Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/efdc03e2-d7b9-3498-a943-2f1f0dbda2ad.roa
File:                     efdc03e2-d7b9-3498-a943-2f1f0dbda2ad.roa (raw, json)
Hash identifier:          KbvmYnh6l7G+nbiLsv6FpWJQj0ub3qrqVZkNGNQm/pQ=
Subject key identifier:   EB:71:BF:68:CF:50:2E:5E:ED:8F:9F:F1:C5:73:10:93:97:FB:58:06
Certificate issuer:       /CN=28df346d-3f66-4555-b2ab-67f450efdcb3
Certificate serial:       010D0C9F4328584EA788190EB6B42DB6EACD44E0
Authority key identifier: D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/efdc03e2-d7b9-3498-a943-2f1f0dbda2ad.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     14230
IP address blocks:        207.70.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:19:0e:b6:b4:2d:b6:ea:cd:44:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28df346d-3f66-4555-b2ab-67f450efdcb3
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=1bb6c054-e5d9-41ec-8e96-9a6fb038f036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:0b:4f:d8:ba:64:9c:3b:e0:80:68:59:80:38:
                    90:46:8f:e0:ee:4d:b9:60:5b:b0:6b:99:70:79:e6:
                    74:a2:30:36:ae:c3:19:fd:b6:9e:92:a7:a7:bb:80:
                    2c:9b:05:00:be:3a:ea:eb:66:66:cd:54:75:d1:2d:
                    41:cc:72:8a:5a:1f:c2:c4:fa:3d:20:e0:82:53:9c:
                    78:5c:57:53:d8:48:55:cf:32:69:ba:2b:ae:b3:d5:
                    56:04:1c:26:0b:3d:79:c3:05:e2:66:a3:e0:ce:72:
                    45:f4:74:1c:46:16:c1:c3:52:d9:e7:9f:dc:aa:0b:
                    b5:df:bc:41:9d:45:d9:67:10:a1:fd:88:22:e5:d8:
                    11:9e:71:00:2d:19:b9:f5:b9:56:ae:9d:95:11:72:
                    c7:12:2f:93:8a:4b:75:4e:50:6f:21:aa:2d:68:d7:
                    3e:aa:1a:03:a2:80:04:e4:ec:69:61:21:1e:da:4c:
                    70:21:b4:ee:5a:e8:09:42:b7:f2:3a:9b:88:0d:a1:
                    37:cf:4b:15:b8:42:26:7a:2e:eb:50:03:a7:8b:3e:
                    ea:4b:b3:17:a7:7b:68:dd:03:cb:c4:2d:a5:82:24:
                    64:06:8d:4c:9f:46:e1:53:2c:5b:d0:d0:01:db:1f:
                    95:fe:6f:4c:6c:5b:ff:7f:e4:ce:d4:7c:96:68:2c:
                    b9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:71:BF:68:CF:50:2E:5E:ED:8F:9F:F1:C5:73:10:93:97:FB:58:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/efdc03e2-d7b9-3498-a943-2f1f0dbda2ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3/28df346d-3f66-4555-b2ab-67f450efdcb3.crl

            X509v3 Authority Key Identifier:
                keyid:D1:31:34:B4:B4:77:2C:0C:8A:FF:F5:82:03:50:28:76:EA:E5:1D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/28df346d-3f66-4555-b2ab-67f450efdcb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.70.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:92:15:9e:a9:ac:bd:46:8f:23:1f:6d:5f:1c:d0:42:5c:77:
         9d:b6:0e:51:57:2d:54:70:23:3a:ae:06:55:10:4c:eb:cb:49:
         de:e5:b5:65:28:43:3d:15:37:ee:ff:75:5b:ca:31:40:e6:d3:
         c8:25:87:a5:8b:f1:78:00:cf:26:5b:83:38:87:8b:4f:fc:a6:
         64:0b:cb:45:23:51:1c:d0:84:91:f8:16:a6:c0:de:47:f8:d0:
         aa:4f:d8:b2:28:4c:cf:15:03:36:62:f4:09:d0:e7:40:65:42:
         fb:4a:c3:de:95:9b:8e:e5:a7:ac:b9:58:af:c9:af:26:f5:cd:
         f2:e3:0b:c5:47:d8:90:54:2a:5b:4b:99:26:6c:29:08:87:63:
         25:cc:48:c3:d8:24:bf:1a:70:29:3c:c2:5b:87:94:50:32:43:
         07:82:8f:78:7e:cf:a2:24:92:71:68:cb:93:e7:52:e0:bc:7a:
         43:84:26:f8:b5:c6:f2:bb:a0:32:83:ce:3c:42:5d:88:c6:24:
         0b:0a:b3:6b:57:98:05:05:9a:a0:cd:8f:0f:29:b2:15:49:ea:
         72:f5:f9:98:6a:32:a4:0f:97:34:a8:d0:4a:36:94:cc:25:2f:
         af:ba:d7:4c:ee:fe:29:c1:76:a0:46:4a:81:4e:8c:34:21:1a:
         0d:88:85:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:39:51 2026 by rpki-client