Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8/dc70f367-9509-3c8a-9588-e15056e22ab2.roa
File:                     dc70f367-9509-3c8a-9588-e15056e22ab2.roa (raw, json)
Hash identifier:          GhlvPchNMGLxhonU3qXKhWWBqImyEN1Q+F0NOndAunI=
Subject key identifier:   FF:1E:E6:97:78:C2:F7:68:C7:FC:65:84:9C:FE:C1:44:F3:B1:A7:11
Certificate issuer:       /CN=c7b9cd73-4753-42b2-a13f-2213f0bfe4f8
Certificate serial:       010D0C9F4328584E9D88E3C3C9686BEF5D731D00
Authority key identifier: A8:15:D6:9B:2D:72:3E:B8:83:15:9A:96:34:2C:FF:91:2A:0B:3F:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8/dc70f367-9509-3c8a-9588-e15056e22ab2.roa
Signing time:             Sat 25 Jul 2026 11:06:14 +0000
ROA not before:           Sat 25 Jul 2026 11:06:14 +0000
ROA not after:            Fri 23 Oct 2026 11:06:14 +0000
asID:                     4867
IP address blocks:        174.136.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:88:e3:c3:c9:68:6b:ef:5d:73:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7b9cd73-4753-42b2-a13f-2213f0bfe4f8
        Validity
            Not Before: Jul 25 11:06:14 2026 GMT
            Not After : Oct 23 11:06:14 2026 GMT
        Subject: CN=667606ec-2d82-4760-987e-c78e35050512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9a:78:5d:70:3d:c1:20:18:ba:e4:f4:b4:0d:
                    d7:df:a7:23:36:44:ea:e5:b6:4a:dd:33:ef:b2:43:
                    c7:20:08:78:a3:aa:83:10:e5:71:c3:66:5e:74:1f:
                    56:24:7f:4f:23:a5:f5:f0:fd:31:71:cc:05:59:55:
                    c7:5c:0a:72:ee:db:8d:12:b2:7b:0b:16:a6:95:b0:
                    09:8e:6a:d7:20:59:44:57:22:4c:41:01:dc:7d:7e:
                    ca:5a:ce:e1:bd:bc:af:31:0e:5f:4e:1c:e3:cd:08:
                    d6:f3:44:75:e8:fb:b8:2f:13:70:af:97:98:66:d9:
                    46:6d:aa:0b:26:ff:35:0f:db:6e:ad:b0:d3:b2:7e:
                    76:75:fd:d2:bb:92:2e:43:c7:f5:5a:a9:5b:a9:cd:
                    46:27:4e:26:61:4a:a7:df:74:43:b9:77:e4:88:7c:
                    43:12:19:74:20:3d:48:fd:0c:b6:5b:09:86:3f:9e:
                    3c:37:9e:43:be:60:45:34:e6:71:fa:aa:4e:51:40:
                    11:b8:a5:98:2a:7f:94:65:c3:d8:97:97:e8:e4:ed:
                    d0:7d:1e:98:7d:b3:12:30:0e:68:4a:d7:e0:28:e9:
                    96:fc:ec:82:8e:6e:c5:a0:43:01:60:b8:15:14:a3:
                    c2:73:d9:12:ac:82:4d:19:e1:86:e7:89:ac:f9:4c:
                    ce:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:1E:E6:97:78:C2:F7:68:C7:FC:65:84:9C:FE:C1:44:F3:B1:A7:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8/dc70f367-9509-3c8a-9588-e15056e22ab2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8.crl

            X509v3 Authority Key Identifier:
                keyid:A8:15:D6:9B:2D:72:3E:B8:83:15:9A:96:34:2C:FF:91:2A:0B:3F:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/c7b9cd73-4753-42b2-a13f-2213f0bfe4f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.136.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:89:39:87:71:ef:92:b3:bc:fc:06:5b:90:21:ba:94:3d:56:
         ce:ed:52:be:86:c8:49:48:86:db:5d:f7:ab:01:9c:3e:e2:6c:
         90:da:3e:42:9f:0a:54:e8:16:e2:93:c1:4d:66:97:47:e7:7a:
         5a:e1:c8:26:07:5a:fb:7f:2c:55:96:cd:6b:ab:8c:14:da:22:
         3b:0b:a7:c1:7c:a4:87:00:02:b7:c0:19:c3:c2:fc:e9:b3:10:
         63:8f:08:e5:22:10:43:5a:27:41:27:9b:fc:75:ea:f0:ca:9e:
         2c:30:f8:cd:3c:c8:ae:74:9f:55:fd:aa:54:59:11:72:c5:e2:
         68:7c:72:91:6f:44:1e:4c:45:29:00:e7:c4:13:59:a3:d0:ac:
         db:52:21:cc:3f:b7:78:10:34:26:1b:31:42:e6:49:b5:cb:1c:
         23:d3:8a:9e:ef:7c:2c:b2:bb:dc:89:9e:a5:c1:e7:ba:a0:ca:
         3a:67:bf:1f:47:47:5c:09:88:01:8c:20:21:e2:c4:5f:6b:44:
         87:36:64:39:7e:b7:41:46:c1:f1:72:76:41:26:6c:7b:de:bd:
         0f:d0:aa:e4:7e:36:40:1f:06:2b:73:8a:fd:d9:82:8d:ac:48:
         18:c8:9c:d1:4b:ca:94:81:38:7e:56:f7:dd:e7:0f:8b:cf:fc:
         a0:dd:d0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:44:56 2026 by rpki-client