Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/1bd6267c-88b4-366f-8d58-856a3d5cb4f3.roa
File:                     1bd6267c-88b4-366f-8d58-856a3d5cb4f3.roa (raw, json)
Hash identifier:          U6vec7cYFvcwjZ6JLS74M1Rm86BRUwEzrEj4vO99V/M=
Subject key identifier:   1D:77:E9:0B:AB:B6:A4:49:B1:FB:C1:27:3C:B4:81:56:1E:41:EC:0C
Certificate issuer:       /CN=2b666ba7-a215-4f08-8204-c5b168b3360c
Certificate serial:       010D0C9F4328584E9A7FCDB7861458AF333470B0
Authority key identifier: AC:C3:A1:4F:EC:7D:26:06:8B:8A:E4:93:8D:2B:C6:45:EB:70:7F:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/1bd6267c-88b4-366f-8d58-856a3d5cb4f3.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     400255
IP address blocks:        207.167.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/2b666ba7-a215-4f08-8204-c5b168b3360c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/2b666ba7-a215-4f08-8204-c5b168b3360c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:cd:b7:86:14:58:af:33:34:70:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b666ba7-a215-4f08-8204-c5b168b3360c
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=f89bddb5-945c-4ac7-91b7-1cc6ca03ac5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d0:13:6b:60:04:22:23:d2:5e:50:7e:d8:08:
                    19:e7:7f:c5:4f:8c:83:5e:7b:ae:57:51:99:f2:4c:
                    d7:b0:64:85:22:47:5d:27:a1:2c:8a:f3:8b:05:47:
                    63:0d:2e:d8:b6:74:a4:bf:af:55:98:d6:a0:d3:6a:
                    6a:fa:9d:45:f4:6e:3c:21:07:95:15:a7:96:b6:f6:
                    ba:51:e5:01:ba:a6:97:da:ef:37:27:ea:61:ca:52:
                    9c:9c:74:64:fe:fe:dc:52:da:55:1e:c5:57:2a:85:
                    71:87:5b:d2:fb:b9:b2:90:f3:cc:ec:35:7c:24:27:
                    69:51:62:fc:29:31:42:56:75:e3:2c:73:0a:f4:7a:
                    b5:1b:26:3e:a7:eb:a0:14:59:13:df:21:54:60:d4:
                    1f:f3:2d:80:d3:c4:5d:f9:e3:c8:02:43:d8:04:92:
                    b6:09:8a:4f:fa:67:bf:6c:08:c9:49:32:cf:e2:a9:
                    ce:62:cf:e0:e7:d9:16:95:5c:e4:d3:d3:96:ec:95:
                    89:8d:5a:f7:94:ec:ce:35:9e:ad:6d:f2:01:a1:b1:
                    86:25:32:0c:83:6b:75:1e:de:b0:27:43:d1:dc:27:
                    f8:df:7f:ae:36:56:ec:22:64:5d:ad:7d:81:c3:ac:
                    0e:aa:89:76:75:d7:98:c9:fe:69:2d:c6:2b:2d:9d:
                    df:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:77:E9:0B:AB:B6:A4:49:B1:FB:C1:27:3C:B4:81:56:1E:41:EC:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/1bd6267c-88b4-366f-8d58-856a3d5cb4f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c/2b666ba7-a215-4f08-8204-c5b168b3360c.crl

            X509v3 Authority Key Identifier:
                keyid:AC:C3:A1:4F:EC:7D:26:06:8B:8A:E4:93:8D:2B:C6:45:EB:70:7F:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2b666ba7-a215-4f08-8204-c5b168b3360c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.167.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:e7:18:29:3f:03:53:8d:f0:62:71:d1:fb:80:97:37:d3:9c:
         33:50:f1:20:00:eb:a2:8f:e8:dc:6d:9c:0f:f5:89:bf:5e:b1:
         51:1a:ab:f9:30:16:c9:4d:d3:84:46:11:65:43:d0:90:88:67:
         7a:1a:13:54:50:1a:e7:4a:a5:7f:c1:f4:ef:34:f3:51:6d:94:
         2b:1a:16:b3:5e:f4:ec:26:9e:6f:3d:e4:74:79:3f:71:bf:da:
         39:01:8e:ea:0d:7a:5c:ca:fe:fb:9e:3a:17:f9:4a:98:8c:a8:
         f3:f8:90:f5:25:50:15:8b:f6:98:24:18:9d:a7:6d:7d:5c:81:
         4e:ed:13:ec:ad:f1:f2:44:a7:ba:bd:ab:dd:9a:25:ac:a3:b1:
         bb:c6:8b:81:52:65:33:02:f7:15:6c:9d:9e:bb:c2:d3:57:b8:
         4d:1c:85:3a:4d:d2:6f:22:bb:e0:1b:76:9c:70:94:b7:36:34:
         b5:cd:4e:6f:fa:ce:e0:31:4f:f3:31:a0:c5:0b:95:d0:82:79:
         01:95:09:e4:76:ba:9d:e8:bd:7f:e1:09:3e:1a:7c:07:0c:42:
         cd:03:38:c3:35:bf:90:69:c7:c2:3b:82:e8:92:71:16:21:8d:
         76:52:14:32:9e:fe:4f:c0:fd:61:89:27:81:cb:07:08:25:a5:
         75:ac:dd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:49:40 2026 by rpki-client