Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf/a6c43437-46a5-3a45-99df-bc0a47a30454.roa
File:                     a6c43437-46a5-3a45-99df-bc0a47a30454.roa (raw, json)
Hash identifier:          X2ffB0lNsUxuHxabXovG0b1g1j0ynyw0vJGJ/Zme4ok=
Subject key identifier:   BA:7F:67:CC:0F:3A:EF:38:B9:82:3A:F6:E8:F0:3B:F1:EA:C1:EB:7B
Certificate issuer:       /CN=a79b85c1-9b95-4c95-b08d-220eb047aedf
Certificate serial:       010D0C9F4328584EA7887B44D9EDA60580CB1900
Authority key identifier: 94:D3:05:38:E6:C5:87:B6:04:6B:31:E1:85:08:90:7B:0E:07:4B:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf/a6c43437-46a5-3a45-99df-bc0a47a30454.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     8075
IP address blocks:        216.220.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf/a79b85c1-9b95-4c95-b08d-220eb047aedf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf/a79b85c1-9b95-4c95-b08d-220eb047aedf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:7b:44:d9:ed:a6:05:80:cb:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a79b85c1-9b95-4c95-b08d-220eb047aedf
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8cea3c5c-0703-439f-918a-20ed11dc1d2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:08:7c:8d:c7:ad:2a:ff:dc:fb:9d:a5:5e:9a:
                    a7:c2:f5:b4:af:04:11:cf:3a:51:9b:97:79:4e:0e:
                    7b:d2:dd:62:bb:a6:ed:77:26:07:ff:c5:59:31:3e:
                    15:b0:22:0d:3a:1c:4a:e4:72:a2:4c:43:7c:85:32:
                    4a:66:c8:35:a4:39:fe:f0:ff:da:70:44:38:48:78:
                    20:cd:9a:72:da:38:47:76:fd:67:b1:99:38:f7:29:
                    40:2f:34:b1:4f:e2:e3:b4:01:13:b4:7a:43:58:45:
                    b0:7c:2d:b5:db:96:03:05:fa:33:c1:9b:83:49:57:
                    76:6f:7a:12:50:71:02:81:a6:13:f6:78:b7:60:37:
                    6f:6a:38:21:ab:22:1a:e4:98:cf:ac:93:c8:ac:e0:
                    e5:80:50:f8:9b:97:fb:57:1e:8f:4a:91:45:24:09:
                    51:c6:25:13:6e:3f:48:76:87:ac:9e:5a:44:f9:74:
                    2b:01:ff:7b:f1:6b:f3:d1:ca:ba:e7:5c:00:d3:88:
                    67:54:eb:be:9a:ba:10:29:e9:aa:5d:cb:e4:e1:4f:
                    13:ec:af:6d:5b:fb:97:73:51:53:5c:43:5c:52:5f:
                    06:1a:6c:83:6d:62:ff:4c:b4:e8:15:5e:1c:d7:e6:
                    c7:11:9c:c2:6a:6e:4c:46:12:d8:d5:ac:65:e5:e1:
                    51:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:7F:67:CC:0F:3A:EF:38:B9:82:3A:F6:E8:F0:3B:F1:EA:C1:EB:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf/a6c43437-46a5-3a45-99df-bc0a47a30454.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf/a79b85c1-9b95-4c95-b08d-220eb047aedf.crl

            X509v3 Authority Key Identifier:
                keyid:94:D3:05:38:E6:C5:87:B6:04:6B:31:E1:85:08:90:7B:0E:07:4B:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a79b85c1-9b95-4c95-b08d-220eb047aedf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.220.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:bd:da:b1:ad:15:32:d1:2b:70:37:fb:08:39:79:36:9d:5f:
         b2:90:a0:29:ac:99:77:fe:01:0a:9c:bc:08:08:bd:cd:e6:3c:
         b0:6f:20:b2:fa:21:33:e4:39:11:5d:03:55:42:02:c3:34:88:
         10:37:e1:91:68:ca:a1:11:dd:24:3e:d8:58:8f:36:ae:7f:b3:
         38:d0:86:32:53:6c:df:c3:4d:74:cd:21:18:00:29:51:67:a6:
         94:32:fb:cb:1b:cc:06:fc:af:87:fb:36:35:8b:54:3c:37:5f:
         c6:6e:e0:f2:aa:30:04:2d:47:cc:80:c5:01:16:40:bf:86:74:
         30:b7:2f:27:c5:fd:91:92:e2:6f:e1:24:f8:c7:e7:8e:f4:f8:
         6a:16:f2:72:e6:cd:5d:30:6e:a7:63:af:23:de:36:8a:e7:6d:
         99:37:d4:ff:08:0b:1b:e0:59:83:32:d5:ae:05:d1:cf:4c:77:
         73:64:ee:5e:4c:7b:e3:f9:fe:44:a9:eb:e9:a1:f8:7e:46:d9:
         e0:53:49:bb:9c:52:cf:a6:c0:e3:b3:97:a7:a2:1c:e4:2f:2d:
         ad:ce:de:26:52:37:df:7e:57:8f:c0:2b:ab:3d:fe:a4:d6:86:
         c2:92:5c:c5:2b:98:4d:ee:2c:1f:a9:2f:0d:99:a5:e7:ca:b5:
         4a:29:2c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:10:44 2026 by rpki-client