Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/f7a9600c-1f06-3a65-a940-df685a255e63.roa
File:                     f7a9600c-1f06-3a65-a940-df685a255e63.roa (raw, json)
Hash identifier:          c2vFPHguZuFh0tELR4X0UgBP6NFdF6DNxeZFQMEOIs8=
Subject key identifier:   60:AF:75:E8:09:24:A3:52:3D:03:30:B2:41:27:FE:3B:7B:14:34:B3
Certificate issuer:       /CN=7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92
Certificate serial:       010D0C9F4328584E15E46F227D8DE3B83CE1F608
Authority key identifier: D9:88:ED:AC:D6:31:9A:84:0D:9A:49:23:C1:1F:E9:03:57:46:2A:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/f7a9600c-1f06-3a65-a940-df685a255e63.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     3851
IP address blocks:        207.197.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:6f:22:7d:8d:e3:b8:3c:e1:f6:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=97a5268f-d7ea-4e06-a65f-4cdda35a4586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:df:c1:00:9d:3c:0d:8c:4d:ac:4d:0b:6c:5b:
                    54:0b:35:04:bc:cc:2f:86:1d:7e:ea:02:9b:c9:86:
                    b4:93:84:24:36:ab:ee:16:5e:4f:8f:1f:d8:93:c5:
                    06:11:06:5d:52:9d:1d:9f:98:4c:c5:ce:da:f3:44:
                    5c:b1:2c:cd:28:de:d7:2f:ef:f1:c9:95:61:b3:ae:
                    7e:4b:33:6a:8e:9b:7d:aa:bd:d3:47:c8:14:b3:47:
                    3e:80:50:30:97:00:26:c0:13:20:34:ad:93:f3:48:
                    e9:c9:35:04:73:af:bb:29:65:82:fe:be:f6:1c:6f:
                    97:30:29:d3:df:dd:27:e7:f4:7a:53:8f:52:8f:a8:
                    10:01:c6:43:8e:31:af:66:88:ed:c5:10:c5:21:51:
                    96:cd:30:bf:e1:06:87:9d:0e:a3:5c:b2:e3:c0:b2:
                    a6:bc:b3:e1:e8:20:9d:72:7f:72:6c:37:fc:5e:ab:
                    b7:75:f1:f7:a2:d3:84:ef:61:59:ca:bd:d9:82:92:
                    3a:93:12:44:26:4a:96:25:55:9f:9e:49:23:8f:56:
                    5c:25:8c:84:a2:6b:2d:19:0f:60:8a:fb:30:71:63:
                    e6:34:04:3d:86:ff:04:ba:1c:ac:4d:de:91:68:ea:
                    1e:31:c0:9f:96:10:76:7c:84:3b:56:a4:6c:2d:ab:
                    94:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:AF:75:E8:09:24:A3:52:3D:03:30:B2:41:27:FE:3B:7B:14:34:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/f7a9600c-1f06-3a65-a940-df685a255e63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.crl

            X509v3 Authority Key Identifier:
                keyid:D9:88:ED:AC:D6:31:9A:84:0D:9A:49:23:C1:1F:E9:03:57:46:2A:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7437d5bb-bd26-4666-b9d6-ac2e0cdfdd92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.197.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:c1:b4:72:be:53:c5:79:b5:a1:2d:ab:47:c2:a5:2d:fa:29:
         1f:9b:a9:59:1a:8e:7d:f4:77:56:c8:25:e8:8a:9d:9b:11:c8:
         cf:05:3a:3d:9c:1f:c5:0a:15:d0:41:fe:3e:91:fa:cc:c1:d1:
         a9:2c:59:02:6b:3a:5a:9a:81:e0:43:b6:a4:26:af:10:a8:ff:
         fe:7b:ab:aa:73:46:1f:e4:bb:a0:87:d8:88:c2:1e:17:27:dc:
         7a:2b:34:b1:2e:98:58:d5:35:2e:07:73:03:5a:58:d3:7d:5f:
         11:b5:98:fc:f7:c5:37:ec:1f:9d:df:35:9e:ad:25:85:4f:e6:
         23:55:29:4a:ba:4c:38:ef:e6:ae:63:e0:b7:39:a1:1b:95:93:
         7a:9f:37:3e:51:64:3d:dd:40:78:26:a0:c2:a5:e7:84:a1:a2:
         52:03:40:59:fd:10:5b:dd:21:35:9e:6c:a5:d9:17:fb:33:ae:
         ff:ff:5d:c0:57:bf:40:3e:72:93:5a:a9:50:e5:e0:50:19:ef:
         fe:6c:3e:1d:2c:b2:80:2c:d2:e3:5f:dc:96:68:08:2b:12:33:
         0c:c5:e2:58:e8:df:ee:bd:a9:d3:d6:5c:71:75:5d:c7:97:0a:
         a5:ab:57:c5:17:a7:1f:f0:84:a3:28:e5:10:47:58:ba:94:34:
         56:c9:88:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:36:16 2026 by rpki-client