Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/d096047a-9fa5-3441-a949-ac54a874b69a.roa
File:                     d096047a-9fa5-3441-a949-ac54a874b69a.roa (raw, json)
Hash identifier:          1TCmabeSN7Ti7tXRiDvY+VgEqKZrFVsDuohx6078wZk=
Subject key identifier:   3D:27:A6:A4:72:11:43:9D:D9:22:7C:23:78:EC:87:BF:38:E0:3B:4D
Certificate issuer:       /CN=72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee
Certificate serial:       010D0C9F4328584EEA8759EF7A4922FCFCD5DAF0
Authority key identifier: 27:B8:A3:DD:49:F5:D9:F3:10:53:B6:43:5A:C2:38:B8:25:A7:D7:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/d096047a-9fa5-3441-a949-ac54a874b69a.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     27316
IP address blocks:        207.165.229.0/24 maxlen: 24
                          207.165.238.0/23 maxlen: 24
                          209.56.188.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:59:ef:7a:49:22:fc:fc:d5:da:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=462c7176-4def-4cc5-80d0-eefd3e49a282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:39:c7:87:8b:aa:2f:bc:e5:c9:ba:d2:c0:3c:
                    35:0e:55:f6:ad:4f:ce:cd:93:18:b1:93:ff:ac:c9:
                    1b:3f:92:b6:84:6d:0d:cc:c6:15:da:1a:11:d6:12:
                    e8:e5:2b:cd:3d:aa:a5:f8:ef:a0:22:c6:ef:0d:c2:
                    bc:ff:24:1e:0a:f8:93:e6:af:cf:48:bd:b1:17:38:
                    6c:db:d9:5b:2b:99:65:42:f3:29:62:d8:a7:5c:27:
                    d4:99:05:e6:6e:10:9d:c2:e9:a2:38:ed:a8:c8:d5:
                    66:3b:a1:9d:c7:24:81:55:6c:95:6d:16:eb:7b:2d:
                    8c:de:17:ff:60:c6:3b:f8:12:7f:8e:d6:34:c9:84:
                    d7:b0:b0:c0:e9:5e:3f:83:17:07:f8:1d:7d:e5:e9:
                    da:37:31:72:e1:20:d7:ed:c9:0f:73:0c:0e:2f:3d:
                    e3:85:48:78:de:07:7a:7b:d2:d6:74:be:26:83:7f:
                    af:ca:12:46:eb:dc:15:5e:94:ec:9c:b1:f4:a2:c2:
                    2c:b9:3e:d2:40:e8:ed:14:13:0a:b2:41:1a:39:fd:
                    d1:58:0c:8c:ff:fb:c1:c0:45:bd:e8:ea:84:ec:ce:
                    56:75:99:c6:d8:0c:25:84:88:32:0b:b2:2d:b5:93:
                    56:38:66:c3:03:dc:c8:53:06:93:f2:2d:08:a9:ec:
                    19:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:27:A6:A4:72:11:43:9D:D9:22:7C:23:78:EC:87:BF:38:E0:3B:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/d096047a-9fa5-3441-a949-ac54a874b69a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.crl

            X509v3 Authority Key Identifier:
                keyid:27:B8:A3:DD:49:F5:D9:F3:10:53:B6:43:5A:C2:38:B8:25:A7:D7:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/72ef7c9b-c756-439a-ac59-0fb5e5e8c1ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.165.229.0/24
                  207.165.238.0/23
                  209.56.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:72:39:a7:a3:a4:dc:84:0d:da:c5:9f:29:60:ab:ca:e6:c7:
         54:be:24:30:02:5d:43:17:f4:b4:d7:b2:6d:0b:fa:17:54:d9:
         87:00:ea:06:b4:21:4b:b0:2e:35:57:b9:1f:75:a2:17:02:ba:
         38:ad:67:bd:ee:95:c1:c3:ff:f5:9d:fb:a3:5a:4c:c7:ac:e2:
         7e:6d:09:21:83:f0:c8:ab:12:ef:96:ad:aa:9c:33:9d:5b:68:
         fe:8b:6f:5f:a6:4c:2d:32:21:3e:a8:3b:71:97:1c:79:e4:7f:
         63:bf:f4:e6:30:66:7d:65:ce:11:4b:3b:49:99:49:70:9a:a8:
         70:15:1c:e9:7a:5b:11:f6:27:97:b8:63:c0:ae:9d:6b:3e:63:
         68:00:3b:3a:03:f3:a0:2f:f0:e2:08:7b:bf:31:78:16:e5:dc:
         71:28:f1:4b:52:24:39:f0:07:51:52:eb:ac:90:d0:bb:ac:6e:
         af:69:27:56:7a:22:2b:cb:59:37:23:45:78:e5:9f:46:9e:bb:
         f5:d9:52:77:9f:44:aa:48:dd:1b:83:80:72:f8:53:0a:ab:55:
         dd:23:f3:23:8c:93:e7:df:6c:a2:f4:74:62:74:0b:59:8f:a5:
         c1:56:38:0f:af:07:f9:ed:8a:e6:84:9a:a7:60:fd:97:6f:4c:
         b6:bb:db:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:13:48 2026 by rpki-client