Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/36273f28-a723-33e1-a389-9416819cddb6.roa
File:                     36273f28-a723-33e1-a389-9416819cddb6.roa (raw, json)
Hash identifier:          JVTTcLPf4Ss7lPQrvJHj35ayJhcIV3qRZz8wT2517oA=
Subject key identifier:   5F:D5:2C:6F:D5:2B:99:AA:74:2E:73:D0:27:05:EF:7D:28:E0:21:60
Certificate issuer:       /CN=cea06048-7bc3-4b65-8443-4c600b73bc11
Certificate serial:       010D0C9F4328584E736A1D57AFC548EF1B26B700
Authority key identifier: 72:FE:7D:19:0B:57:9A:DE:DB:61:5E:D5:D8:CB:60:5D:1F:50:AE:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/36273f28-a723-33e1-a389-9416819cddb6.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     21976
IP address blocks:        159.91.0.0/16 maxlen: 16
                          192.76.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/cea06048-7bc3-4b65-8443-4c600b73bc11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/cea06048-7bc3-4b65-8443-4c600b73bc11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:1d:57:af:c5:48:ef:1b:26:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cea06048-7bc3-4b65-8443-4c600b73bc11
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=affb5396-07ba-4ad6-9f0c-aaee8fd535ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5f:97:1d:97:8e:34:ee:cf:98:e0:f6:c2:02:
                    4e:72:51:d8:7e:29:35:fc:af:cf:6f:33:b6:34:47:
                    2a:f3:d5:08:b3:1f:7b:cb:50:3c:23:e5:92:de:1e:
                    5f:16:1b:03:ce:f4:3a:21:af:fd:47:f5:5e:f9:b9:
                    6d:82:22:40:b1:25:d7:92:f3:df:8f:cd:37:87:fb:
                    b0:97:03:cf:93:87:bb:c7:90:ea:1c:e7:c5:9d:85:
                    a5:11:8b:f9:23:fd:60:56:df:d1:ca:37:e4:29:52:
                    a1:11:80:b5:51:f1:fa:aa:b6:4f:18:95:50:5b:f1:
                    92:ec:44:e6:5a:10:ad:ac:63:6f:c1:52:a0:a9:1d:
                    05:0e:69:32:f8:8b:c6:70:cf:20:ef:cf:10:5c:5a:
                    91:dd:5e:65:e2:72:6f:7c:db:49:45:1a:68:5a:f0:
                    67:0d:25:a4:0e:75:85:70:6a:59:92:8a:6f:f9:e9:
                    5f:ce:7b:9f:a1:68:29:a2:7a:51:79:db:3d:d2:17:
                    90:bf:82:ed:e5:ac:8a:bd:61:8a:75:c4:e1:30:69:
                    6d:c5:b2:69:05:02:bd:db:c1:15:ab:51:00:ed:84:
                    0f:58:c4:3e:e0:95:b5:fa:40:8f:b7:00:2c:6a:bc:
                    39:e2:91:ed:b9:d2:59:b1:bc:f6:9e:07:38:3e:0a:
                    0b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D5:2C:6F:D5:2B:99:AA:74:2E:73:D0:27:05:EF:7D:28:E0:21:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/36273f28-a723-33e1-a389-9416819cddb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/cea06048-7bc3-4b65-8443-4c600b73bc11.crl

            X509v3 Authority Key Identifier:
                keyid:72:FE:7D:19:0B:57:9A:DE:DB:61:5E:D5:D8:CB:60:5D:1F:50:AE:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.91.0.0/16
                  192.76.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:ef:83:fb:c0:a0:0f:a5:30:bb:11:44:8c:09:e6:e2:c5:72:
         2f:9c:1a:87:46:b2:7e:d4:55:09:d2:15:71:6b:b5:c1:a9:08:
         18:3b:38:54:76:a9:af:c6:f2:bd:83:d6:52:3e:ce:eb:87:32:
         c3:36:39:05:cb:08:16:51:6f:9c:af:19:1a:08:d3:0c:ae:1f:
         b3:c8:d4:c6:7c:c3:97:3b:0e:55:da:ce:f3:87:95:07:e3:01:
         dc:e7:fe:ee:de:9d:b4:c2:71:42:9c:b3:f6:a9:b8:69:43:9d:
         a9:2f:76:43:b6:14:91:e0:53:66:4b:d6:93:71:72:f0:12:8f:
         32:b7:73:b3:cd:6b:f0:1a:b9:85:cc:73:92:f3:2e:f6:5f:18:
         c9:29:79:58:36:5e:20:bb:7e:ba:43:59:8a:a5:85:9a:8b:a0:
         d1:67:ec:6b:8c:1f:cd:c4:26:10:de:a9:a2:68:3d:54:8b:e4:
         d1:bc:c1:20:0d:21:83:e1:dd:a9:cb:ba:fc:8b:40:16:0b:3e:
         f1:6a:0a:57:38:ca:04:10:26:e7:34:dc:4a:d2:c3:70:af:cf:
         1c:19:1e:08:49:f0:b2:6e:0f:ee:b1:8f:f5:53:07:3a:b1:9b:
         22:5d:1c:21:6e:1d:a5:3b:8d:83:a7:62:e1:d0:ef:21:b5:47:
         f6:c9:ae:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:55:40 2026 by rpki-client