Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/9ecd159a-1f96-32de-b9d1-11893c413104.roa
File:                     9ecd159a-1f96-32de-b9d1-11893c413104.roa (raw, json)
Hash identifier:          R6+eBf4TDjnUfqjOlhf0iLnxciwbX12KK2k6sFM1478=
Subject key identifier:   32:B3:6D:EB:7D:36:6B:B6:D5:29:BB:E3:E8:23:DF:86:C7:7C:48:05
Certificate issuer:       /CN=10fde7ec-a369-497a-a493-87b3e2e08143
Certificate serial:       010D0C9F4328584E18AEEF3C157473DD2A390F40
Authority key identifier: 3D:EC:41:DF:B8:67:D6:9F:63:8A:F7:EB:1D:A8:78:91:98:4A:A4:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/9ecd159a-1f96-32de-b9d1-11893c413104.roa
Signing time:             Sun 07 Jun 2026 21:00:12 +0000
ROA not before:           Sun 07 Jun 2026 21:00:12 +0000
ROA not after:            Sat 05 Sep 2026 21:00:12 +0000
asID:                     397606
IP address blocks:        207.174.68.0/22 maxlen: 24
                          216.152.68.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/10fde7ec-a369-497a-a493-87b3e2e08143.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/10fde7ec-a369-497a-a493-87b3e2e08143.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:18:ae:ef:3c:15:74:73:dd:2a:39:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10fde7ec-a369-497a-a493-87b3e2e08143
        Validity
            Not Before: Jun  7 21:00:12 2026 GMT
            Not After : Sep  5 21:00:12 2026 GMT
        Subject: CN=41c1a5cb-35bb-463a-afb8-4ff95c8798e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7a:a8:8a:a4:ae:4f:dd:08:6d:53:41:0f:4a:
                    00:8b:ee:e7:2c:37:a3:9a:88:c9:ff:53:7b:f6:13:
                    b4:15:9e:63:7e:b8:a2:f3:b8:53:c1:5f:a0:ab:dd:
                    c8:92:20:6c:32:e8:dc:7b:26:6f:aa:bd:8e:82:95:
                    e1:e2:95:d4:b5:e3:0b:73:0b:73:91:00:b7:20:ab:
                    fd:61:d7:ad:85:ae:29:ed:5e:b2:22:e8:71:dc:94:
                    68:93:99:2c:9b:d1:e5:65:9f:25:63:ec:7d:32:fb:
                    8d:f0:8b:54:3f:f5:f4:28:aa:89:ca:c0:4a:18:95:
                    b9:01:37:e1:22:32:37:70:98:21:7c:83:ac:f6:2e:
                    db:80:4b:f8:b6:42:7c:22:b6:1f:05:cc:d3:a2:da:
                    ef:70:d7:46:10:70:0d:6a:ef:5c:25:0e:51:93:10:
                    51:4f:9f:a3:76:94:f5:ac:f7:81:39:43:ab:76:21:
                    c6:7b:29:01:13:a9:51:e5:2c:6b:b7:ac:3b:4b:a8:
                    8b:0a:2c:a4:56:91:6b:ec:7a:3b:26:0c:62:c8:7c:
                    2b:94:16:69:8f:80:a6:2b:ae:1c:68:52:52:6d:54:
                    83:12:5d:a1:24:71:f5:82:7d:c8:36:f2:a7:1b:69:
                    ed:6e:89:95:29:a3:83:eb:5c:ab:0d:43:4b:d2:fe:
                    d3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B3:6D:EB:7D:36:6B:B6:D5:29:BB:E3:E8:23:DF:86:C7:7C:48:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/9ecd159a-1f96-32de-b9d1-11893c413104.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143/10fde7ec-a369-497a-a493-87b3e2e08143.crl

            X509v3 Authority Key Identifier:
                keyid:3D:EC:41:DF:B8:67:D6:9F:63:8A:F7:EB:1D:A8:78:91:98:4A:A4:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/10fde7ec-a369-497a-a493-87b3e2e08143.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.68.0/22
                  216.152.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:fc:b3:71:54:a0:71:f7:08:a1:9b:79:52:8a:2b:19:25:77:
         3f:86:14:43:08:4d:df:90:ee:1b:6f:11:0d:d9:a2:76:e1:e9:
         84:f7:7e:c3:02:40:de:c1:27:7b:ba:8a:ab:b7:0c:eb:db:6b:
         d5:44:3f:85:88:ad:0a:d3:d4:5b:c6:56:93:f2:b3:b4:9c:a1:
         d0:66:dd:2e:4c:ab:e9:60:f3:b4:80:6e:99:6f:50:ea:fc:5f:
         38:7c:bd:de:a4:76:d0:e7:41:32:d3:5a:ba:c5:dc:ec:47:79:
         0d:35:53:f8:2c:f9:d1:5f:2b:95:fd:43:f1:0c:f4:3a:8c:bb:
         ab:71:75:3d:eb:a0:cc:03:33:15:f7:17:7e:a4:1b:71:99:f6:
         ae:82:cb:59:f0:cf:ed:40:0b:b3:1d:f6:37:5c:ba:a6:75:eb:
         f0:8e:9f:3b:65:1b:77:2c:f7:ea:a6:90:dc:0c:d3:53:aa:42:
         e3:43:23:68:1a:d1:a8:d0:1d:61:de:d2:a7:30:18:eb:1b:d2:
         46:21:e6:3d:2e:e2:d6:d5:dc:c4:20:d2:ae:0d:9c:ca:3f:11:
         ff:9b:83:52:a0:dc:0f:c4:3e:d1:69:10:58:d9:47:a1:31:a3:
         f8:ae:f3:5f:fd:d0:9c:94:e9:8d:bf:b1:16:a8:12:ed:d6:24:
         d8:c8:27:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:35:44 2026 by rpki-client