Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7612a8e9-9a7e-34e7-9bf7-931087c2d3fe.roa
File:                     7612a8e9-9a7e-34e7-9bf7-931087c2d3fe.roa (raw, json)
Hash identifier:          aeWKnzLnG3Z62wWWbaQ5dK7wYG2J5KM7RAZuv7menQs=
Subject key identifier:   78:DE:CF:1F:B4:05:2C:9D:A7:0E:92:D7:A5:D0:53:8C:E2:59:A7:7A
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584E253F08E23C6FB030CF8F4CC0
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7612a8e9-9a7e-34e7-9bf7-931087c2d3fe.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     16417
IP address blocks:        207.54.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3f:08:e2:3c:6f:b0:30:cf:8f:4c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=207350a9-a61a-48b4-8dbb-28de23fe73e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4a:fc:e9:21:87:bf:a2:e0:e5:e0:70:48:b0:
                    f0:e1:bb:6e:bb:b3:91:8c:fd:60:c2:ef:cc:8f:81:
                    62:3b:1b:d0:8f:9f:c3:31:ab:a0:01:09:2f:3c:1a:
                    91:9e:d5:57:5c:91:e2:1f:0d:2b:29:b6:89:a8:2f:
                    ca:43:89:e3:56:63:d1:25:1d:17:ef:b6:4e:74:83:
                    42:95:8c:3f:83:9e:08:04:5c:99:9e:e9:10:ba:65:
                    3f:54:b0:15:7a:6d:76:63:26:e4:86:c4:5c:a6:5f:
                    4b:18:dd:31:8e:13:88:37:dd:31:01:f2:b4:1c:84:
                    a8:b1:eb:75:8b:b5:c1:a0:72:08:ab:44:1a:7f:d4:
                    58:cd:af:48:bb:63:ff:dd:8c:76:e2:f2:57:9f:8d:
                    b7:23:58:2e:4a:e7:61:15:e1:43:cd:b3:b4:63:8b:
                    eb:b3:bb:a0:3c:fd:b2:18:2d:6a:2e:e2:45:98:f3:
                    7b:d6:ec:70:bf:89:da:ed:1f:a4:a4:91:48:10:68:
                    1c:ec:09:0f:ab:41:53:60:1a:19:f7:cb:8b:5b:0f:
                    18:81:eb:86:75:61:35:8c:59:36:31:11:79:92:61:
                    27:3d:1e:8e:66:0d:bf:48:e3:63:b4:fe:cf:2a:0b:
                    cb:3a:32:da:11:20:f5:45:1a:6a:ef:cd:a9:e5:96:
                    a7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:DE:CF:1F:B4:05:2C:9D:A7:0E:92:D7:A5:D0:53:8C:E2:59:A7:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7612a8e9-9a7e-34e7-9bf7-931087c2d3fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.54.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:49:f7:d8:75:d9:f6:bc:e9:c7:e1:36:e4:10:20:81:06:cd:
         e0:aa:c6:a9:49:78:39:ef:bf:e5:ae:3f:8e:bc:3f:f8:87:fe:
         01:54:16:5c:64:b9:85:0c:d8:53:ac:d2:f0:78:13:06:04:f2:
         10:f9:9b:1c:e5:6c:ac:d7:69:44:0a:1c:a0:6f:bf:af:b0:0d:
         5b:d0:1d:dd:6d:f9:08:f0:61:67:3a:1f:f0:1a:32:a4:03:f3:
         83:96:11:ec:b7:f4:cf:28:95:00:57:94:10:6f:8c:41:de:c0:
         0c:67:54:3d:78:01:20:fc:13:51:e5:bd:be:8b:b9:b1:df:2b:
         31:5c:a4:dc:9f:43:84:1a:1e:48:4a:44:76:c7:3c:ba:f5:0a:
         d7:51:a6:45:b9:bf:6a:69:91:3b:12:e4:59:5d:33:a8:ec:e6:
         ea:ff:74:16:ce:ce:23:f5:8e:41:2a:c8:37:d6:55:09:95:56:
         48:7a:c9:f2:89:45:93:ce:d6:ec:48:ac:77:52:05:c0:76:e3:
         2d:0a:fb:c1:7b:6e:83:e6:b8:c9:bf:0a:8f:5a:58:18:73:90:
         56:dd:9f:c3:80:bc:2d:c0:a8:81:fe:ff:4d:1e:40:94:9f:a1:
         17:03:b4:df:6f:5b:81:55:7b:e1:b6:11:45:27:23:22:4d:48:
         13:c6:62:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:30:22 2026 by rpki-client