Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/7fc32d22-651e-3067-93d1-ce576e67cc21.roa
File:                     7fc32d22-651e-3067-93d1-ce576e67cc21.roa (raw, json)
Hash identifier:          hvWyu/LX7jGQj2RJWYDJkIRaCEj1rPAGNwqMdwNTrbE=
Subject key identifier:   61:7C:E4:9D:CE:BB:24:3C:0B:3E:84:93:F1:78:89:D5:9C:C2:11:8D
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F4328584EA7873B94EBCE9DF611D30000
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/7fc32d22-651e-3067-93d1-ce576e67cc21.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     109
IP address blocks:        204.69.200.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:3b:94:eb:ce:9d:f6:11:d3:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c98778ed-60ff-4ad4-ad78-13531d10c5d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:03:fd:88:ec:a3:ea:dc:58:29:40:7d:f7:75:
                    d4:00:14:37:5c:6d:0e:be:d2:d5:ce:d8:24:2e:6b:
                    89:97:cd:09:48:45:7a:1f:ef:0a:78:02:89:7c:bf:
                    da:db:db:9c:35:96:ba:0a:ed:20:6b:fe:6a:d6:0a:
                    0d:a8:ff:87:b9:1d:39:ef:a2:33:e8:42:e7:af:cd:
                    73:93:9b:9a:19:e8:ad:1e:d3:9c:a4:b9:c0:bb:87:
                    51:a3:31:50:58:61:2c:90:05:d7:c8:bc:0d:9c:5c:
                    9e:78:8d:00:b3:40:76:e7:3b:da:f8:63:ca:84:f9:
                    75:c5:22:f5:a1:61:98:8a:2f:2f:f6:c7:c0:c8:2c:
                    46:61:bc:4e:1d:8e:d1:07:09:ae:06:47:a4:b8:35:
                    9b:10:db:41:fd:07:0f:d0:e0:33:2d:64:bb:4c:eb:
                    b5:74:d3:2b:18:6b:01:d2:dc:4f:aa:34:88:b0:f0:
                    2c:de:4d:5a:c0:17:c4:a2:4a:f2:c1:47:15:b6:a0:
                    d0:60:b4:57:c6:4d:a3:f5:f2:68:09:d9:56:e2:98:
                    b4:7f:02:60:ca:49:a9:0b:ba:a7:08:7c:6a:b9:f7:
                    23:9c:85:08:8c:34:d3:73:ac:be:82:32:6e:99:06:
                    9f:89:38:e4:33:e2:42:4a:56:41:24:ce:80:c6:0c:
                    d2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:7C:E4:9D:CE:BB:24:3C:0B:3E:84:93:F1:78:89:D5:9C:C2:11:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/7fc32d22-651e-3067-93d1-ce576e67cc21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.69.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:e0:18:ac:e1:f4:00:09:6e:2f:f2:b1:89:cf:57:d8:56:ba:
         bc:f6:82:ce:af:da:e4:6e:dc:75:ff:4d:8a:b2:22:7a:b8:2c:
         61:e5:22:90:79:d4:bc:ae:8f:8f:21:26:c6:df:f3:b6:7a:cf:
         a2:2e:74:f8:59:77:1f:b9:8b:e1:cc:ae:ab:42:27:e7:61:63:
         51:f3:78:11:14:a2:cf:cd:69:85:93:da:33:f3:96:ac:fc:c1:
         4d:67:1c:b4:c9:bf:e3:51:92:23:da:24:1c:bd:57:a5:cc:85:
         1f:6b:5c:fb:3a:6d:40:f1:e0:fb:d4:30:46:0b:6f:95:17:e8:
         90:8e:1e:70:69:29:5e:b8:cc:15:e0:81:fa:8a:fd:46:c5:45:
         38:80:93:c6:8a:09:3b:6e:91:3b:2c:b5:07:f3:cf:8e:d4:9f:
         f8:a4:8a:d5:d9:51:35:96:ff:ee:64:07:eb:12:a2:aa:4a:42:
         f4:3a:72:bd:98:a0:19:bd:9c:e6:e7:58:aa:c1:69:55:0f:a1:
         05:f2:cf:e9:03:83:05:e1:15:d5:8f:bc:2e:a8:91:f4:92:ce:
         96:ab:c4:59:8d:13:91:52:60:a9:c2:d9:2b:aa:3f:89:de:59:
         db:25:a4:a6:06:61:09:f0:d1:91:f1:da:51:24:f6:dd:63:32:
         17:9f:56:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:04:37 2026 by rpki-client