Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c7b19e67-e596-317a-af39-0fc4c54fa9be.roa
File:                     c7b19e67-e596-317a-af39-0fc4c54fa9be.roa (raw, json)
Hash identifier:          3GV4ZG1T+TQCUo8jaJI340ZJV2fUMEvMUyjjl8kCOgo=
Subject key identifier:   C9:2B:A2:0F:F5:C6:EE:A0:43:B5:AA:E4:24:6A:87:37:49:34:51:E9
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584CEFF24D14BF669D9755900F30
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c7b19e67-e596-317a-af39-0fc4c54fa9be.roa
Signing time:             Sat 21 Feb 2026 14:00:41 +0000
ROA not before:           Sat 21 Feb 2026 14:00:41 +0000
ROA not after:            Fri 22 May 2026 13:00:41 +0000
asID:                     397213
IP address blocks:        199.7.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ef:f2:4d:14:bf:66:9d:97:55:90:0f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Feb 21 14:00:41 2026 GMT
            Not After : May 22 13:00:41 2026 GMT
        Subject: CN=aa4f734f-81c4-4c0f-82d0-57bff979acd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:82:ba:4f:57:2f:db:af:fe:90:b0:28:c0:fb:
                    1e:04:93:20:3b:52:97:ac:eb:f8:60:e5:2f:56:d7:
                    dc:35:52:ae:91:1c:ef:1f:95:cd:aa:b8:00:52:58:
                    1a:8b:8f:bb:c0:c3:92:77:d7:d9:49:e5:10:aa:c8:
                    13:be:28:a4:cb:de:bc:93:46:f2:0b:f2:5f:c2:81:
                    07:a9:cf:de:7e:a3:6c:ce:c8:42:0e:42:e6:b8:7a:
                    83:f8:59:9a:d4:9f:13:65:f7:2e:79:21:92:9d:cc:
                    c8:06:6b:ee:70:49:ab:f9:5d:2e:c2:4d:c0:d6:d5:
                    d2:d9:9c:5f:51:4c:bb:81:b8:89:ff:e4:82:13:81:
                    3e:fd:18:2c:b7:e8:ac:1d:3a:04:70:68:b7:d9:db:
                    19:60:86:5a:28:b6:fd:01:0b:35:eb:c1:e7:ac:c7:
                    f1:42:60:2d:0f:0e:b3:a4:cc:1c:9a:b5:92:98:88:
                    55:5c:08:7d:a5:d8:0f:ad:cc:87:6d:ff:eb:8d:04:
                    45:a7:1c:32:31:0f:c2:de:9f:49:b0:5b:5b:73:f3:
                    a8:2f:1e:47:8a:24:a7:a9:93:72:ea:3c:17:f5:ca:
                    b6:c2:6f:85:33:1f:28:28:b7:e4:cd:ab:7d:d2:fa:
                    18:a5:ba:47:bf:76:e8:fe:f2:d7:28:43:75:29:9e:
                    2c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:2B:A2:0F:F5:C6:EE:A0:43:B5:AA:E4:24:6A:87:37:49:34:51:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/c7b19e67-e596-317a-af39-0fc4c54fa9be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:62:c6:3e:c0:87:86:43:0b:c4:2e:9f:d5:db:c0:a3:ec:66:
         13:30:6b:e2:eb:a7:c7:5e:d0:ba:75:7e:3a:f6:94:3b:33:de:
         9f:f4:a7:1b:1d:5f:4c:1b:bb:3e:81:cd:16:f9:90:b1:f3:0f:
         01:1b:27:53:c0:46:db:37:59:28:e7:28:ba:08:46:be:ce:4b:
         d0:5c:2b:03:73:58:47:28:1b:2a:09:aa:97:ab:17:ad:cb:a0:
         4d:aa:d9:c5:8c:05:e8:2b:c9:05:95:76:dc:dc:fa:92:76:4a:
         3e:26:47:0c:67:55:03:e6:2b:68:b6:f2:aa:d4:ef:9e:78:87:
         c2:5c:17:41:62:5d:ec:15:11:40:a3:db:2c:c1:11:0b:eb:d0:
         71:29:5a:98:d3:f2:7d:0b:49:c2:b0:23:78:dc:00:9f:0a:12:
         03:29:0f:de:f2:9f:5f:68:21:6e:37:4c:f9:95:c9:e0:ea:ec:
         c5:08:80:b1:c2:dc:25:70:30:8c:8d:ba:85:dc:0e:41:d8:28:
         26:28:0a:ec:ae:b5:eb:1b:c2:bc:ed:b5:2a:a1:80:cb:97:58:
         60:cd:77:34:83:d9:7f:c9:28:b4:0e:96:66:e0:de:e0:1e:27:
         b7:96:0d:08:10:4b:5c:51:c3:9a:d8:9c:89:29:a8:08:3c:b0:
         ee:b1:74:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:59:13 2026 by rpki-client