Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/dfc8d6b7-753d-3700-b5d8-55f8146d0a53.roa
File:                     dfc8d6b7-753d-3700-b5d8-55f8146d0a53.roa (raw, json)
Hash identifier:          OrfsnQBVVX7Lw6UL20igX/D8xBeidYVCB2jDA/TmPZ8=
Subject key identifier:   03:B7:28:2A:45:BF:6C:FB:50:17:A7:44:9C:D4:4F:C2:35:D4:5F:E3
Certificate issuer:       /CN=7607f87f-d9ec-4a0f-b611-d0eeadde6b42
Certificate serial:       010D0C9F4328584D00B26AFDB02899D9B9BC8320
Authority key identifier: 94:D9:6A:80:59:34:44:86:89:4A:48:DB:CB:87:19:37:9A:09:97:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/dfc8d6b7-753d-3700-b5d8-55f8146d0a53.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     14618
IP address blocks:        198.204.9.0/24 maxlen: 24
                          198.204.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:6a:fd:b0:28:99:d9:b9:bc:83:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7607f87f-d9ec-4a0f-b611-d0eeadde6b42
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=1dd6aa06-4835-4959-b925-ef66da6ea7b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c8:ca:81:9a:3a:2f:59:46:75:38:31:46:6b:
                    25:b5:37:42:b3:29:a5:96:77:e6:75:70:77:fd:42:
                    72:56:d9:bc:16:d2:a4:cf:16:bf:c4:02:cd:a8:f2:
                    13:92:0c:cb:7d:39:db:1a:92:70:93:fe:6b:0c:d0:
                    5b:e6:06:df:f0:d8:f1:97:af:71:0e:5e:a3:02:65:
                    6c:2a:5d:dc:2b:c8:8d:82:2d:b6:c8:c3:30:7b:4a:
                    22:3e:28:4c:24:02:43:f2:92:ea:98:89:36:bc:14:
                    6e:90:38:b4:75:92:85:46:51:84:9b:6a:0e:ea:ba:
                    1b:eb:9b:1e:74:06:ef:ac:3d:39:b3:87:0e:73:8e:
                    e3:9c:ff:10:36:a4:be:9e:66:50:2d:36:83:81:75:
                    c4:ee:48:36:12:e3:22:ff:0c:f5:51:c6:ba:27:3b:
                    8d:53:3d:55:12:36:d0:4a:18:cf:d4:74:d1:21:a1:
                    5d:20:be:3b:cf:40:63:a7:54:24:fa:bb:03:db:4a:
                    d7:c4:77:99:02:3d:c7:fa:15:e5:15:aa:c1:94:a4:
                    ab:06:be:6d:f3:6f:ec:64:8f:ce:bb:e5:0b:e8:ea:
                    2b:89:93:5e:56:7e:64:da:19:65:d8:64:71:10:a2:
                    00:5f:96:a8:cf:b2:46:43:6a:bd:82:6d:5e:43:38:
                    81:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B7:28:2A:45:BF:6C:FB:50:17:A7:44:9C:D4:4F:C2:35:D4:5F:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/dfc8d6b7-753d-3700-b5d8-55f8146d0a53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.crl

            X509v3 Authority Key Identifier:
                keyid:94:D9:6A:80:59:34:44:86:89:4A:48:DB:CB:87:19:37:9A:09:97:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7607f87f-d9ec-4a0f-b611-d0eeadde6b42.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.204.9.0/24
                  198.204.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:b7:96:44:46:df:4b:23:6a:b4:b3:8d:65:a9:90:ed:c5:23:
         1c:65:b2:3e:2f:de:cc:6f:98:d2:06:d5:a3:f4:c0:06:02:c8:
         e8:f3:9c:e2:c8:0d:77:60:7b:70:72:44:bd:37:b4:b9:7e:a9:
         e2:25:08:15:31:db:a7:6a:15:aa:53:51:a4:9d:38:9f:17:fc:
         9b:55:4d:ef:55:e4:28:be:e2:a3:c8:73:21:67:9f:8f:60:57:
         72:5e:4b:11:02:fb:e5:2c:3d:ed:4c:1f:08:a2:de:8c:22:a8:
         7b:e4:46:04:7f:da:cb:8c:c1:bc:ab:a8:71:19:ae:34:c8:f6:
         4c:ce:7a:51:39:23:1d:1d:ed:04:61:7a:96:4f:b4:ef:44:ee:
         71:2f:d7:16:93:2d:60:9f:79:49:6b:94:c9:3a:9d:89:c0:32:
         47:22:26:40:da:2a:ad:ad:5c:6f:ae:4c:9c:1a:65:ef:e9:19:
         ce:c6:aa:f6:8a:4e:ec:1e:1b:7f:fe:28:ca:28:73:31:74:b5:
         61:d9:79:03:3a:ad:1b:0f:90:00:38:7e:66:78:1e:cb:29:7b:
         38:2e:fe:18:20:9e:c6:10:83:1b:05:ac:3b:13:0f:36:dc:a5:
         ef:cd:52:a4:5b:06:b0:43:c9:c0:81:eb:24:3c:44:78:b8:c9:
         f0:46:2a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:25:42 2026 by rpki-client