Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/e71b9091-c42b-3d92-917c-921053cce2c2.roa
File:                     e71b9091-c42b-3d92-917c-921053cce2c2.roa (raw, json)
Hash identifier:          QPNoVT3vNPanhlmE8KBb2oQGKm893qxkugkYaKo08QM=
Subject key identifier:   15:F3:52:E6:F8:02:5C:10:FE:A7:A5:A6:E2:9B:00:C4:44:00:CD:14
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F4328584E9318B2C5399B6DDC2B949B00
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/e71b9091-c42b-3d92-917c-921053cce2c2.roa
Signing time:             Tue 21 Jul 2026 17:22:06 +0000
ROA not before:           Tue 21 Jul 2026 17:22:06 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     46606
IP address blocks:        192.163.192.0/18 maxlen: 24
                          198.1.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:93:18:b2:c5:39:9b:6d:dc:2b:94:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Jul 21 17:22:06 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=44b653cf-574c-4166-a2ad-2a8bd256af80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:1a:ff:fd:d9:a5:ac:6c:66:5d:bb:0a:04:c4:
                    67:bb:4f:17:f6:9a:fe:4c:43:77:6d:a3:1e:8e:9d:
                    73:f6:28:af:62:cb:8c:6e:4b:60:a9:dc:b5:a5:a7:
                    f4:d8:18:b4:ad:95:23:90:d5:98:d5:8a:ac:80:e9:
                    63:b5:ed:84:16:02:25:eb:2f:d3:52:9b:fe:84:ee:
                    33:68:fa:fb:14:97:58:79:0e:b6:dc:96:07:61:96:
                    2e:35:55:54:06:0f:89:9a:f6:8f:12:c3:d6:64:63:
                    b2:71:e5:da:d6:17:f7:44:b4:7a:a9:4f:79:6c:e0:
                    a7:c0:ca:f0:b9:00:39:f3:e9:09:48:09:5e:c5:e6:
                    ac:35:a7:e3:f4:9c:d5:1f:d0:ac:4a:82:8a:1c:cb:
                    65:de:4f:0b:b1:de:26:7a:6f:3f:32:cf:05:af:dd:
                    e6:ac:01:bf:c8:f1:50:b5:a9:c2:ac:32:2e:eb:25:
                    13:f4:e1:26:35:69:20:fe:4d:c0:38:84:28:a6:36:
                    f9:a4:99:a7:aa:ce:68:b5:cd:0f:44:92:d1:76:89:
                    4e:f9:83:79:b6:9c:6e:84:73:bc:01:bb:8f:87:e6:
                    65:41:4d:46:fc:9f:f4:ac:5e:24:ce:f8:1e:b0:d9:
                    8d:0f:c9:10:a6:85:35:5d:bf:b9:53:b1:d9:ff:98:
                    7c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F3:52:E6:F8:02:5C:10:FE:A7:A5:A6:E2:9B:00:C4:44:00:CD:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/e71b9091-c42b-3d92-917c-921053cce2c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.163.192.0/18
                  198.1.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:89:db:5f:33:3b:30:46:79:ba:02:89:24:a8:05:96:56:98:
         68:9e:b1:35:33:08:19:25:99:17:51:1e:87:35:29:39:60:4f:
         40:c2:11:2c:5e:6d:d2:42:b7:e0:6b:85:e8:5c:22:f4:08:04:
         d8:79:de:94:a0:01:0e:5b:ea:40:14:66:da:e0:d0:c9:c3:b9:
         c1:4b:1f:45:d4:d4:71:91:71:a1:0e:7a:ef:60:68:a3:4c:12:
         26:af:a3:33:4f:5f:9c:e0:42:01:cc:5e:41:13:29:8d:47:7b:
         f6:51:e9:d9:fc:cc:24:60:e9:8c:70:2f:77:35:10:13:c2:6b:
         ae:a9:09:e1:87:8a:f8:c7:b6:fc:0b:03:ca:d3:d9:89:3b:4c:
         82:d9:bb:68:36:44:ad:7a:e0:5c:39:6c:86:dd:6e:12:09:d9:
         9f:f5:03:84:0e:b1:79:7a:e9:83:e3:d8:6a:d3:bd:44:a8:fb:
         3c:21:5c:85:37:3e:09:06:32:ac:cc:a5:10:42:63:d9:a0:32:
         9d:b3:26:94:07:3f:47:a4:75:5e:fa:2f:1e:a5:a0:91:3c:10:
         3f:d9:38:32:0f:68:79:f4:ac:ee:ad:6b:c2:61:9a:81:9e:6f:
         10:02:e6:d8:16:9e:f9:df:c7:8b:32:de:da:62:2c:9e:d0:ba:
         e9:b8:66:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:09:25 2026 by rpki-client