Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/541d11db-8bb0-33df-bcd2-d3f18dc320a5.roa
File:                     541d11db-8bb0-33df-bcd2-d3f18dc320a5.roa (raw, json)
Hash identifier:          vyegZvnL1R9JfcETZ9QKTdl/MF3pdzlIjVAO+0D0aZ4=
Subject key identifier:   7C:37:10:58:78:0A:B2:99:4D:16:08:41:A4:1B:A1:76:FE:68:0E:E9
Certificate issuer:       /CN=f8920ef3-7d53-43c3-8266-318adf8495b4
Certificate serial:       010D0C9F4328584D7F9AA3101E5D9DC0330BAD00
Authority key identifier: E0:94:12:C0:8B:ED:44:F8:DD:AC:A3:DE:2F:C3:89:02:68:20:D4:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/541d11db-8bb0-33df-bcd2-d3f18dc320a5.roa
Signing time:             Tue 14 Apr 2026 01:00:24 +0000
ROA not before:           Tue 14 Apr 2026 01:00:24 +0000
ROA not after:            Mon 13 Jul 2026 01:00:24 +0000
asID:                     19793
IP address blocks:        199.7.210.0/24 maxlen: 24
                          199.7.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/f8920ef3-7d53-43c3-8266-318adf8495b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/f8920ef3-7d53-43c3-8266-318adf8495b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7f:9a:a3:10:1e:5d:9d:c0:33:0b:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8920ef3-7d53-43c3-8266-318adf8495b4
        Validity
            Not Before: Apr 14 01:00:24 2026 GMT
            Not After : Jul 13 01:00:24 2026 GMT
        Subject: CN=2e8da107-6695-4a24-b5b2-dd99606be57f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:42:a3:44:61:f7:ff:ff:7c:89:43:c9:f4:cb:
                    2e:a5:35:b5:5c:94:dc:c5:6c:ca:c0:a7:23:8a:cf:
                    a2:38:93:06:c2:5d:51:f9:79:a1:db:4e:af:0f:34:
                    89:79:82:d1:de:58:1a:3a:13:37:10:73:05:d9:b9:
                    a8:9e:d4:34:a7:29:87:5d:2e:4f:39:74:85:53:15:
                    6a:58:4c:5e:17:ad:af:f7:59:91:59:3f:cd:93:ca:
                    61:b4:76:fc:50:64:24:72:4b:8b:ad:68:26:07:19:
                    83:98:b5:45:cd:34:4a:c1:03:20:85:84:8a:5d:64:
                    8e:0c:2b:d0:50:07:a7:19:50:d6:fc:fa:8b:40:1b:
                    cb:63:f8:5a:7b:90:65:df:51:bd:d4:61:2c:29:29:
                    07:54:35:80:b9:53:a5:c4:8b:07:d8:fc:0f:cb:05:
                    12:4b:25:37:70:19:01:bd:b8:c8:5e:ce:90:3f:4e:
                    46:3e:7f:ef:b5:3d:ff:03:6b:5b:9f:38:54:1e:29:
                    84:ef:76:e9:2d:12:3b:cb:56:cb:bb:f2:11:56:d7:
                    36:c0:cd:d7:21:f5:f3:81:cc:f1:b2:0a:eb:53:e1:
                    ed:f1:1b:ce:f5:08:50:cd:00:75:f4:54:4b:b0:b9:
                    77:47:8a:23:57:df:d1:d0:34:bc:8f:75:82:f8:7a:
                    f4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:37:10:58:78:0A:B2:99:4D:16:08:41:A4:1B:A1:76:FE:68:0E:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/541d11db-8bb0-33df-bcd2-d3f18dc320a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4/f8920ef3-7d53-43c3-8266-318adf8495b4.crl

            X509v3 Authority Key Identifier:
                keyid:E0:94:12:C0:8B:ED:44:F8:DD:AC:A3:DE:2F:C3:89:02:68:20:D4:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f8920ef3-7d53-43c3-8266-318adf8495b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:91:f5:1a:53:ff:98:b7:d1:87:80:cc:b9:c1:f7:69:bf:92:
         c0:4d:c7:94:b1:20:05:c0:15:6b:f0:9d:a3:32:a3:4a:3c:02:
         1a:87:5a:bf:04:dd:33:37:92:91:c1:d6:c5:71:e4:d8:aa:6e:
         74:63:09:94:92:28:9e:5c:89:c3:d3:b6:34:b0:80:a2:b8:a8:
         3f:e3:26:6d:16:1d:b6:f5:4a:63:df:0c:e8:fc:52:5f:76:b8:
         df:01:bc:a5:c1:9d:52:c9:91:ac:94:c0:65:3d:8b:ac:4b:4d:
         8b:f1:81:54:41:1f:25:e4:bb:38:b0:11:8e:d2:09:c1:2a:89:
         ac:54:fc:d3:b8:c8:12:cc:73:c3:fe:ac:2a:f1:93:08:ed:57:
         e1:98:57:2c:16:d3:45:80:5a:6d:90:46:c8:a5:07:4a:1f:ae:
         2e:ac:ab:0c:e2:c1:b5:89:26:4d:4e:95:1e:3f:85:bc:f2:cd:
         2f:0f:5d:8b:96:0e:40:77:f6:3c:eb:43:6b:01:fd:75:2f:47:
         b5:ef:94:a2:e2:03:f8:1b:5b:67:81:c8:58:8f:05:15:8a:c6:
         dc:6b:cf:53:72:7e:4f:fb:75:61:75:8e:23:89:5c:a7:a9:cb:
         38:91:af:69:16:c3:41:eb:d0:71:8d:77:4a:93:70:09:e3:d2:
         57:91:75:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:24:07 2026 by rpki-client