Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695/c7ef6635-3aa2-3ef5-97ed-1e7b1a32b493.roa
File:                     c7ef6635-3aa2-3ef5-97ed-1e7b1a32b493.roa (raw, json)
Hash identifier:          GW50TPHR1vglBfETseP8B7WrgLXXs4HpgvWqAVoZ6og=
Subject key identifier:   2E:FE:E6:72:2F:34:EC:65:CB:EA:0D:E1:46:F5:81:39:3E:71:A1:02
Certificate issuer:       /CN=37cfb708-8bc0-4a74-971e-28d677315695
Certificate serial:       010D0C9F4328584EED52458031CDC6DAF1133080
Authority key identifier: AD:56:82:21:E8:9F:5E:3B:60:94:2F:89:79:58:A0:E6:12:08:E8:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695/c7ef6635-3aa2-3ef5-97ed-1e7b1a32b493.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     395439
IP address blocks:        209.204.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695/37cfb708-8bc0-4a74-971e-28d677315695.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695/37cfb708-8bc0-4a74-971e-28d677315695.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:45:80:31:cd:c6:da:f1:13:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37cfb708-8bc0-4a74-971e-28d677315695
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=f7af582f-523e-4201-9351-c7f1506db5fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3a:a4:23:1a:1b:29:09:26:f5:0e:af:b6:f7:
                    b4:e3:47:d2:c6:9d:b9:ac:30:b5:c9:dc:c7:e7:37:
                    70:28:30:0e:b6:b5:24:d1:f5:39:6b:21:f7:32:d9:
                    32:f4:56:43:9c:d6:96:bf:a0:ef:dc:73:52:46:80:
                    8c:80:04:da:a8:ec:0e:e7:15:bd:00:ed:52:52:82:
                    7e:06:7b:71:c9:4e:6b:85:5c:9c:51:df:e4:a4:e6:
                    d4:46:e9:9d:c8:c3:b2:95:d1:07:91:0d:5b:ab:12:
                    f2:8c:99:29:b5:df:7f:79:5e:24:05:ff:5e:7a:69:
                    ce:ca:28:6b:ce:42:8a:c2:ae:a0:3b:a8:a0:74:84:
                    14:da:89:bc:ea:d9:38:c4:a2:b3:14:2e:ff:8e:61:
                    34:f9:43:a8:0a:a5:34:71:d3:a8:a4:92:2d:97:16:
                    ac:d0:e2:7f:5c:c0:08:97:f8:78:75:1d:ba:00:ea:
                    7a:f1:9c:90:b1:3a:36:c5:24:ea:2a:a4:27:08:b6:
                    30:4b:1d:ee:31:1b:01:1f:0f:a3:70:a7:ad:98:b6:
                    28:2d:3e:9d:c0:b4:97:fc:bc:ca:58:37:9b:74:ea:
                    c8:69:bd:b2:3c:98:8a:86:3f:3c:8e:7a:12:e3:cd:
                    69:0d:f9:b4:e3:13:e5:ea:5a:ea:61:b5:5a:36:07:
                    a9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:FE:E6:72:2F:34:EC:65:CB:EA:0D:E1:46:F5:81:39:3E:71:A1:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695/c7ef6635-3aa2-3ef5-97ed-1e7b1a32b493.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695/37cfb708-8bc0-4a74-971e-28d677315695.crl

            X509v3 Authority Key Identifier:
                keyid:AD:56:82:21:E8:9F:5E:3B:60:94:2F:89:79:58:A0:E6:12:08:E8:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/37cfb708-8bc0-4a74-971e-28d677315695.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.204.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:96:13:25:03:f8:ce:9d:8b:2d:c2:62:13:fe:44:22:c5:86:
         25:b4:c8:c8:5c:8d:7f:36:4c:76:28:59:5d:ea:e8:c9:e7:1d:
         ab:3c:f9:8a:f6:f9:c8:66:4b:98:55:67:c8:32:3f:1f:39:91:
         0f:4f:6a:d5:13:c6:ef:dc:b9:14:2e:ce:5b:2d:ca:30:34:0b:
         1b:2d:9e:04:00:26:b1:22:65:58:bc:ae:ab:d0:13:cf:56:ff:
         d1:ac:53:0d:3a:07:d7:15:cc:ba:34:c9:1d:de:0e:cb:ad:63:
         f0:84:e3:46:b4:9e:59:20:d3:84:65:ce:cc:5f:96:bd:ea:2c:
         55:f6:2f:1c:58:6b:ee:74:fd:ae:fc:f1:72:57:97:5f:a3:5d:
         32:5b:ab:78:84:62:18:61:7e:34:c8:57:7f:e5:f2:45:aa:e4:
         ac:1a:6a:2d:f8:6a:e3:b2:e4:79:25:57:ae:90:e4:0b:66:4f:
         53:ee:7f:de:05:4d:0c:ad:ee:16:62:dc:61:b2:d8:ce:6d:db:
         37:45:9f:26:41:e1:07:41:71:ed:bc:98:2a:0f:0d:a7:8e:43:
         f3:e5:a0:6a:61:dc:c7:05:9a:c9:88:4c:b0:ce:0c:a6:87:30:
         76:ef:da:ef:6b:14:d2:76:eb:7c:40:d3:79:35:bc:40:02:78:
         44:c3:a8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:40:06 2026 by rpki-client