Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/979eb01f-8991-4ed1-a753-931ecafd3350/1c907840-12ba-3cf5-be8c-1b7ac43ccdee.roa
File:                     1c907840-12ba-3cf5-be8c-1b7ac43ccdee.roa (raw, json)
Hash identifier:          CT7CCnW5jVvrS75j/SUR8GwYE+LlXzLeX1518mEfXVg=
Subject key identifier:   DC:45:46:10:10:5D:CF:AB:B6:4E:97:5E:2F:4B:94:CA:0A:E9:87:87
Certificate issuer:       /CN=979eb01f-8991-4ed1-a753-931ecafd3350
Certificate serial:       010D0C9F4328584E2D9F18C42E032F9C04381D80
Authority key identifier: 39:61:0F:9A:95:44:2E:7C:2A:F3:82:CE:B3:FD:84:A9:E8:48:03:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/979eb01f-8991-4ed1-a753-931ecafd3350.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/979eb01f-8991-4ed1-a753-931ecafd3350/1c907840-12ba-3cf5-be8c-1b7ac43ccdee.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     39287
IP address blocks:        198.167.192.0/19 maxlen: 19
                          2620:18:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/979eb01f-8991-4ed1-a753-931ecafd3350/979eb01f-8991-4ed1-a753-931ecafd3350.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/979eb01f-8991-4ed1-a753-931ecafd3350/979eb01f-8991-4ed1-a753-931ecafd3350.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/979eb01f-8991-4ed1-a753-931ecafd3350.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:18:c4:2e:03:2f:9c:04:38:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979eb01f-8991-4ed1-a753-931ecafd3350
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=285f7996-3576-4ef8-b52d-55f591412f17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9a:b6:93:65:6c:83:fc:fd:5e:a8:3a:35:a5:
                    9d:05:46:8c:4e:74:76:11:ff:3a:0b:8e:05:12:ba:
                    05:b4:2a:5b:73:03:bb:83:73:a1:32:69:50:de:a9:
                    36:70:69:d6:75:84:9d:0a:1c:06:13:a4:00:da:b4:
                    da:5a:52:a1:ba:b6:a3:f3:54:69:24:ca:73:09:22:
                    a2:dd:78:38:96:f8:01:c3:a2:64:58:78:98:1d:b6:
                    a1:ba:7b:7e:7a:8d:8d:6e:91:6a:a6:46:17:59:d4:
                    89:15:b9:43:5e:cf:db:de:62:04:57:e5:f5:1b:c0:
                    3d:51:21:b9:96:7f:b3:05:c7:7a:4a:75:d1:bf:f4:
                    ed:e0:38:4c:95:ea:71:67:34:30:49:03:0f:4b:6d:
                    47:c7:a3:5b:3e:39:0d:2e:44:68:39:6b:45:68:d1:
                    75:55:80:5d:bc:f5:cf:30:81:8e:07:1c:32:b5:b9:
                    fe:1f:b8:20:ec:bf:d2:7f:f3:58:b8:af:f2:f5:ac:
                    9b:84:74:45:e0:ca:3e:d8:a3:22:2b:f8:20:ae:12:
                    1b:d5:71:60:bc:a2:e3:01:86:b2:a2:45:5a:9c:78:
                    03:0b:15:a0:1b:ad:b4:5e:68:dd:71:c6:d7:d7:60:
                    bc:97:1e:5a:6b:a7:04:6d:cc:74:4e:63:b3:8f:71:
                    c6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:45:46:10:10:5D:CF:AB:B6:4E:97:5E:2F:4B:94:CA:0A:E9:87:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/979eb01f-8991-4ed1-a753-931ecafd3350/1c907840-12ba-3cf5-be8c-1b7ac43ccdee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/979eb01f-8991-4ed1-a753-931ecafd3350/979eb01f-8991-4ed1-a753-931ecafd3350.crl

            X509v3 Authority Key Identifier:
                keyid:39:61:0F:9A:95:44:2E:7C:2A:F3:82:CE:B3:FD:84:A9:E8:48:03:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/979eb01f-8991-4ed1-a753-931ecafd3350.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.167.192.0/19
                IPv6:
                  2620:18:c000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:03:19:89:e3:6f:1b:c3:4a:69:c6:31:df:77:0d:aa:03:90:
         77:09:46:a0:45:21:e4:31:13:fa:77:6b:29:77:42:d7:9f:5e:
         41:60:94:50:30:48:63:63:8e:41:2c:57:2c:03:b4:ea:13:4d:
         5a:db:b7:30:99:f2:fe:fa:83:ae:bc:88:53:f1:a6:a7:e2:bc:
         7b:0f:fb:ca:f6:a0:e7:78:36:21:30:95:35:6a:79:c6:5f:72:
         8a:f6:e5:70:bd:0b:45:60:33:b3:93:47:2b:bb:e7:ec:05:ed:
         9b:5c:3a:65:9f:8f:9c:a1:cb:52:77:96:5e:c1:3c:24:f2:50:
         33:47:d0:a8:7a:15:27:c0:ce:f5:11:4e:78:6f:66:43:53:81:
         d7:72:99:d4:29:56:46:8d:d5:de:fd:24:c0:87:ff:36:92:f1:
         c2:75:4d:9b:d3:df:f2:24:91:1b:fa:e5:ff:27:c0:c9:15:9d:
         14:0b:cf:bb:1f:ba:fa:13:31:01:4f:ff:ed:72:44:d7:4c:53:
         db:f4:df:1c:bc:e2:bb:53:8a:98:18:d2:f3:59:29:52:58:36:
         19:cc:54:5d:78:cb:4d:9c:e0:78:26:84:1e:70:52:2d:5f:ff:
         ad:69:64:f1:13:0a:3b:b7:50:9c:d3:a7:70:e5:70:7b:cc:ec:
         1b:89:8d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:12:24 2026 by rpki-client