Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/826ab303-5f30-342d-91ae-d20393f81fa2.roa
File:                     826ab303-5f30-342d-91ae-d20393f81fa2.roa (raw, json)
Hash identifier:          cLzXFrwDS9PwdWgwX5pf312BQrWpAeJfPBgvltHYmQ4=
Subject key identifier:   18:BE:CC:FE:27:3C:2D:D3:E6:C2:7B:FA:E2:67:31:EF:F7:91:A9:7D
Certificate issuer:       /CN=4a81e924-7e18-4312-95fd-09d6d0b08bce
Certificate serial:       010D0C9F4328584E1FA9A86C3CB133AA96CBF8E0
Authority key identifier: 33:97:1D:92:B7:90:2A:45:99:91:58:D6:D6:F9:0C:FA:A5:76:46:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/826ab303-5f30-342d-91ae-d20393f81fa2.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     33099
IP address blocks:        207.167.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/4a81e924-7e18-4312-95fd-09d6d0b08bce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/4a81e924-7e18-4312-95fd-09d6d0b08bce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:a8:6c:3c:b1:33:aa:96:cb:f8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a81e924-7e18-4312-95fd-09d6d0b08bce
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=5df1ae03-6186-453d-b18b-24dfa1f5a91d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:89:5f:23:40:fa:7f:b6:a6:5c:c5:6a:77:62:
                    92:9d:82:b2:99:f2:36:6d:dc:b0:74:5f:a1:b6:1b:
                    14:82:73:aa:78:d3:06:ce:3c:86:ff:46:80:39:0a:
                    6c:3f:2a:72:52:97:6c:5b:60:2a:89:ee:7a:0d:99:
                    7b:73:9e:54:c4:18:e5:fa:d1:e6:d6:77:c7:76:7a:
                    b1:51:1e:c4:53:f7:22:6e:ad:da:fd:92:f9:76:d9:
                    39:32:93:1b:20:96:82:67:e9:cb:ca:d0:a3:d2:ac:
                    03:d5:1a:38:3b:bd:f5:99:a6:28:5f:b0:10:eb:7f:
                    8b:99:5a:b8:b1:be:92:73:f0:d6:fe:90:5c:ee:26:
                    a7:21:eb:87:0e:11:00:2d:0d:8e:33:65:e1:9d:f2:
                    24:d0:51:3f:f9:58:69:d5:2d:81:8e:7a:e7:da:ba:
                    5a:de:40:c5:5f:de:26:d1:f8:95:81:b0:5f:59:ac:
                    36:10:4d:f7:f3:79:22:15:4c:0e:12:dc:6e:bf:75:
                    bb:3c:2a:7a:77:d7:fc:97:d2:79:ed:0f:1f:de:a7:
                    a4:77:a9:ee:38:0d:15:28:63:75:ea:17:5b:62:3c:
                    1b:1a:3e:d5:9f:66:39:f9:4b:0b:6e:c1:be:58:58:
                    02:62:3a:5d:11:da:68:77:ea:12:c0:25:51:7b:98:
                    15:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:BE:CC:FE:27:3C:2D:D3:E6:C2:7B:FA:E2:67:31:EF:F7:91:A9:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/826ab303-5f30-342d-91ae-d20393f81fa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/4a81e924-7e18-4312-95fd-09d6d0b08bce.crl

            X509v3 Authority Key Identifier:
                keyid:33:97:1D:92:B7:90:2A:45:99:91:58:D6:D6:F9:0C:FA:A5:76:46:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.167.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:f2:c4:ac:14:24:38:18:6e:ea:d0:68:bc:32:65:ad:f7:db:
         c4:67:b9:ef:bc:8b:7d:06:1b:c4:8c:05:f0:e6:2a:33:7a:ac:
         18:14:64:fc:81:f9:86:85:1a:75:15:35:f4:d5:fd:d3:b2:33:
         89:00:dd:5d:0c:9e:ae:13:fc:71:cb:53:ed:e4:4c:ab:86:48:
         e7:2c:df:ee:b4:3f:41:63:d3:1a:01:ca:f4:62:26:d6:f4:88:
         cc:7f:ea:8d:86:85:49:87:3c:c8:f7:b3:0a:cc:c2:69:a0:63:
         bc:df:5f:4c:16:f9:a1:d1:0e:c7:b1:9b:1b:ac:93:9f:e9:72:
         ac:70:8f:b7:b7:93:88:8d:68:90:74:b9:89:29:cd:57:9a:e1:
         b7:d4:cf:80:7c:95:3d:96:35:b9:31:c5:31:41:5e:9b:cd:4c:
         6c:58:7b:6a:d6:5c:1e:3b:d8:ed:9a:60:90:f9:6e:44:31:fd:
         b3:30:f6:ce:61:90:b6:cd:d3:ab:1d:74:39:46:f8:e7:d5:20:
         5b:d7:95:e6:9e:41:5d:24:a4:dd:d2:57:06:b6:ef:f2:23:85:
         4e:f9:44:70:5d:30:1b:05:40:d3:d6:82:dd:e1:a2:c9:3c:c6:
         20:01:0c:69:76:3d:84:d3:9a:16:e6:bf:ee:30:6c:86:e6:66:
         28:c0:dc:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:13:41 2026 by rpki-client