Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9f20d36-05ed-4189-8230-12eaed2b41c6/5bd80fd5-99c3-30da-b939-eda0b0c41eb5.roa
File:                     5bd80fd5-99c3-30da-b939-eda0b0c41eb5.roa (raw, json)
Hash identifier:          4tuK8aFtIAR7KMSN1bXRsgtvBIG6zig70DzCCkCi6ks=
Subject key identifier:   DA:23:46:E2:19:46:11:49:18:20:D2:D3:94:DC:0E:BF:58:DE:58:7A
Certificate issuer:       /CN=e9f20d36-05ed-4189-8230-12eaed2b41c6
Certificate serial:       010D0C9F4328584E66DA16CABA45861F832E7320
Authority key identifier: BE:DE:8D:B2:CE:87:15:43:E4:60:52:DE:90:9D:1B:C2:EE:88:EA:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9f20d36-05ed-4189-8230-12eaed2b41c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9f20d36-05ed-4189-8230-12eaed2b41c6/5bd80fd5-99c3-30da-b939-eda0b0c41eb5.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     72
IP address blocks:        192.58.38.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9f20d36-05ed-4189-8230-12eaed2b41c6/e9f20d36-05ed-4189-8230-12eaed2b41c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9f20d36-05ed-4189-8230-12eaed2b41c6/e9f20d36-05ed-4189-8230-12eaed2b41c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9f20d36-05ed-4189-8230-12eaed2b41c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:16:ca:ba:45:86:1f:83:2e:73:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9f20d36-05ed-4189-8230-12eaed2b41c6
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=1591c715-ced7-46bd-8c91-613683f3fc48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fd:d3:90:46:2e:a4:db:ca:ba:81:d2:80:22:
                    72:b1:0d:2f:59:c7:8b:ba:64:fc:67:3e:bb:04:bc:
                    ed:59:16:40:da:ee:7f:4f:d1:59:6c:0b:51:fc:ce:
                    8e:1b:b6:10:1a:34:f0:61:3c:ce:93:30:9c:ae:af:
                    8a:3a:dd:cf:a9:3a:a0:7a:06:ac:96:5a:64:eb:e9:
                    2f:88:fe:a0:13:0f:e5:e4:eb:6c:a0:ef:df:2a:5e:
                    ac:b0:58:ff:e9:ac:ba:51:6f:cc:6d:b5:69:c0:04:
                    51:19:bb:86:fc:e8:20:b6:8f:1c:7e:c2:78:d1:40:
                    d9:1e:e5:99:d1:cc:79:6b:65:7e:5f:69:ad:3b:55:
                    3c:31:e4:6e:6b:06:0d:10:b1:74:38:f4:ef:ac:7c:
                    49:21:20:91:f2:24:93:55:97:db:e9:ac:69:98:d6:
                    b1:8e:89:08:ac:a0:a2:75:06:b5:5b:5c:8a:69:9c:
                    23:4b:0c:52:1f:64:a2:d7:e2:1c:0e:75:99:15:50:
                    6d:98:04:7e:0d:9a:f6:12:27:20:e9:f0:62:c2:e8:
                    97:42:4f:05:f1:8c:d0:86:a9:ff:55:6d:3a:12:24:
                    78:95:86:c9:8e:e5:0a:26:1b:9a:9f:54:c8:c2:18:
                    9c:3c:af:b8:41:e9:34:4a:57:66:1f:26:c8:c8:6f:
                    1a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:23:46:E2:19:46:11:49:18:20:D2:D3:94:DC:0E:BF:58:DE:58:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9f20d36-05ed-4189-8230-12eaed2b41c6/5bd80fd5-99c3-30da-b939-eda0b0c41eb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9f20d36-05ed-4189-8230-12eaed2b41c6/e9f20d36-05ed-4189-8230-12eaed2b41c6.crl

            X509v3 Authority Key Identifier:
                keyid:BE:DE:8D:B2:CE:87:15:43:E4:60:52:DE:90:9D:1B:C2:EE:88:EA:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e9f20d36-05ed-4189-8230-12eaed2b41c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:50:b9:64:52:98:ee:ec:a1:8e:27:c3:f1:3d:0b:a3:eb:83:
         81:47:1c:03:5e:8c:ba:91:1d:ac:f5:2c:03:a8:b0:ae:7d:09:
         8f:1c:79:f3:dc:b6:29:63:38:38:9a:30:00:ba:af:44:28:2c:
         82:7c:59:02:0c:bc:6e:e1:50:a4:fd:1a:2f:c1:11:39:d6:23:
         44:67:24:50:fe:c8:6a:69:c2:8e:62:c5:a1:ad:b6:36:25:55:
         90:fd:0b:89:f1:45:97:a1:a8:da:bf:3e:8a:b8:2f:e8:dd:f5:
         1b:36:13:23:e5:25:a2:4c:de:82:27:e9:8a:bf:d0:39:5e:70:
         64:94:d1:8c:56:2a:fd:89:f4:09:84:2d:e9:e4:d5:65:96:ce:
         27:74:fb:b0:f7:7f:f8:76:de:c8:b1:e1:eb:e7:28:f2:b8:66:
         93:ea:43:14:8a:40:cc:bb:4d:fd:35:b1:27:d3:e7:5e:13:98:
         a0:7a:89:76:4c:2a:23:9d:9f:0b:c1:19:1b:8a:00:10:af:6c:
         6e:a2:3f:0a:89:46:30:61:85:90:32:76:18:37:be:e9:e7:7e:
         90:ef:76:3c:2e:a7:be:6d:cb:5b:96:26:85:92:48:7e:c4:69:
         9e:36:8a:27:76:43:01:df:5e:db:b3:7c:48:88:47:e7:7a:89:
         7b:48:23:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:52:20 2026 by rpki-client