Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/d24e1119-5be2-3190-a36f-e8056d9c96aa.roa
File:                     d24e1119-5be2-3190-a36f-e8056d9c96aa.roa (raw, json)
Hash identifier:          JbUK2HS83Hx4Z4586oG51ha5v9D9f0Ejv7KHomRjXwk=
Subject key identifier:   B6:B7:ED:34:3D:1F:A0:EE:B5:75:AB:18:73:5B:09:11:07:9C:A7:91
Certificate issuer:       /CN=e8344a1b-565c-4cdf-b2ee-9556f276e3b6
Certificate serial:       010D0C9F4328584E7A64DD65DF2B0A0A1E1557C0
Authority key identifier: 26:7C:FE:57:A0:4A:CC:73:CA:2A:1C:0B:3E:7C:C5:1E:7F:AF:95:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/d24e1119-5be2-3190-a36f-e8056d9c96aa.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     16509
IP address blocks:        192.172.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:dd:65:df:2b:0a:0a:1e:15:57:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8344a1b-565c-4cdf-b2ee-9556f276e3b6
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=f32b1cb2-295f-42c4-9408-a5dce03922f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a6:e6:5f:68:64:31:55:37:31:58:77:8b:71:
                    fa:7d:48:3b:d3:9a:2b:2f:df:3f:98:04:0a:13:ba:
                    5c:69:31:20:a4:07:29:ce:3f:f1:95:13:0c:71:f3:
                    58:5a:2f:03:6e:8a:f0:0d:6c:a4:d8:73:40:4b:a9:
                    6a:97:03:c6:4b:02:f6:77:ef:c9:02:a8:3a:4a:c1:
                    68:35:b9:47:9a:8f:a4:4e:a9:47:3a:08:1e:6c:10:
                    34:b5:08:94:01:26:e6:78:6e:1c:1a:29:56:f1:43:
                    b4:1e:a5:54:9b:ba:67:c7:7b:e1:bd:9c:2b:e6:3b:
                    66:78:30:a6:0c:d8:7c:1d:01:e5:14:1e:e0:cc:8d:
                    35:5e:90:8b:bc:6a:ba:98:35:f2:04:08:02:da:72:
                    fa:87:64:de:f3:31:7c:1b:2c:9a:97:76:5f:04:72:
                    95:e9:07:03:e5:dd:9d:d7:b1:b0:5f:f0:72:7d:5b:
                    bd:80:5d:23:9e:7e:7c:0e:50:6f:f4:5d:94:8a:d9:
                    1c:22:b5:31:b8:b0:4a:6f:61:bb:46:49:2e:13:ee:
                    85:a4:e2:cb:af:70:7e:a4:7e:87:f6:5f:fb:e2:5b:
                    14:d7:36:c0:60:3b:d5:1b:19:82:d5:ac:c1:ee:c0:
                    3d:6f:35:bc:bc:60:f0:fe:e5:02:01:54:d7:d6:83:
                    6e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B7:ED:34:3D:1F:A0:EE:B5:75:AB:18:73:5B:09:11:07:9C:A7:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/d24e1119-5be2-3190-a36f-e8056d9c96aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.crl

            X509v3 Authority Key Identifier:
                keyid:26:7C:FE:57:A0:4A:CC:73:CA:2A:1C:0B:3E:7C:C5:1E:7F:AF:95:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.172.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:53:51:4c:39:29:e3:f7:32:b7:e0:74:8f:e0:5b:0e:4a:9d:
         e2:94:10:03:7a:5e:49:2e:5b:3f:9f:be:78:91:ab:9d:2d:13:
         92:30:44:66:10:d0:e8:3d:38:c5:ce:fd:af:4a:8e:73:03:6a:
         a5:c8:92:30:56:48:5f:a9:dc:22:e6:57:2c:0e:64:28:68:3d:
         a3:0d:83:e5:e3:d0:0b:69:1b:04:d6:7c:80:b6:4a:75:6c:8c:
         86:0d:8e:c8:f1:0e:6f:10:eb:9f:91:5b:32:6a:4d:10:6f:5f:
         19:68:78:22:29:08:71:94:19:00:b1:af:ae:29:09:9e:76:3d:
         a8:85:cd:30:38:d2:00:40:d6:a0:e0:51:7f:10:c9:d4:cf:e4:
         8e:99:5f:ee:fa:16:af:c4:ef:f2:85:54:a5:99:74:b5:fa:fd:
         5d:ac:c4:de:e2:ca:a6:cd:d2:6d:a2:32:6a:db:43:47:dd:2e:
         c2:58:2a:2c:f6:bb:dd:fd:0e:9a:b2:5a:2f:bb:1e:2a:9d:05:
         38:05:c6:86:90:29:01:bc:08:bb:17:80:36:3f:aa:84:0e:c9:
         a6:e3:02:9b:86:ea:9e:ed:9d:61:14:35:3d:84:cd:0f:ed:94:
         46:f6:8c:2e:49:21:ea:89:14:9f:8a:b7:ae:4d:04:85:84:b0:
         bb:c2:44:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:02:15 2026 by rpki-client