Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/6cb8200e-007d-3896-8882-dbf73400a647.roa
File:                     6cb8200e-007d-3896-8882-dbf73400a647.roa (raw, json)
Hash identifier:          M7xqrYbQ5G1OGBPQxRMfcJ19D4hmSzESnrK/n55lbT0=
Subject key identifier:   AF:D9:C1:63:E5:C5:A4:1C:58:72:D1:7D:DC:BF:F8:A8:0D:71:9E:95
Certificate issuer:       /CN=307848a1-01e5-4124-ac5f-8d98a3abaa0d
Certificate serial:       010D0C9F4328584E54B4980230CAAB2074949C00
Authority key identifier: 56:61:05:E5:78:59:E0:0E:D5:6A:AE:0A:9C:D5:93:9D:BA:35:C8:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/6cb8200e-007d-3896-8882-dbf73400a647.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     16509
IP address blocks:        167.94.127.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/307848a1-01e5-4124-ac5f-8d98a3abaa0d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/307848a1-01e5-4124-ac5f-8d98a3abaa0d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:98:02:30:ca:ab:20:74:94:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=307848a1-01e5-4124-ac5f-8d98a3abaa0d
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=e2db637a-33ad-4c9b-85c2-92a3ea271dce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b6:62:b9:17:e4:c1:c2:96:1c:9e:06:d3:dd:
                    e7:3b:09:d3:5f:3f:ea:37:df:51:6e:d6:0e:2a:1b:
                    a0:d2:ae:58:99:8d:6f:23:54:86:b6:8f:5e:fa:33:
                    6a:cb:8c:33:1c:40:37:ae:88:34:e1:2e:02:c7:0c:
                    74:d8:35:bb:87:0a:57:50:3b:86:a2:15:4f:71:af:
                    2c:cf:9b:8c:42:14:d7:8d:58:72:ff:e9:81:1b:08:
                    2b:73:fc:e8:c3:ae:77:2c:cb:1e:a5:be:5a:3c:f1:
                    6e:24:ad:9f:d1:c1:0c:4d:67:cc:84:9a:15:c6:48:
                    7b:6a:ec:55:90:66:d4:32:bf:1f:22:22:ab:59:58:
                    41:5a:82:75:86:46:9f:a4:55:3c:08:e7:52:f9:c2:
                    31:58:17:08:7b:c0:79:03:ce:6f:7d:2d:40:7f:13:
                    1b:2e:54:1a:00:6d:e0:35:56:41:2d:cf:54:81:aa:
                    98:d1:e5:a9:e6:00:7b:8e:f8:79:7e:b9:a0:3a:f6:
                    bb:82:db:cc:ab:b3:64:5b:2b:73:3d:c4:54:c2:cd:
                    43:1d:c7:5f:20:cd:18:4c:6e:95:b0:a3:6e:e3:3b:
                    c7:d1:71:75:92:8b:49:9e:fc:e1:23:1c:82:5f:6f:
                    df:b2:27:f9:9f:09:12:36:93:57:07:45:fa:f8:e8:
                    55:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D9:C1:63:E5:C5:A4:1C:58:72:D1:7D:DC:BF:F8:A8:0D:71:9E:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/6cb8200e-007d-3896-8882-dbf73400a647.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d/307848a1-01e5-4124-ac5f-8d98a3abaa0d.crl

            X509v3 Authority Key Identifier:
                keyid:56:61:05:E5:78:59:E0:0E:D5:6A:AE:0A:9C:D5:93:9D:BA:35:C8:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/307848a1-01e5-4124-ac5f-8d98a3abaa0d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.94.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:f5:47:63:e2:e3:36:0a:e7:80:d0:22:d9:89:29:36:cd:38:
         c9:66:3b:56:89:81:ef:da:08:91:71:f9:72:fb:a6:58:7b:67:
         1a:0c:f8:a3:ba:ac:8e:b6:a4:01:4b:f9:7a:dd:2c:73:47:1c:
         d7:89:99:74:6c:b1:00:58:b7:92:7d:ea:01:f8:29:af:9c:e1:
         06:f2:03:5b:b8:cd:22:5c:91:3c:ff:9f:04:45:1c:8c:c2:97:
         4c:3b:d6:74:9a:fa:e4:60:98:1e:05:31:34:06:d9:48:f7:ef:
         bf:06:3c:8e:4d:4b:4b:88:11:7a:7d:5a:cd:46:2a:58:dc:dc:
         84:59:72:2e:8c:f6:54:b0:4b:16:ff:d0:1d:29:81:22:12:c9:
         b7:73:3d:76:13:ae:56:46:ef:aa:2e:06:b7:1e:91:db:59:1c:
         13:90:1f:18:7a:c0:d3:7b:84:11:9a:94:14:2c:75:8a:89:ab:
         86:3c:4d:80:ad:04:6a:cc:35:d6:b4:f8:14:91:10:fe:77:2c:
         49:1d:6c:56:0e:f1:67:a0:66:c6:2b:6a:a6:94:e4:d3:0f:4d:
         0f:dd:93:2a:b0:76:65:88:52:39:ad:91:9f:4d:21:58:8f:0a:
         b6:b5:b7:6a:ec:36:2d:ea:33:f1:7f:df:9e:b1:ff:df:c6:03:
         92:92:06:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:09:45 2026 by rpki-client