Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/79ceed0b-2a70-3be2-9a97-ecf9b58f0e35.roa
File:                     79ceed0b-2a70-3be2-9a97-ecf9b58f0e35.roa (raw, json)
Hash identifier:          W9TjV+P+aa2WM0zWfKMWGX8cuzMQ5SCGcWA3jfYyCTI=
Subject key identifier:   85:EF:8B:A0:C9:9A:AD:21:47:CF:5B:E3:67:65:DB:6D:D0:D9:43:72
Certificate issuer:       /CN=c7504c4b-7514-464e-a79e-1f4b462c7e7c
Certificate serial:       010D0C9F4328584C8FA17E07204125E159DA7040
Authority key identifier: BD:B1:CF:BB:D1:DE:D3:95:B4:EF:EB:D8:1F:97:D9:B9:D7:DF:45:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/79ceed0b-2a70-3be2-9a97-ecf9b58f0e35.roa
Signing time:             Sun 18 Jan 2026 02:00:31 +0000
ROA not before:           Sun 18 Jan 2026 02:00:31 +0000
ROA not after:            Sat 18 Apr 2026 01:00:31 +0000
asID:                     46208
IP address blocks:        67.212.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/c7504c4b-7514-464e-a79e-1f4b462c7e7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/c7504c4b-7514-464e-a79e-1f4b462c7e7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:8f:a1:7e:07:20:41:25:e1:59:da:70:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7504c4b-7514-464e-a79e-1f4b462c7e7c
        Validity
            Not Before: Jan 18 02:00:31 2026 GMT
            Not After : Apr 18 01:00:31 2026 GMT
        Subject: CN=07f06d4e-e71c-43d9-bd10-52e7b2431082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c2:7f:9a:9d:91:b6:98:c6:72:b4:4b:f5:c1:
                    bf:7f:ae:11:95:2c:bd:e1:4b:4d:46:c8:88:f8:78:
                    b8:85:5f:a6:54:69:4d:c6:ae:0c:71:09:fc:64:fe:
                    09:01:93:bf:8d:f5:f1:80:77:f8:3b:c1:8d:89:f0:
                    db:65:56:0e:36:79:72:52:33:bc:2a:41:8b:f1:22:
                    e0:bf:38:ca:14:65:5a:2b:6f:2c:df:f9:fd:e6:d1:
                    1b:9c:c5:6f:42:37:68:b4:26:26:16:1e:a6:96:1b:
                    fa:5a:65:0c:b1:30:cf:9c:d6:99:8d:e3:c5:b6:8d:
                    e2:1a:26:a1:24:22:aa:29:80:ef:b0:a4:0f:b0:bc:
                    30:06:96:8d:42:f2:30:80:22:02:79:7f:d5:2a:48:
                    9a:58:d6:84:72:79:1b:76:38:39:8c:ce:1a:a9:8d:
                    e5:c6:0a:3e:a8:0f:ca:6d:15:47:77:9b:80:af:e1:
                    78:2a:58:8c:87:13:1d:a6:0a:f0:5f:12:19:25:4f:
                    26:f3:85:e5:0f:c9:aa:36:e9:70:ce:27:fe:73:90:
                    f2:e2:2f:5f:ea:6b:5f:05:d6:58:4f:aa:6c:d3:63:
                    2e:7c:8b:d5:e3:34:d3:37:a8:36:45:b6:02:9b:b9:
                    d5:df:0d:ac:04:0e:45:0c:75:b5:0e:eb:32:53:a9:
                    0e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:EF:8B:A0:C9:9A:AD:21:47:CF:5B:E3:67:65:DB:6D:D0:D9:43:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/79ceed0b-2a70-3be2-9a97-ecf9b58f0e35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/c7504c4b-7514-464e-a79e-1f4b462c7e7c.crl

            X509v3 Authority Key Identifier:
                keyid:BD:B1:CF:BB:D1:DE:D3:95:B4:EF:EB:D8:1F:97:D9:B9:D7:DF:45:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.212.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:d2:ae:1b:0f:92:00:b7:0f:8c:2e:a8:a0:4f:9b:13:a8:79:
         43:11:85:e0:b0:82:70:30:b4:ee:40:0a:ba:04:5f:50:a8:68:
         74:b4:e5:84:ac:72:65:61:29:71:a4:42:62:63:69:6e:ed:dc:
         da:ee:ce:25:2a:cf:7e:0a:49:c0:8f:1e:6e:f5:25:00:fb:c9:
         c7:94:8d:1d:8c:bf:0f:89:52:4e:59:30:3e:cf:1e:b0:18:2f:
         a3:5a:62:bf:09:fa:ac:eb:fb:7f:c0:e5:e1:7a:7e:ce:d5:91:
         e6:e7:80:9f:12:35:a3:37:a1:08:95:72:a5:ca:c6:31:2d:c0:
         22:e7:7d:58:b0:15:c1:fe:ba:2b:6f:e1:50:ea:44:bc:1e:63:
         df:ea:f8:5b:70:1c:52:4e:97:dc:e3:f5:96:21:ae:5b:25:88:
         de:96:bd:f1:58:ff:81:7f:da:60:b1:e4:22:88:71:ea:42:ce:
         d2:7b:35:e6:58:5d:94:47:42:ea:69:ed:92:18:20:ec:81:46:
         ef:93:52:69:76:85:5e:47:da:cc:23:ac:56:99:1d:d3:21:f1:
         2d:b1:b9:a2:c9:c1:6c:e8:1a:13:43:16:b9:d3:89:6a:79:d0:
         00:ee:d9:30:2a:eb:30:b0:50:28:d3:20:d7:62:0c:be:b8:10:
         13:85:9e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:06:41 2026 by rpki-client