Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/9936e816-918e-3021-8c8a-d9734f997912.roa
File:                     9936e816-918e-3021-8c8a-d9734f997912.roa (raw, json)
Hash identifier:          VFQhmlrfWN9kKFoSB6OXZYYSqz3n4QxPAOTBDLHeWR8=
Subject key identifier:   DC:82:8B:34:17:C0:93:78:B1:E9:34:3C:6E:D7:4F:B3:D1:6A:D2:8C
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584DD1F5C14F41439EE6368A6500
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/9936e816-918e-3021-8c8a-d9734f997912.roa
Signing time:             Wed 13 May 2026 13:00:31 +0000
ROA not before:           Wed 13 May 2026 13:00:31 +0000
ROA not after:            Tue 11 Aug 2026 13:00:31 +0000
asID:                     395075
IP address blocks:        207.96.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d1:f5:c1:4f:41:43:9e:e6:36:8a:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: May 13 13:00:31 2026 GMT
            Not After : Aug 11 13:00:31 2026 GMT
        Subject: CN=f49c02c1-d543-4dbe-bc8f-264e03d98792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:78:89:7e:ef:94:f4:75:ae:ff:82:74:8e:87:
                    9b:dd:9f:31:75:c3:ec:dc:6d:d9:a2:2d:44:17:ff:
                    dd:42:6d:34:a3:7e:49:1f:b7:cb:e8:5a:62:b1:80:
                    99:81:f1:e1:c2:e7:82:85:ca:23:e0:db:7a:43:d0:
                    d7:35:18:25:da:6b:34:ad:23:ee:93:f4:1a:c2:0b:
                    69:bc:02:91:f4:d6:c5:b1:e0:f4:5c:69:dc:e2:03:
                    23:ca:2c:d9:98:25:b2:13:78:a3:a8:53:7e:7c:7c:
                    ca:81:49:e2:0c:b1:88:9f:07:69:cd:3b:92:a1:c5:
                    70:93:74:fa:46:41:7f:f7:2b:0c:5d:94:c1:89:d0:
                    87:32:76:10:4d:c5:e0:9e:b2:7d:43:ba:c7:4a:6e:
                    b6:a2:a6:2e:ac:5a:45:8b:95:d2:cf:86:ab:41:a7:
                    6c:50:96:2d:55:d2:1e:29:21:9e:b8:bd:71:9d:42:
                    63:26:85:b5:58:24:1d:84:de:ba:4f:51:5d:3c:03:
                    33:f6:8a:f5:43:72:f1:4f:b4:8d:73:5f:38:76:e6:
                    e4:57:14:c9:b5:fd:91:db:bb:55:d1:e8:12:b7:ce:
                    6b:1d:58:72:d2:b0:a9:4d:11:b6:25:54:cd:3f:a9:
                    53:31:ef:55:f3:89:e9:12:e7:6c:be:c3:ee:d2:b3:
                    95:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:82:8B:34:17:C0:93:78:B1:E9:34:3C:6E:D7:4F:B3:D1:6A:D2:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/9936e816-918e-3021-8c8a-d9734f997912.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.96.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:94:43:36:d4:0d:94:99:11:83:34:a8:69:9f:61:d6:ad:84:
         61:7b:73:49:d3:a5:c9:6f:f2:41:16:2a:99:3c:09:07:b8:d4:
         51:bd:96:ae:e5:db:ce:b2:62:12:be:6d:0b:c4:4d:1a:e2:bf:
         cc:ec:09:44:60:0c:d2:60:77:a8:d2:eb:ea:50:14:fc:2c:13:
         7d:a9:4e:81:a7:39:f1:a4:fb:23:05:ac:10:3d:96:b0:8d:1b:
         f2:69:9f:53:a0:fd:e9:77:27:6e:59:25:a7:e7:06:e6:e4:88:
         0d:27:1d:4f:f0:d5:06:ae:78:e4:76:00:58:2b:0f:c0:67:f4:
         c1:16:aa:7a:b7:b7:50:af:33:4e:11:6c:0b:d9:74:15:1c:ad:
         49:e7:20:d0:13:60:ac:1f:9c:93:fe:13:21:b4:7d:bc:93:55:
         f8:cd:93:52:dc:22:46:4c:6b:ac:56:e4:9c:d0:98:9f:4b:77:
         97:5e:56:85:42:a6:68:3d:dc:16:36:b9:db:71:9f:0e:45:11:
         d6:28:b4:0a:da:89:fe:66:fd:d0:ba:60:89:b6:ea:08:a6:0e:
         7c:48:60:9b:ee:30:63:01:5b:64:45:20:23:5d:d8:3d:18:3e:
         58:e9:37:9b:14:1a:68:af:1b:f9:b9:45:46:bd:46:be:a0:ba:
         6e:4c:27:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:46:49 2026 by rpki-client