Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d8f8ecee-c105-436e-b6fb-b790b1ee2a7a/2bc6029b-e12d-3b08-9abe-cb97be630508.roa
File:                     2bc6029b-e12d-3b08-9abe-cb97be630508.roa (raw, json)
Hash identifier:          xdSf9H/yavo90IZHavhM5BmGDMvu8m8jKxQLMLZ5rbM=
Subject key identifier:   35:7F:21:1F:0D:19:17:46:70:34:FD:79:57:1C:55:93:54:E1:A8:15
Certificate issuer:       /CN=d8f8ecee-c105-436e-b6fb-b790b1ee2a7a
Certificate serial:       010D0C9F4328584E1E304C51C5CFDC1C5B555600
Authority key identifier: 15:8B:15:EE:23:42:F2:1E:AE:D1:41:CA:18:5A:FC:7D:C2:27:9E:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d8f8ecee-c105-436e-b6fb-b790b1ee2a7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d8f8ecee-c105-436e-b6fb-b790b1ee2a7a/2bc6029b-e12d-3b08-9abe-cb97be630508.roa
Signing time:             Tue 09 Jun 2026 20:20:05 +0000
ROA not before:           Tue 09 Jun 2026 20:20:05 +0000
ROA not after:            Mon 07 Sep 2026 20:20:05 +0000
asID:                     53347
IP address blocks:        167.142.107.0/24 maxlen: 24
                          207.32.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d8f8ecee-c105-436e-b6fb-b790b1ee2a7a/d8f8ecee-c105-436e-b6fb-b790b1ee2a7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d8f8ecee-c105-436e-b6fb-b790b1ee2a7a/d8f8ecee-c105-436e-b6fb-b790b1ee2a7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d8f8ecee-c105-436e-b6fb-b790b1ee2a7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:30:4c:51:c5:cf:dc:1c:5b:55:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8f8ecee-c105-436e-b6fb-b790b1ee2a7a
        Validity
            Not Before: Jun  9 20:20:05 2026 GMT
            Not After : Sep  7 20:20:05 2026 GMT
        Subject: CN=8c77ff06-f7c8-402a-9c54-87562b327787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a7:3c:f6:40:e9:ae:9e:3e:77:0b:57:7a:5a:
                    b6:22:7e:82:c3:69:c3:fc:ef:33:b7:70:a8:1b:63:
                    51:9c:42:9a:31:c4:83:ec:8e:3e:05:bb:86:58:70:
                    9e:d9:ab:b1:e4:69:46:d2:90:2f:f3:6d:c6:19:6d:
                    61:05:aa:1f:21:4a:6c:9f:b4:a7:bf:f7:0c:fd:20:
                    9a:f3:34:21:71:69:70:01:5e:7f:a6:48:97:4d:6b:
                    d4:66:1d:d4:4f:97:c8:8a:9d:1f:1f:05:a9:fd:e5:
                    6a:11:99:42:66:45:53:c9:0d:fc:0c:99:b8:8d:76:
                    56:2d:14:5b:d0:3e:1c:1d:79:44:62:bc:7d:db:18:
                    7f:72:fc:23:f6:5c:5b:9e:ee:d2:a2:78:63:c3:9f:
                    a9:36:68:1a:13:f5:1f:fe:cb:30:d8:3a:9f:d2:99:
                    6b:a6:d0:14:9d:2d:f9:a4:23:18:9d:d3:fb:dc:83:
                    be:5f:d0:c6:7d:ce:a3:30:56:0e:31:61:f9:18:0b:
                    11:38:5d:4c:9e:f2:82:05:fb:2c:93:e9:ac:84:d9:
                    46:a0:fc:a3:ff:1b:59:d4:fa:d6:f3:99:60:d2:ed:
                    9a:f3:e9:fc:33:0f:f4:3e:5b:69:61:53:03:15:a2:
                    00:1c:39:8e:f8:3f:73:1a:de:98:33:f8:d4:42:0f:
                    ee:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:7F:21:1F:0D:19:17:46:70:34:FD:79:57:1C:55:93:54:E1:A8:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d8f8ecee-c105-436e-b6fb-b790b1ee2a7a/2bc6029b-e12d-3b08-9abe-cb97be630508.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d8f8ecee-c105-436e-b6fb-b790b1ee2a7a/d8f8ecee-c105-436e-b6fb-b790b1ee2a7a.crl

            X509v3 Authority Key Identifier:
                keyid:15:8B:15:EE:23:42:F2:1E:AE:D1:41:CA:18:5A:FC:7D:C2:27:9E:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d8f8ecee-c105-436e-b6fb-b790b1ee2a7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.142.107.0/24
                  207.32.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:4a:b7:18:bb:53:20:d4:24:d0:cc:3a:86:d7:65:58:b5:8a:
         5e:ef:07:1b:84:7b:37:d8:c5:0a:69:d0:6e:11:c6:5f:be:23:
         89:52:24:2e:fe:bc:f7:56:04:ac:e0:76:dc:07:41:1f:cb:3b:
         52:ca:fb:fb:e4:e8:a1:2f:c5:fe:bd:4b:77:42:a8:4e:b2:1c:
         ca:4e:d6:e3:22:b0:d3:69:ed:07:c5:09:a0:4f:61:55:de:be:
         cc:91:85:d6:f1:b8:fb:4a:1e:a8:a2:45:36:20:75:99:33:66:
         24:7e:cd:65:3d:95:e2:37:40:47:62:08:e8:8b:b7:c2:69:f4:
         59:1a:0c:c7:45:8c:a9:85:a3:b9:a0:c1:69:d4:66:a9:33:56:
         b4:53:69:ee:c0:d1:83:e1:bf:81:e3:44:86:4c:ea:9b:cc:30:
         5d:86:6a:63:07:02:0f:23:ae:18:39:1d:be:13:1f:c0:66:98:
         48:ca:38:b0:48:b9:3c:ef:5f:0b:7b:f2:a2:15:23:3f:4e:4c:
         ba:b2:19:9a:60:2b:fe:c1:c9:79:9c:9c:ce:71:b6:d3:53:a0:
         b9:b6:a6:c2:4b:2c:2b:37:fd:56:e7:fb:cf:0d:cc:66:42:6d:
         32:d2:6e:d9:e7:58:9f:da:4a:00:d4:c1:cb:d2:3c:9b:41:42:
         60:80:a1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:12:34 2026 by rpki-client