Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/79d7db1b-e77b-49b5-a68f-49ef9fbe26ee/86f4feea-5ef5-34e1-bbb5-83b0de7d5c76.roa
File:                     86f4feea-5ef5-34e1-bbb5-83b0de7d5c76.roa (raw, json)
Hash identifier:          q/Juso4r43pgnbKa3l/J4KZF1f7ETrJGewr7N+GYwlM=
Subject key identifier:   65:E0:FB:0A:08:D4:DB:47:56:5A:DE:19:B1:B0:BD:05:7B:F3:AE:D2
Certificate issuer:       /CN=79d7db1b-e77b-49b5-a68f-49ef9fbe26ee
Certificate serial:       010D0C9F4328584EA17A72AD93D08C217A271200
Authority key identifier: E2:5E:D9:3A:A9:DC:FD:05:3F:77:83:A1:B0:70:9E:0E:07:91:E6:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/79d7db1b-e77b-49b5-a68f-49ef9fbe26ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/79d7db1b-e77b-49b5-a68f-49ef9fbe26ee/86f4feea-5ef5-34e1-bbb5-83b0de7d5c76.roa
Signing time:             Sun 26 Jul 2026 21:00:11 +0000
ROA not before:           Sun 26 Jul 2026 21:00:11 +0000
ROA not after:            Sat 24 Oct 2026 21:00:11 +0000
asID:                     22995
IP address blocks:        208.114.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/79d7db1b-e77b-49b5-a68f-49ef9fbe26ee/79d7db1b-e77b-49b5-a68f-49ef9fbe26ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/79d7db1b-e77b-49b5-a68f-49ef9fbe26ee/79d7db1b-e77b-49b5-a68f-49ef9fbe26ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/79d7db1b-e77b-49b5-a68f-49ef9fbe26ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a1:7a:72:ad:93:d0:8c:21:7a:27:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79d7db1b-e77b-49b5-a68f-49ef9fbe26ee
        Validity
            Not Before: Jul 26 21:00:11 2026 GMT
            Not After : Oct 24 21:00:11 2026 GMT
        Subject: CN=ab6fb9e9-92d6-40a7-ab7c-3e9fb2077134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d4:9f:51:3f:f3:ac:98:7f:b7:0d:ca:ef:90:
                    03:fa:7c:00:3f:73:b7:d0:14:60:7a:44:33:a1:dd:
                    cf:3b:0f:f6:bc:41:30:3d:18:a5:57:b6:b6:d4:df:
                    f8:a3:b6:93:4e:d9:b5:57:c6:74:da:2d:19:ce:6a:
                    6a:0b:44:f6:ea:92:e2:c9:91:9a:f5:14:ec:ec:0f:
                    77:f0:32:e2:16:67:aa:2f:91:eb:37:da:5d:5f:3d:
                    42:3e:50:8a:e6:c0:31:dd:d9:08:22:87:17:66:fe:
                    0d:a7:a3:14:a2:9f:d6:11:6a:98:a7:d2:9f:f3:3d:
                    48:76:9d:78:c0:f9:c8:f3:e1:43:23:67:81:8c:bb:
                    5c:a7:0e:cd:a5:d5:a0:2c:90:70:bb:8d:f7:41:53:
                    16:1f:50:21:f2:c4:84:7c:10:08:50:89:9e:24:06:
                    82:ec:9c:f2:f4:68:af:f1:9f:a5:84:8d:e6:5a:11:
                    20:f4:c3:2a:1f:67:29:2f:88:e5:3f:95:08:ba:ae:
                    e7:c6:1b:27:e6:3e:24:63:a5:07:1f:24:e8:fe:24:
                    18:9f:7b:be:49:8e:73:df:a7:e1:d3:e0:4a:88:80:
                    9e:dd:28:ed:18:0e:56:de:8a:82:99:21:ed:32:3f:
                    3a:f5:3c:43:19:8e:ec:d0:d3:98:f8:be:bf:22:23:
                    bd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:E0:FB:0A:08:D4:DB:47:56:5A:DE:19:B1:B0:BD:05:7B:F3:AE:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/79d7db1b-e77b-49b5-a68f-49ef9fbe26ee/86f4feea-5ef5-34e1-bbb5-83b0de7d5c76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/79d7db1b-e77b-49b5-a68f-49ef9fbe26ee/79d7db1b-e77b-49b5-a68f-49ef9fbe26ee.crl

            X509v3 Authority Key Identifier:
                keyid:E2:5E:D9:3A:A9:DC:FD:05:3F:77:83:A1:B0:70:9E:0E:07:91:E6:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/79d7db1b-e77b-49b5-a68f-49ef9fbe26ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.114.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:69:b3:d6:98:4a:82:ff:22:ca:94:94:54:04:4b:36:59:ea:
         c7:f7:78:00:a2:8f:55:ff:59:4f:f6:72:0e:96:df:4d:1d:11:
         b1:ec:92:46:83:8a:94:77:42:e4:a6:f7:d0:27:6d:5c:57:d3:
         df:84:a4:db:cb:98:6a:bb:e9:6b:68:70:3a:3a:91:fb:0b:77:
         aa:5c:62:c3:44:b0:95:14:65:75:6d:7b:46:1e:7f:b7:ef:8e:
         e7:b7:a4:ec:13:4b:02:a1:a3:18:d6:b3:a6:de:06:b2:38:28:
         89:13:10:99:c8:2c:de:db:8a:14:33:ac:e9:34:b3:9f:4a:7c:
         8f:95:fb:ee:2a:99:cb:59:e4:37:2a:9a:c8:c8:2b:d1:e7:de:
         a0:f3:d6:3d:d4:27:9d:ad:14:d2:bb:a1:88:ba:37:9d:76:74:
         90:ac:81:c3:54:c2:09:c7:15:68:74:8a:52:96:c8:68:90:05:
         c7:b4:2c:c9:a6:c7:86:f8:33:a3:c2:aa:0b:9a:cc:11:73:f1:
         87:a1:df:53:2a:24:4e:37:55:bb:e9:d3:17:01:95:d2:c4:ac:
         07:6b:83:37:7e:3f:30:05:e7:9b:c4:33:a7:5e:bd:5f:67:ee:
         97:7e:d5:68:77:2f:eb:73:df:e2:53:03:e3:60:c6:89:1b:cf:
         c5:d2:49:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:51:57 2026 by rpki-client