Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/341ff578-33ce-34b3-9eb1-046175a68075.roa
File:                     341ff578-33ce-34b3-9eb1-046175a68075.roa (raw, json)
Hash identifier:          Sz0XyMQ+4+C/pGn1gEyxnJgo1Z+yyuFuz4ciWDoVkp8=
Subject key identifier:   F5:07:5E:90:AF:3F:2F:D6:56:B0:18:BF:45:73:0C:5A:76:CC:85:12
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584CDC67960B2512B37E55D3B160
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/341ff578-33ce-34b3-9eb1-046175a68075.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     701
IP address blocks:        207.22.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:96:0b:25:12:b3:7e:55:d3:b1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=3ffa161a-9b01-45bf-a5f9-70447df30a0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:09:35:29:09:84:6f:83:00:dd:ef:b3:a0:69:
                    9e:54:23:07:be:13:0b:f0:bf:5a:6b:77:57:82:3a:
                    02:9f:8c:f6:aa:4c:5b:db:12:b2:51:12:b2:f6:11:
                    0d:be:c9:54:8b:4a:eb:91:85:0d:18:4f:0f:fc:5d:
                    19:39:27:17:d6:93:2a:bd:83:b3:82:e4:55:21:49:
                    bf:92:e1:55:2f:59:7c:d7:72:84:10:ac:1f:99:ac:
                    21:19:d5:ff:04:ec:82:ed:af:51:28:6f:47:ef:e4:
                    e9:84:f2:04:dc:2f:e3:63:a4:eb:6b:88:06:d3:47:
                    63:ab:34:c8:d2:5d:f7:19:69:31:d7:eb:db:c9:51:
                    fc:03:1b:44:69:ef:92:86:70:1e:b5:00:7c:02:7c:
                    a7:28:11:da:37:d8:0c:9f:ed:8c:33:8f:9e:dd:5c:
                    11:a7:5e:8a:63:81:dc:f3:60:b8:ca:ce:8a:9d:89:
                    d3:26:87:8e:7d:4b:19:94:79:a1:f4:b4:36:05:41:
                    6f:83:e6:4d:d9:dd:59:c2:80:e1:01:4e:6c:d4:d8:
                    4c:64:75:b1:74:34:4a:7a:78:51:8c:63:65:1a:37:
                    46:17:f7:b3:8c:fa:15:b4:21:fa:ad:b5:f6:93:79:
                    3c:45:a6:3c:05:87:2a:a2:ba:27:de:f8:ac:65:1c:
                    f2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:07:5E:90:AF:3F:2F:D6:56:B0:18:BF:45:73:0C:5A:76:CC:85:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/341ff578-33ce-34b3-9eb1-046175a68075.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.22.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:de:ab:a8:39:f2:be:76:91:14:46:f1:39:f6:69:bf:a6:67:
         15:60:5f:d0:56:d2:a3:d8:a9:1d:a7:94:a2:4a:e4:7e:85:62:
         2f:31:ba:29:e5:43:72:08:87:4b:95:ca:c8:06:ef:98:6b:96:
         70:a1:75:1d:ab:e9:15:5a:90:56:c0:d3:d9:16:38:7f:32:d3:
         67:45:c4:4d:89:48:ea:8f:de:e3:6b:52:17:50:88:42:50:42:
         27:24:be:89:e2:a4:d9:57:39:e3:c0:d7:e6:16:4e:77:04:19:
         3a:bc:de:b7:62:34:b8:f6:71:65:e5:bc:ee:ec:5d:f2:24:9d:
         bf:81:73:02:27:d7:96:6f:9e:04:ca:6c:e0:c0:c8:0f:d6:f1:
         89:b5:08:99:f0:39:9e:4b:c1:3d:fa:1b:57:a9:45:74:77:74:
         7d:f5:b6:5c:8c:cd:49:ba:40:f9:07:54:bc:68:d6:0f:52:9b:
         c6:9e:f3:ca:81:24:da:91:b0:c8:25:35:e6:f9:c0:a0:d5:5c:
         11:eb:50:59:29:6f:0d:c6:c7:17:d2:e6:93:37:35:c0:9a:16:
         28:48:61:52:b8:19:e3:9d:39:00:f6:11:22:83:b1:1a:20:55:
         d7:54:3c:61:f3:de:19:bb:15:8e:31:85:75:6d:f7:14:37:42:
         68:f6:34:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:44:19 2026 by rpki-client