Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34468021-d790-42b8-b3cd-5d1592500820/804e3ac2-7ae9-3b1e-9475-f181eb16d8f5.roa
File:                     804e3ac2-7ae9-3b1e-9475-f181eb16d8f5.roa (raw, json)
Hash identifier:          XxAU/6sxidEvcm+JG2Xoyc+hpjvkIQirGWmTZX3bymo=
Subject key identifier:   A1:BE:1D:66:61:02:10:F5:E3:5F:9A:E0:C0:1D:7A:66:34:46:8E:95
Certificate issuer:       /CN=34468021-d790-42b8-b3cd-5d1592500820
Certificate serial:       010D0C9F4328584E7634DC9B1500C4DCA3AFE080
Authority key identifier: 19:F8:D5:36:C3:9B:08:64:5A:8B:23:D7:BD:26:24:E7:59:FD:95:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34468021-d790-42b8-b3cd-5d1592500820.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34468021-d790-42b8-b3cd-5d1592500820/804e3ac2-7ae9-3b1e-9475-f181eb16d8f5.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     399912
IP address blocks:        216.73.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34468021-d790-42b8-b3cd-5d1592500820/34468021-d790-42b8-b3cd-5d1592500820.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34468021-d790-42b8-b3cd-5d1592500820/34468021-d790-42b8-b3cd-5d1592500820.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34468021-d790-42b8-b3cd-5d1592500820.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:dc:9b:15:00:c4:dc:a3:af:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34468021-d790-42b8-b3cd-5d1592500820
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=a87ed53a-b7bd-4b7e-a55f-039e4552760a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:29:bf:f7:a8:54:89:9d:c6:c1:9f:11:72:e4:
                    17:af:93:0c:99:01:08:5b:48:ea:b1:98:bd:21:97:
                    28:1e:b0:6c:16:b3:ca:ff:31:58:92:25:40:8e:ad:
                    6e:c8:c8:81:bd:91:8f:f2:cd:ba:9e:d9:3d:45:ee:
                    d5:3a:81:7a:89:1c:66:13:d9:1a:34:d3:6b:a5:5c:
                    17:96:85:6b:db:d8:f5:fd:9b:c0:0a:82:53:05:12:
                    cb:0f:70:6f:2e:68:90:48:cc:c2:50:1f:29:ac:b2:
                    5a:e8:df:75:97:42:60:bc:8a:25:b4:e2:a3:5a:f0:
                    76:0d:72:23:00:2c:dc:72:22:51:a8:55:ba:79:b6:
                    65:f9:10:ff:2a:ad:eb:91:25:97:a6:79:33:0e:da:
                    4d:2e:42:59:65:cc:22:db:f8:0a:eb:a8:d9:fe:64:
                    73:f9:35:c6:28:ea:af:70:5c:b9:65:72:5a:f3:3a:
                    0d:b9:bb:2e:c9:d8:e0:ee:75:38:07:7f:7b:2f:37:
                    34:22:e6:47:ca:fc:6f:ef:71:90:ca:20:0d:44:c7:
                    4b:b4:18:6c:2e:e0:cd:10:f9:cb:5f:10:8f:5d:f7:
                    ed:d9:11:e7:59:c7:3a:a6:de:a3:da:b4:f8:09:5b:
                    16:82:da:17:d7:fb:91:e5:9e:e7:dd:b2:66:86:a1:
                    6f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:BE:1D:66:61:02:10:F5:E3:5F:9A:E0:C0:1D:7A:66:34:46:8E:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34468021-d790-42b8-b3cd-5d1592500820/804e3ac2-7ae9-3b1e-9475-f181eb16d8f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34468021-d790-42b8-b3cd-5d1592500820/34468021-d790-42b8-b3cd-5d1592500820.crl

            X509v3 Authority Key Identifier:
                keyid:19:F8:D5:36:C3:9B:08:64:5A:8B:23:D7:BD:26:24:E7:59:FD:95:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34468021-d790-42b8-b3cd-5d1592500820.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.73.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:eb:b7:0e:b5:5e:7b:22:f7:32:86:4c:8d:48:c0:66:96:2e:
         d6:fa:ac:78:8b:47:77:43:2c:f9:c6:34:fb:20:dc:99:78:0d:
         e2:39:20:05:9e:d0:f1:90:6f:0c:70:6b:e1:fe:72:a4:ab:dc:
         6d:04:cc:77:99:3e:44:33:2d:4f:e8:ec:52:3e:e2:b6:10:ec:
         d8:79:23:09:39:d4:c1:da:4e:05:94:13:16:dc:09:5a:4c:0b:
         9e:f1:7d:c1:26:fa:96:8f:50:72:43:c1:b3:fd:51:b1:9f:de:
         b2:f8:3f:ef:73:cc:71:e6:78:b4:06:4b:41:e0:0a:56:20:db:
         79:3f:de:52:1b:f8:41:66:f2:40:da:d2:0f:54:5a:f9:24:7a:
         13:d7:b9:d7:56:fb:fc:64:ad:cb:37:d5:73:50:64:65:41:be:
         cd:dd:35:a5:ff:1b:fe:bb:78:80:70:3a:d8:8a:3a:34:50:7d:
         0a:20:3a:2c:6b:5f:f1:7e:14:49:3c:d2:07:95:4f:98:86:c4:
         16:e3:4c:c2:27:20:e5:50:c5:d7:7b:ec:7c:72:3b:b0:1d:bc:
         2a:ad:02:dd:45:16:bd:12:12:eb:59:1b:2e:25:b8:ae:38:20:
         fa:5e:97:40:fd:ee:1b:4e:0e:24:35:95:90:5a:62:14:d0:06:
         8a:fb:71:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:16:41 2026 by rpki-client