Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/706fac37-3e2e-329f-94f6-1c53acc6e6dc.roa
File:                     706fac37-3e2e-329f-94f6-1c53acc6e6dc.roa (raw, json)
Hash identifier:          AlnmKMGMdm89jJY1maMOp+DJHTEyiomgt6N6/AAfva4=
Subject key identifier:   AA:BB:8C:A3:6E:36:1A:91:68:20:25:85:7C:FF:59:55:3A:DB:D3:52
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F4328584E6144BE22F36D5765045E2300
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/706fac37-3e2e-329f-94f6-1c53acc6e6dc.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     16839
IP address blocks:        199.91.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:be:22:f3:6d:57:65:04:5e:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=e387ce37-593f-4975-b40a-5a7037720d2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5b:c9:9a:b4:01:9a:52:90:fc:0a:2d:84:ce:
                    3f:ed:81:af:40:d5:d9:84:24:c3:27:35:7e:8b:bf:
                    84:0d:6a:e5:6d:b3:14:a8:26:5f:1c:89:f4:c3:11:
                    11:7e:91:33:03:e4:61:f4:16:76:ca:a4:52:42:e7:
                    21:07:0d:a2:0f:9e:98:ad:97:fd:ce:fd:ec:eb:d9:
                    c2:92:b2:f1:f0:82:78:c8:cd:ec:02:ae:32:d0:bd:
                    50:cb:13:7f:5e:80:71:5e:d8:6a:45:b9:37:27:c9:
                    d3:e4:a7:51:8c:5b:ef:2c:e8:8d:d1:3f:b5:02:e1:
                    e9:ed:da:94:5f:f2:90:67:50:6d:57:9c:00:7f:30:
                    1b:8f:25:8f:23:c2:24:a3:32:97:0f:cf:07:30:81:
                    c7:6e:24:a4:d7:24:72:58:d3:db:1e:03:1f:ed:b4:
                    8f:f3:69:2d:a1:ac:51:08:52:2d:87:54:21:74:0c:
                    d9:13:f1:13:2d:3a:60:2a:b6:86:16:0a:af:b2:55:
                    bc:31:28:bd:d1:bd:76:3b:0f:79:1d:a9:74:66:90:
                    a8:02:66:7d:2f:66:e6:92:29:60:15:37:62:b8:53:
                    fd:a5:08:3f:33:fb:5a:81:40:9f:4f:17:d7:30:cf:
                    76:28:5f:9e:1d:a2:7f:b2:82:2f:42:b3:ff:6b:26:
                    46:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:BB:8C:A3:6E:36:1A:91:68:20:25:85:7C:FF:59:55:3A:DB:D3:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/706fac37-3e2e-329f-94f6-1c53acc6e6dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:6c:a1:28:99:c2:93:bc:3c:57:30:4b:8d:46:95:94:33:52:
         31:19:cf:83:14:ed:10:e0:fc:8c:a1:1a:ba:61:c1:f6:bb:ba:
         f2:13:3d:eb:b9:e1:52:d7:b2:5e:96:20:0d:12:37:39:38:f0:
         60:84:2d:92:2c:8b:6f:2b:5d:38:bb:65:6c:96:2d:e0:ec:b1:
         0f:9b:6c:1c:f5:81:b1:a3:05:91:1e:f6:ed:aa:d0:ae:83:a8:
         2a:5c:30:74:e0:7c:41:62:82:13:4c:c9:9e:87:64:ff:0f:02:
         2e:09:50:1d:af:38:1a:20:9d:e0:a4:10:aa:09:35:b3:20:00:
         8c:d1:1e:ab:96:c2:4b:59:40:dc:07:e6:d6:32:55:8e:c6:04:
         e6:ba:5b:59:19:3f:89:94:95:99:21:8e:f9:87:4c:f3:ac:12:
         bd:f7:64:3f:ee:ba:25:6b:d9:87:74:96:4f:18:d7:d8:75:6f:
         99:94:0b:6e:ba:ab:ce:56:27:d7:c9:8a:cb:a0:7d:c5:7f:ec:
         7a:42:8f:4b:7b:96:39:c8:a0:2a:90:cf:5a:c8:0a:f9:f5:c9:
         0e:a8:06:22:01:72:40:9d:50:56:e2:0a:77:13:55:41:4a:85:
         e3:5f:53:b1:5e:dd:ff:a9:03:3f:18:01:bd:ac:95:34:c2:21:
         af:f2:31:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:23:40 2026 by rpki-client