Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/6ef2c3a5-9db4-3136-a4f7-85d29e9a1865.roa
File:                     6ef2c3a5-9db4-3136-a4f7-85d29e9a1865.roa (raw, json)
Hash identifier:          9y9imiQscfEzuXsx5ylJhSsM9kD4Ktt6wvMuHYeQgvs=
Subject key identifier:   9E:2C:42:57:18:1C:3C:4D:16:1D:7D:0B:31:65:5E:A5:80:55:E8:6E
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F4328584D95EFEC8F588AE27EB3DAC500
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/6ef2c3a5-9db4-3136-a4f7-85d29e9a1865.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     10747
IP address blocks:        208.56.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:ef:ec:8f:58:8a:e2:7e:b3:da:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=56e3208e-7a55-40de-b8e4-8b8573936878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a0:ad:28:95:d5:eb:1e:37:63:ae:84:cb:50:
                    56:d3:40:a4:7a:59:bf:c5:6c:16:eb:b5:bd:9b:7a:
                    31:2c:07:67:8b:b4:92:0f:96:72:6c:5f:d2:61:8b:
                    27:a4:5c:82:35:76:82:66:4a:78:f0:bb:11:95:fa:
                    da:06:7e:e0:84:0a:6a:40:9c:73:52:c2:3b:14:2d:
                    86:4f:e8:32:39:99:8d:57:6f:d2:09:56:c0:3e:d0:
                    15:6d:a4:66:de:8b:95:6e:dc:c0:69:e6:21:64:a0:
                    27:a8:1b:91:d0:fa:69:1f:bf:51:3f:60:c8:99:44:
                    06:30:49:14:45:8e:7b:16:22:16:d6:e4:47:04:40:
                    55:26:6b:79:56:e6:7a:8d:1b:65:0c:11:e4:54:43:
                    0b:39:b0:5d:94:e1:da:49:d8:29:ac:1c:f9:a7:df:
                    9a:af:1f:8d:0e:8d:bc:34:98:42:6e:c8:9c:f6:a1:
                    30:48:00:b3:36:19:38:08:3a:88:2f:f8:60:13:c0:
                    e1:f6:ef:f1:fe:7a:08:0f:fb:c7:da:f3:4b:64:4b:
                    bc:80:7d:5c:d8:06:58:88:4e:f6:27:52:4d:13:a5:
                    f3:93:0d:91:96:0e:4f:c9:ae:98:f7:97:4a:26:71:
                    42:7e:f4:74:d0:61:b7:60:07:0b:a2:9e:d9:bf:bd:
                    b5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:2C:42:57:18:1C:3C:4D:16:1D:7D:0B:31:65:5E:A5:80:55:E8:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/6ef2c3a5-9db4-3136-a4f7-85d29e9a1865.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.56.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:41:ea:ea:45:25:33:32:80:b0:1b:a5:71:2e:79:07:b0:e2:
         ad:8d:b6:59:1b:28:6e:3e:48:05:8f:e8:d7:eb:e5:fc:fe:7d:
         a8:70:2f:ab:15:45:68:0f:3e:d1:6d:9e:1e:74:7c:e0:b4:3f:
         54:e0:ec:e6:fe:01:b5:7d:6b:a9:e1:e9:93:2d:39:90:2d:3b:
         69:79:36:36:f0:86:bb:59:f8:b1:df:75:6e:ff:d8:04:7b:05:
         0a:89:4b:b5:24:48:5c:da:39:78:ca:c9:e5:ee:6c:d0:e0:11:
         70:a7:8c:7b:6c:11:39:9a:71:ca:98:1e:bb:0e:5d:d6:a0:e8:
         67:0c:45:02:4b:2c:0d:4d:4e:43:46:f9:6b:cf:ea:8c:6a:c5:
         fe:c1:91:70:24:e3:60:09:92:6e:20:07:bf:28:26:36:a0:e2:
         a4:ca:e2:27:96:eb:69:b2:a2:92:c1:f8:43:3b:8f:96:e8:7d:
         a0:a0:a6:c0:5a:3c:16:72:ad:8b:30:4f:65:39:17:25:3d:17:
         f3:1d:15:13:ae:ab:4f:19:28:c8:bd:d6:67:3f:ad:57:7c:28:
         d2:75:0e:4c:52:42:a9:cc:70:d1:42:28:47:cc:d2:6b:15:f6:
         d1:78:1e:ef:61:cd:63:70:e1:df:3b:a3:f9:c5:8a:71:94:10:
         18:e5:46:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:37:10 2026 by rpki-client