Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/1baf8043-64be-3f81-a3f9-af7094d4a52b.roa
File:                     1baf8043-64be-3f81-a3f9-af7094d4a52b.roa (raw, json)
Hash identifier:          DuEbLrXjbfX7ybkU4TaOgnMNn8Y0PypUHyIjpR2wuwI=
Subject key identifier:   49:E5:2C:FC:B8:59:72:5D:D4:FE:A7:DB:42:0C:0A:24:71:08:EA:36
Certificate issuer:       /CN=69686900-f201-4b2c-a1c7-afb725abe47f
Certificate serial:       010D0C9F4328584EA7999A74F3E772A2ACB2C300
Authority key identifier: 46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/1baf8043-64be-3f81-a3f9-af7094d4a52b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     401095
IP address blocks:        207.173.40.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:9a:74:f3:e7:72:a2:ac:b2:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69686900-f201-4b2c-a1c7-afb725abe47f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=5b1ab6d9-12c0-4202-b004-f2c6dc1a07c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c6:7b:23:2a:c7:5e:76:41:25:2c:57:e0:b5:
                    cb:7c:35:14:a7:cd:41:87:a8:f4:80:27:65:50:38:
                    78:95:8b:d8:d1:65:4a:4a:2e:2f:0c:f9:8d:54:cb:
                    ab:73:5d:56:10:d4:c2:e7:8c:31:4a:75:de:b2:ac:
                    fa:04:cf:b3:52:64:d8:6d:52:2a:36:51:63:48:eb:
                    c0:3e:1b:d5:2f:81:3d:8c:6f:2f:3d:79:4f:12:f5:
                    a7:a7:ae:b1:f2:09:b2:94:9a:1c:b2:ba:77:92:78:
                    92:2b:d8:4c:ac:4a:90:61:c0:33:ed:ac:ae:ef:89:
                    42:39:7b:97:e1:a7:32:dd:e0:23:b6:14:75:c1:d2:
                    c9:53:69:1f:a5:24:67:08:b0:1b:78:43:b7:2b:e7:
                    99:3a:06:5d:2a:ec:2f:f3:43:6a:ee:df:80:7d:6d:
                    65:bb:3e:59:5f:67:4a:30:1a:69:f4:20:c5:57:bb:
                    c5:c7:1b:3f:b5:47:f3:15:14:b9:2d:8f:0d:2a:04:
                    3c:e3:13:b6:0b:88:8f:2c:ca:20:d3:56:55:f4:47:
                    60:b9:ac:24:74:13:08:72:b1:87:b1:58:0d:89:c3:
                    79:ef:13:70:68:27:0a:dd:c4:66:3b:9f:f0:80:22:
                    51:e2:db:8c:71:b4:7f:91:a9:b0:0c:4b:96:df:d8:
                    66:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E5:2C:FC:B8:59:72:5D:D4:FE:A7:DB:42:0C:0A:24:71:08:EA:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/1baf8043-64be-3f81-a3f9-af7094d4a52b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f/69686900-f201-4b2c-a1c7-afb725abe47f.crl

            X509v3 Authority Key Identifier:
                keyid:46:CD:B7:E7:87:A9:20:32:5B:E6:E3:AA:56:58:59:CC:00:57:84:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69686900-f201-4b2c-a1c7-afb725abe47f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.173.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:1a:72:50:5d:34:23:64:e0:3c:ff:ea:22:a7:83:dc:88:4b:
         b3:dc:72:03:d2:1b:bd:99:50:2e:d9:c3:d0:e1:4d:90:b0:4e:
         cc:5e:f7:c5:a1:4c:fe:8d:b1:03:26:0f:50:d4:23:7f:94:6e:
         e7:d1:76:37:99:9f:f3:e5:b7:78:24:e7:d0:38:ba:e9:b3:36:
         c5:46:64:e8:a4:d6:e2:78:9c:28:37:55:04:95:55:b8:b6:bf:
         72:df:5a:6f:32:e5:07:c7:70:7a:a9:56:56:89:f1:08:30:f2:
         85:45:bf:17:84:3d:c0:d0:b9:bc:61:36:b7:3d:05:19:52:b7:
         71:b2:9b:e9:b6:c6:84:b5:39:67:ff:9d:dd:c1:bd:09:71:02:
         e1:7b:56:39:df:f2:9a:47:56:58:9d:24:a1:5d:47:08:cf:3b:
         a4:f5:cc:61:ac:b9:20:06:aa:d2:cc:90:95:b7:8c:7d:ba:7f:
         18:08:98:2e:ad:b8:4d:cc:2a:f1:d6:9b:5a:22:d8:8f:7e:b3:
         86:4e:2e:f8:f0:92:df:aa:60:f2:38:e6:9a:67:f9:5d:5c:19:
         0d:b3:e7:31:db:1a:d4:ff:f3:65:db:89:f7:60:fb:0b:94:03:
         67:9f:b3:71:99:c2:9a:95:6a:fa:72:bd:4d:c4:b4:44:3c:2b:
         4d:c0:36:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:13:50 2026 by rpki-client