Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/55c2d839-7ca8-307d-b945-a3cde6e3b1d1.roa
File:                     55c2d839-7ca8-307d-b945-a3cde6e3b1d1.roa (raw, json)
Hash identifier:          3Rp1ExAncYuZ5yaY/5cqkYvNcgWRc7Zp79M5gj28q4Q=
Subject key identifier:   D7:1A:0B:10:5A:33:9D:8B:FC:8E:D3:91:89:5B:DE:9F:06:AD:DA:45
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584E9A7FB30F0CA35801BEF76900
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/55c2d839-7ca8-307d-b945-a3cde6e3b1d1.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     7029
IP address blocks:        207.254.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:b3:0f:0c:a3:58:01:be:f7:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=35cbe9f4-f878-40be-a4e7-0e5c45b52e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5e:3c:76:0d:c5:96:d4:2b:e6:54:90:5a:e0:
                    1d:f6:44:05:bd:ac:bd:a7:df:d9:26:03:9f:e9:10:
                    ad:d7:26:e3:3a:2a:5d:3f:63:99:03:8d:ef:37:3b:
                    95:00:fc:90:62:59:17:c7:62:b6:10:a7:94:21:4d:
                    a0:c1:fd:b1:ef:42:c6:cb:7b:e4:60:19:a4:99:2a:
                    18:52:60:f9:a4:10:47:3a:e1:c4:83:15:e4:50:fc:
                    30:fa:27:01:53:b7:77:54:72:2f:ca:94:e2:4d:fc:
                    70:84:a9:06:26:2c:0b:33:fe:c6:a2:19:fa:4c:3d:
                    6c:0e:b3:39:f8:ed:c2:67:dd:de:81:0f:48:e5:45:
                    c8:95:73:9d:40:0a:4e:63:2e:ad:55:ed:2d:2a:01:
                    ac:45:f1:81:3a:29:c9:3b:ae:78:36:8a:41:93:6d:
                    35:f3:bb:0a:a3:d1:94:36:b6:0a:87:a0:e9:6c:f6:
                    95:7c:23:f3:6f:e3:6b:90:f2:39:fa:de:cc:ec:bd:
                    88:07:1a:05:8b:62:d7:10:83:79:32:73:4e:6a:d9:
                    2a:09:4c:7d:2f:db:fc:82:1c:13:c8:8d:01:3a:f3:
                    56:6b:56:8a:d9:4c:12:ea:24:29:cb:26:d7:a7:22:
                    38:ce:bf:12:7e:6e:83:b9:e8:f2:3d:00:30:b9:32:
                    c3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:1A:0B:10:5A:33:9D:8B:FC:8E:D3:91:89:5B:DE:9F:06:AD:DA:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/55c2d839-7ca8-307d-b945-a3cde6e3b1d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.254.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:e6:10:9c:91:a9:0b:7f:d2:2b:a6:96:85:5a:30:2a:9e:b8:
         a3:48:08:b9:42:3a:b3:c0:c7:b8:33:fc:aa:ed:7f:56:72:f9:
         63:77:5d:c1:9a:de:9d:4e:3f:69:d7:33:93:76:35:df:7a:4b:
         3f:9f:27:c4:3f:92:3c:dc:c2:ea:33:78:44:ae:fd:5f:3c:e7:
         a5:6a:e9:04:a5:56:9a:b1:19:1f:1f:eb:95:6c:41:db:82:c6:
         56:61:71:7f:aa:b3:a9:a6:bf:58:d8:4f:38:1c:c6:a6:51:87:
         7b:b3:d3:da:c5:ea:f0:b2:9c:4f:37:3b:6b:76:aa:c2:2b:5d:
         ed:e0:68:8c:ac:9b:12:d4:5c:8f:b2:fc:78:0f:a9:f9:62:58:
         59:9d:75:6e:ce:37:12:6d:26:be:c5:89:16:96:f6:1c:e9:2a:
         2e:27:a5:53:12:62:cc:17:ff:ac:61:9a:d0:dc:bc:40:a9:47:
         f4:f8:c7:dc:b9:27:42:62:d0:25:e4:34:1e:c6:04:42:45:01:
         21:fa:e3:54:3c:c5:34:cf:0a:ed:b4:eb:c2:d5:2c:ae:0d:19:
         07:f4:2f:b9:c5:21:4b:a1:4f:29:9a:5c:fe:5b:9a:c4:80:c0:
         34:3e:bf:2b:cf:b7:d7:d8:7b:3e:0a:fe:be:11:0f:e7:fc:53:
         9c:42:3d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:57:41 2026 by rpki-client