Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/528af9b3-2bf6-317c-94a5-c8fe507fd519.roa
File:                     528af9b3-2bf6-317c-94a5-c8fe507fd519.roa (raw, json)
Hash identifier:          53zl9myx1ts/DyvlfjBnYOsu2ygqNs3Fj1/WgDOmuxM=
Subject key identifier:   67:7C:A2:90:A0:13:B8:77:CC:C2:7E:D4:5C:65:30:DA:1A:0A:7F:5B
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584EA797F283CCC8143B269B9300
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/528af9b3-2bf6-317c-94a5-c8fe507fd519.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     852
IP address blocks:        207.102.132.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:f2:83:cc:c8:14:3b:26:9b:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=de075aea-052e-4a53-b158-0fbe10e77527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0c:01:98:ef:34:52:82:b4:18:43:74:a4:5b:
                    0b:9d:fe:46:f0:a0:fa:22:bd:0c:53:5e:5f:75:86:
                    dd:1a:ee:4a:91:83:53:f6:8f:c5:29:6d:3e:ff:be:
                    15:60:8f:b4:8e:16:26:b0:6d:e2:76:72:7c:e9:fb:
                    c8:00:94:dd:62:9a:b2:b2:bb:9a:06:15:df:31:44:
                    97:12:f1:ff:b3:52:2c:c9:7b:0b:a7:0c:a0:fd:48:
                    ac:73:b8:0f:5a:70:e7:f9:d7:c3:36:ac:b6:16:89:
                    5a:74:86:cd:3c:b5:0a:bb:ad:0f:ed:fd:29:5d:55:
                    ef:32:df:d6:77:76:84:a3:ab:4a:dd:a6:55:88:d1:
                    5a:f6:9b:cd:fd:b5:d3:2e:0c:cb:40:10:90:ce:ab:
                    a7:cc:09:05:61:d3:5b:f0:86:36:94:c1:ea:b8:4c:
                    c1:cc:83:cb:ab:73:e6:86:bb:d1:db:09:9e:46:a9:
                    46:1d:d4:2c:60:11:30:af:19:35:a3:2c:1a:c1:77:
                    91:63:8f:28:fa:a9:65:71:06:11:95:75:82:f1:13:
                    ce:73:0a:50:15:55:b8:f3:c9:0c:be:d6:52:4e:d8:
                    9d:94:66:bf:c6:b0:5f:e4:98:9c:30:f2:0d:cb:9d:
                    0b:8f:30:dc:98:26:30:d6:68:14:40:4f:72:7f:2e:
                    14:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:7C:A2:90:A0:13:B8:77:CC:C2:7E:D4:5C:65:30:DA:1A:0A:7F:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/528af9b3-2bf6-317c-94a5-c8fe507fd519.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.102.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:61:60:da:ca:a6:ea:bf:12:a4:7c:fe:33:cd:5d:eb:06:cd:
         2b:5d:1b:8d:df:cf:19:c9:b3:dd:ee:72:fd:a8:c5:a6:65:b1:
         ed:4b:37:d4:89:7a:50:70:4f:16:08:33:d1:9e:b0:81:71:6e:
         72:96:3f:87:f0:ec:1d:c0:86:29:c9:1e:15:56:36:3c:36:02:
         54:9e:f7:bd:ff:56:64:d1:ab:e7:c5:e8:9b:69:0f:40:ec:03:
         f7:2f:ca:d7:b4:71:bd:be:e7:f6:94:a6:9d:3d:7d:e5:93:6b:
         b6:91:c8:fe:ea:0d:8d:5e:9f:40:9c:20:87:33:07:ab:59:97:
         4d:dc:47:e5:99:87:61:65:3c:28:d7:35:59:9b:02:6b:5d:b1:
         61:94:39:9f:5e:92:cd:0e:c4:03:f6:8b:99:8b:37:31:2c:11:
         fc:22:17:4d:07:c2:0e:0e:2f:51:dc:4d:4d:0e:f8:0f:94:49:
         7a:80:93:0b:66:7b:06:40:3f:a7:a0:9c:e4:ff:44:58:34:62:
         cb:4a:d3:71:f1:8a:6b:0f:54:47:c7:c9:8f:64:37:c2:50:5b:
         f2:61:00:17:05:6e:0c:1f:6d:8a:30:f7:ae:a4:b8:87:07:ca:
         4c:9b:ea:8f:dc:8f:23:9d:a1:65:38:1e:6f:2c:c4:04:35:19:
         90:89:bf:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:02:46 2026 by rpki-client