Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/eb96b8a6-7a4e-36fe-a3c7-af5767d94696.roa
File:                     eb96b8a6-7a4e-36fe-a3c7-af5767d94696.roa (raw, json)
Hash identifier:          rKJ/3s/Yef234RIYMlmrqzIJCLQQoMGr1fvDtTiyEn4=
Subject key identifier:   39:DF:E3:44:EF:C1:F7:78:B6:A5:F4:2F:6F:46:24:56:4C:DE:7F:B5
Certificate issuer:       /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Certificate serial:       010D0C9F4328584E90BA567283EDCC14B7388E00
Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/eb96b8a6-7a4e-36fe-a3c7-af5767d94696.roa
Signing time:             Mon 20 Jul 2026 21:00:11 +0000
ROA not before:           Mon 20 Jul 2026 21:00:11 +0000
ROA not after:            Sun 18 Oct 2026 21:00:11 +0000
asID:                     19905
IP address blocks:        170.10.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:ba:56:72:83:ed:cc:14:b7:38:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
        Validity
            Not Before: Jul 20 21:00:11 2026 GMT
            Not After : Oct 18 21:00:11 2026 GMT
        Subject: CN=0617b986-062c-42d3-a1ea-98da0c8596c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:92:3e:8d:d3:83:2c:49:56:5f:fc:8a:fb:56:
                    66:13:e6:e3:d5:7f:15:d2:15:8a:f8:a3:0e:69:b3:
                    5b:cf:e6:21:a0:45:64:17:ab:bb:d4:56:72:dd:15:
                    2d:e9:7d:2c:fd:20:fd:99:02:2a:fc:15:ff:cf:ed:
                    5b:40:29:ac:85:06:1d:1c:ce:30:92:04:27:18:89:
                    2b:de:f5:8e:0f:e8:79:94:e6:95:0f:53:16:5c:18:
                    5a:78:0c:be:11:6e:37:2c:5e:bd:ed:d4:72:83:2e:
                    b3:37:22:5d:68:9c:9b:b1:3d:b9:52:ff:17:60:73:
                    34:0e:ce:f6:2f:4b:f4:ae:73:63:ba:45:cd:5e:de:
                    07:0d:c0:08:00:35:f3:73:ba:82:38:a2:b1:ff:9b:
                    73:5b:e4:87:9f:da:8c:d2:82:d6:53:3c:83:58:ae:
                    6b:ba:df:42:93:03:02:9f:c4:bc:8e:c3:31:4b:00:
                    dc:af:f9:dc:3a:0f:7e:ff:df:3d:cc:80:a1:b4:5e:
                    11:f7:a4:4c:66:0c:7a:03:77:3b:54:a0:0e:7a:66:
                    65:30:72:1f:f0:3a:c4:ed:f3:41:09:06:62:3c:88:
                    f2:cd:91:85:df:23:1d:39:4a:a3:69:d2:9f:1a:4d:
                    d4:de:e3:fb:37:2a:b4:8c:f0:af:92:24:8b:42:1b:
                    ae:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:DF:E3:44:EF:C1:F7:78:B6:A5:F4:2F:6F:46:24:56:4C:DE:7F:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/eb96b8a6-7a4e-36fe-a3c7-af5767d94696.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl

            X509v3 Authority Key Identifier:
                keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:ee:ff:53:16:fe:cd:0f:e5:36:46:94:95:34:e3:d7:1e:04:
         a4:c3:80:1d:64:88:74:4d:11:aa:0d:74:bb:f9:0c:df:29:84:
         2f:14:db:31:ec:91:dd:13:85:c8:bb:a5:aa:6c:f1:ae:84:ea:
         5e:ba:99:df:d6:5d:0b:15:11:7a:b8:08:63:4e:50:44:09:ed:
         e1:56:82:aa:cb:73:0a:24:09:57:f6:fc:d2:b3:b4:7e:21:bb:
         98:16:c4:a1:3d:ea:0b:84:e6:07:2b:7e:b4:c9:91:df:1b:77:
         35:bf:3e:58:d4:bb:52:1f:de:a8:3f:8b:45:4d:e2:ae:4a:31:
         4e:37:14:58:35:80:20:45:6e:75:87:5a:38:ce:63:17:ab:db:
         d2:94:33:03:32:b6:c4:e6:6a:93:ea:31:4e:00:d4:cc:c1:95:
         7b:18:0a:8d:46:4f:d1:3b:fa:cf:66:8c:cd:a6:05:21:a9:57:
         a1:28:0b:28:a4:5a:f1:0d:4a:aa:4e:9c:dd:22:3a:ad:95:02:
         69:95:da:57:de:31:9b:7d:d0:37:e4:ea:16:00:40:b5:34:a9:
         ce:ce:84:62:1a:0a:9f:ed:3d:7c:f6:00:b3:9a:bd:bb:47:b1:
         a8:2a:9d:46:f0:e7:27:a3:35:8a:60:60:1c:b4:82:d1:14:a0:
         c5:ce:78:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:34:01 2026 by rpki-client