a4:4d:ff:c5:
         58:74:ba:a0:cd:df:28:ec:04:6a:91:95:84:34:85:e0:3d:97:
         00:03:4f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:37:02 2026 by rpki-client