Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6/e0caed8b-977e-34c0-a8c0-d37ff63f8a51.roa
File:                     e0caed8b-977e-34c0-a8c0-d37ff63f8a51.roa (raw, json)
Hash identifier:          Ub+EoM45IU4AaAONq+txzkwdJ265M8Cp0NI3RzjphdE=
Subject key identifier:   2B:39:28:E7:D3:21:2D:0F:54:BC:DD:A8:91:3E:1A:92:F0:42:46:AC
Certificate issuer:       /CN=7ec658ee-f1e4-45ca-b167-d7f1ddec24e6
Certificate serial:       010D0C9F4328584EA7900FEE7543744EAEB2FDC0
Authority key identifier: 7E:84:9B:E3:FB:3E:6B:AC:C9:E0:F1:FC:4E:FF:81:7C:3E:54:BF:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6/e0caed8b-977e-34c0-a8c0-d37ff63f8a51.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     0
IP address blocks:        206.41.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:0f:ee:75:43:74:4e:ae:b2:fd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ec658ee-f1e4-45ca-b167-d7f1ddec24e6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=663df04b-df8a-4c9c-b204-ccb389cce73f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4a:6d:95:00:b2:32:94:61:3a:ae:05:ec:b1:
                    da:20:30:df:9d:03:d8:88:4c:fa:66:93:ff:b1:9b:
                    d5:00:a7:e4:99:30:82:a6:92:29:7d:2e:d0:f3:f2:
                    3d:55:2d:6d:cd:a6:76:12:4d:9d:08:4b:65:d4:66:
                    ec:9e:bf:ae:bc:cd:21:1c:71:fc:aa:ea:01:77:56:
                    08:07:fa:63:4b:06:68:7f:cd:75:b0:cf:b8:74:3d:
                    42:5a:04:57:17:74:0f:56:04:59:01:09:8f:71:cd:
                    b8:cf:9c:78:05:94:7d:da:34:3d:a1:a2:c9:48:38:
                    ce:03:0e:5b:00:8a:37:e1:74:a0:34:8b:5b:18:d3:
                    b3:60:dc:c5:dd:e1:a1:34:39:0f:c9:81:cf:9c:61:
                    48:f5:32:46:79:e4:4a:53:f4:e0:97:42:20:e6:c9:
                    3f:01:37:f5:d2:42:dd:2d:af:2f:81:c2:10:13:ea:
                    d4:4a:29:6d:7f:35:1d:56:f7:b4:eb:66:62:fe:71:
                    43:8b:54:70:ba:a5:16:53:2a:67:f2:e9:9b:cd:c1:
                    3e:0c:3f:7c:76:b0:84:63:89:16:7c:63:8a:e5:f2:
                    99:13:51:23:59:38:a0:42:5b:79:52:16:59:e5:b9:
                    b6:c0:46:f8:9b:fb:d8:a4:78:58:47:0b:c0:da:6a:
                    c5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:39:28:E7:D3:21:2D:0F:54:BC:DD:A8:91:3E:1A:92:F0:42:46:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6/e0caed8b-977e-34c0-a8c0-d37ff63f8a51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6.crl

            X509v3 Authority Key Identifier:
                keyid:7E:84:9B:E3:FB:3E:6B:AC:C9:E0:F1:FC:4E:FF:81:7C:3E:54:BF:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ec658ee-f1e4-45ca-b167-d7f1ddec24e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.41.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:56:5b:b2:96:74:72:65:b2:01:a6:ad:55:51:11:cc:25:a0:
         69:19:68:4c:c9:75:09:b8:ff:35:9d:62:c1:97:4a:e2:01:a8:
         a2:8d:cd:d7:d1:bc:fe:7c:08:55:e8:5f:e9:43:ea:74:56:c5:
         9d:dd:ee:68:2e:61:56:e2:a1:f3:58:86:1b:72:6c:9a:1e:4f:
         14:e0:14:ec:a7:9e:b9:4c:1c:d3:4d:2f:2c:11:1a:97:7f:65:
         57:d3:93:d6:cc:bd:d0:a6:98:60:e9:a2:fc:d3:54:d2:45:cc:
         43:ce:ee:3e:a2:ae:d5:c7:f7:45:4f:f4:5c:43:0a:a3:24:f7:
         9f:5d:45:04:b2:31:66:62:30:dc:ed:33:f6:c9:3a:6c:91:3f:
         66:8d:d3:1c:4a:9f:df:b6:82:d3:3c:e1:ce:dc:cc:ef:5c:37:
         19:5f:6c:8e:19:9c:17:58:4e:2e:ae:72:14:3f:e1:4c:fb:6d:
         34:36:f3:20:34:e3:fa:1e:66:d9:ca:c3:d5:3a:2e:a1:4d:65:
         1e:56:7c:3c:c9:8d:97:fa:00:b3:f8:45:f7:5e:8c:a3:c5:43:
         c7:ce:37:24:ba:43:f7:ff:58:cc:66:83:8a:ed:dc:e5:6e:4e:
         71:33:e0:a5:48:11:16:8d:9b:21:e7:8f:ee:45:d0:5c:9d:77:
         f3:f8:5a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 00:31:42 2026 by rpki-client