Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/561b6716-a33e-44ad-bdb0-ba8447deebf7/d9dcfb0e-2184-3838-b643-8f636ac97281.roa
File:                     d9dcfb0e-2184-3838-b643-8f636ac97281.roa (raw, json)
Hash identifier:          MZP50rY/I6/s7X3Nm6j+r6u8vpdtIB/GPYvD08nup/M=
Subject key identifier:   F9:BE:FC:9F:AE:42:F4:EB:00:8D:5F:9A:A6:36:51:6E:0C:0C:7B:2A
Certificate issuer:       /CN=561b6716-a33e-44ad-bdb0-ba8447deebf7
Certificate serial:       010D0C9F4328584E8B24E635D893B811CA157E20
Authority key identifier: 0E:4F:87:BC:56:5F:81:A9:DF:5F:6D:D7:E8:BF:A7:20:EE:BF:BE:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/561b6716-a33e-44ad-bdb0-ba8447deebf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/561b6716-a33e-44ad-bdb0-ba8447deebf7/d9dcfb0e-2184-3838-b643-8f636ac97281.roa
Signing time:             Sat 18 Jul 2026 21:00:11 +0000
ROA not before:           Sat 18 Jul 2026 21:00:11 +0000
ROA not after:            Fri 16 Oct 2026 21:00:11 +0000
asID:                     19917
IP address blocks:        192.80.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/561b6716-a33e-44ad-bdb0-ba8447deebf7/561b6716-a33e-44ad-bdb0-ba8447deebf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/561b6716-a33e-44ad-bdb0-ba8447deebf7/561b6716-a33e-44ad-bdb0-ba8447deebf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/561b6716-a33e-44ad-bdb0-ba8447deebf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8b:24:e6:35:d8:93:b8:11:ca:15:7e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=561b6716-a33e-44ad-bdb0-ba8447deebf7
        Validity
            Not Before: Jul 18 21:00:11 2026 GMT
            Not After : Oct 16 21:00:11 2026 GMT
        Subject: CN=446d4d9e-fd99-4914-8202-27fc604a6ddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bd:af:3a:ec:d5:2f:c4:1c:87:40:79:c6:9d:
                    85:f0:23:ed:0a:22:ff:e6:08:55:da:87:80:27:32:
                    5f:db:b8:9e:9c:ac:ea:43:bd:2b:00:a4:d3:33:1f:
                    06:23:bc:77:54:89:47:c3:c2:b5:22:ab:16:39:56:
                    7c:49:9d:d9:f9:a1:dc:ad:73:fb:19:e8:9c:b3:84:
                    55:eb:16:d4:ef:56:8b:63:ab:ba:b2:12:2c:62:4c:
                    09:8f:24:46:0f:e7:51:68:a9:15:2c:24:93:a9:8f:
                    a1:a1:ae:ac:3c:2f:5c:58:8c:b0:f4:1a:2d:c9:cc:
                    bc:ba:f1:00:f7:4d:47:08:c9:ec:59:52:aa:d1:d1:
                    87:5c:4d:6d:9e:a8:46:16:ec:d0:aa:e4:27:22:0d:
                    23:38:80:2b:44:b2:5a:ec:68:bb:a0:89:70:ab:d7:
                    b7:74:38:7c:01:b3:40:06:f3:84:02:e1:18:f4:1b:
                    95:dd:f0:b3:b0:63:bf:0d:17:1c:4b:9e:98:2e:f2:
                    90:83:94:3e:c5:8d:2d:40:c2:d5:24:ea:f4:ae:a2:
                    ab:25:8f:00:c1:07:82:37:f7:d5:7a:d0:ca:98:bc:
                    3c:ea:0a:c6:45:6f:f7:ed:23:35:24:8a:d2:e3:e7:
                    9d:a2:c0:8f:ec:14:ce:6a:a1:0b:1f:34:5e:bb:39:
                    24:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:BE:FC:9F:AE:42:F4:EB:00:8D:5F:9A:A6:36:51:6E:0C:0C:7B:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/561b6716-a33e-44ad-bdb0-ba8447deebf7/d9dcfb0e-2184-3838-b643-8f636ac97281.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/561b6716-a33e-44ad-bdb0-ba8447deebf7/561b6716-a33e-44ad-bdb0-ba8447deebf7.crl

            X509v3 Authority Key Identifier:
                keyid:0E:4F:87:BC:56:5F:81:A9:DF:5F:6D:D7:E8:BF:A7:20:EE:BF:BE:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/561b6716-a33e-44ad-bdb0-ba8447deebf7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.80.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:90:77:f6:28:1c:19:01:73:09:ef:2b:d9:8e:7b:89:f9:2e:
         99:46:f5:38:57:26:0b:9b:8f:d8:1a:1c:14:fe:9a:94:6c:4e:
         44:93:f1:7f:6e:6b:dd:77:b0:f5:a2:54:64:76:45:41:b6:17:
         88:bb:f2:ac:99:59:5f:be:93:4f:21:fa:b0:7d:3a:af:29:93:
         f0:f6:7c:ed:26:37:b7:af:3f:4d:1a:ef:8a:f4:77:9f:7f:66:
         95:0f:2b:e7:11:a4:5b:99:e2:fc:16:93:f2:6a:7f:2b:26:71:
         1d:6d:78:9b:4d:f5:78:ef:41:aa:6c:c3:fe:1e:b4:f9:b8:31:
         a9:53:a1:44:de:c5:d2:38:5d:c0:9a:2b:2a:d5:fc:14:2a:23:
         6d:06:75:84:44:96:2a:a9:29:c3:56:be:f4:c9:56:ee:dc:c6:
         d8:9e:22:58:e5:60:12:42:87:4e:25:66:aa:8b:ec:24:17:54:
         85:91:80:ea:25:c6:54:a2:45:99:45:41:db:3b:93:9e:06:91:
         64:ed:83:f6:72:b2:68:ae:6b:91:bf:d3:eb:74:ce:bc:d2:b4:
         17:6b:a5:16:71:c5:74:7d:db:82:be:7d:13:97:00:0e:fd:52:
         cb:43:14:37:f6:2d:ca:e6:ab:2f:17:84:6a:8b:9f:bb:1d:41:
         c0:35:85:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:09:09 2026 by rpki-client