Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/b71ae3d3-3211-3340-98c1-ef88fc51ee9f.roa
File:                     b71ae3d3-3211-3340-98c1-ef88fc51ee9f.roa (raw, json)
Hash identifier:          9+aAQ+Fw7TYeh5Vjion/zksRf0xRFARItFwWzS4+79o=
Subject key identifier:   B1:65:EE:5E:12:1C:35:C2:8B:A2:64:24:0F:7C:C2:65:0F:BD:8F:7D
Certificate issuer:       /CN=0f950b17-8345-41e7-bf75-5481729a0012
Certificate serial:       010D0C9F4328584E5BAF61774E495580A9D1D6C0
Authority key identifier: 56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/b71ae3d3-3211-3340-98c1-ef88fc51ee9f.roa
Signing time:             Wed 01 Jul 2026 21:00:12 +0000
ROA not before:           Wed 01 Jul 2026 21:00:12 +0000
ROA not after:            Tue 29 Sep 2026 21:00:12 +0000
asID:                     32723
IP address blocks:        216.6.142.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5b:af:61:77:4e:49:55:80:a9:d1:d6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f950b17-8345-41e7-bf75-5481729a0012
        Validity
            Not Before: Jul  1 21:00:12 2026 GMT
            Not After : Sep 29 21:00:12 2026 GMT
        Subject: CN=89b3a7af-7ff7-4359-8793-5a7c50a20898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f6:7a:f7:ba:6b:b6:aa:94:7e:c1:e0:a4:e7:
                    17:14:97:77:74:71:ed:85:2f:07:81:28:5f:bc:9a:
                    f7:40:ee:3d:82:6b:f3:cb:29:7c:99:f0:b2:8a:fb:
                    56:e4:0b:d1:34:01:f9:0d:af:c8:d0:97:07:40:ef:
                    c7:41:a1:ad:b7:fd:e7:c2:7f:2f:14:c9:ec:c1:cc:
                    c7:f5:f8:29:9e:44:e3:bc:66:0b:55:93:7c:4f:cf:
                    de:32:07:d1:98:e0:60:fe:56:55:e7:89:ff:84:e3:
                    17:ca:64:0c:8e:9f:36:ea:13:df:46:ea:a2:0d:3d:
                    21:aa:9e:0f:5c:d9:85:bc:bc:0c:ac:e3:b5:1c:e5:
                    25:c7:ca:c9:36:86:ee:ed:b7:9b:7d:e2:c1:fe:92:
                    a0:c0:fe:ca:b7:f9:06:ef:fe:10:2b:ec:eb:f6:79:
                    8e:cb:df:e8:e1:7f:b0:e4:14:31:77:c1:1e:0b:87:
                    cc:64:99:41:ac:8a:00:20:0e:00:9c:04:65:98:f4:
                    00:be:02:88:d0:16:5d:5a:c1:60:07:15:f0:7c:cd:
                    bf:a8:33:e1:bc:33:3d:a0:96:85:f0:69:2c:8e:99:
                    32:8e:39:fe:e3:96:fd:78:1f:72:e5:cf:17:64:b8:
                    d6:1c:db:ee:c8:3c:c6:a7:3f:0a:d9:f1:56:33:2b:
                    c8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:65:EE:5E:12:1C:35:C2:8B:A2:64:24:0F:7C:C2:65:0F:BD:8F:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/b71ae3d3-3211-3340-98c1-ef88fc51ee9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl

            X509v3 Authority Key Identifier:
                keyid:56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.6.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:8f:f6:78:6e:e8:d4:f5:5a:0d:10:6f:8b:ad:1d:79:7c:ab:
         f5:7f:04:c2:1b:46:3a:da:e3:31:e3:78:de:d5:7d:42:01:dc:
         a5:a2:be:fa:b5:66:bb:03:91:32:25:55:40:7b:0f:7e:b4:c5:
         d8:af:97:77:0b:e7:21:7e:88:de:31:69:8d:96:78:12:43:ec:
         73:cf:04:7d:d3:0b:ff:30:43:a1:73:46:cf:52:1c:4a:1a:06:
         ff:f6:25:16:c0:00:f9:de:d3:91:df:53:20:82:ed:2f:79:ca:
         d9:89:6d:02:49:2c:0f:57:7c:89:cc:5d:bd:d8:b8:5e:cf:54:
         24:05:76:17:a9:c9:b5:0f:90:ff:61:72:35:c4:18:61:68:ed:
         31:48:6b:fc:05:5e:e8:0c:d1:c5:54:33:00:6e:4f:4a:58:fd:
         92:d9:01:05:17:bb:61:ab:38:2d:81:f7:49:11:4c:03:59:f1:
         08:df:76:0a:9b:24:75:ff:6a:ea:12:91:52:76:bf:36:8c:23:
         04:f1:27:db:49:13:a2:ce:84:e4:bd:d8:ce:0f:23:e7:d5:ac:
         45:6e:50:9e:f4:31:6f:aa:00:af:a2:93:99:f3:61:74:f8:e3:
         76:21:3e:4a:81:54:07:28:d3:94:d4:d3:a7:34:44:94:ba:91:
         c6:2f:b0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:10:38 2026 by rpki-client