Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/7d869d29-6f25-3d02-84e2-f2a39f73e120.roa
File:                     7d869d29-6f25-3d02-84e2-f2a39f73e120.roa (raw, json)
Hash identifier:          Lonl6ILSJl+Cl8C/CQG/YBVGXHrc3G9HsYFqqOXXH5A=
Subject key identifier:   F0:51:F1:81:4C:D7:22:2E:C2:DE:C2:7A:79:C1:02:1B:57:61:0A:7D
Certificate issuer:       /CN=ebee18c5-4e70-47ae-a5d0-702b8fb2916b
Certificate serial:       010D0C9F4328584E7E94F329B0CC400D9A437800
Authority key identifier: 08:BA:10:3B:00:83:2A:3C:49:0B:6B:D6:F6:7F:30:16:C0:CC:C2:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/7d869d29-6f25-3d02-84e2-f2a39f73e120.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     2698
IP address blocks:        192.188.160.0/24 maxlen: 24
                          192.188.161.0/24 maxlen: 24
                          192.188.162.0/24 maxlen: 24
                          192.188.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:f3:29:b0:cc:40:0d:9a:43:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebee18c5-4e70-47ae-a5d0-702b8fb2916b
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=2a99609b-390d-4716-9553-bd23e7619419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4d:e5:2b:4a:18:d1:dd:85:df:0e:76:3b:a3:
                    12:97:27:6b:9f:97:b5:b6:d3:5d:8b:8a:7b:cb:59:
                    ec:e6:28:c9:ef:8b:60:89:c1:2e:91:4a:6b:4e:06:
                    fe:3f:87:b2:2e:8f:c9:17:60:3b:58:f3:b8:62:95:
                    72:af:71:73:13:67:e4:05:bd:5a:c8:d6:4a:b3:83:
                    83:af:51:75:7f:cf:8d:84:fa:8c:f1:95:21:7a:49:
                    57:fb:d0:b1:fd:33:f4:d9:4d:84:bf:a0:03:c4:3f:
                    98:03:8a:52:89:b7:6b:7f:b1:ae:b8:6c:fc:a7:52:
                    62:aa:ff:d5:e2:c7:67:68:78:eb:96:d1:d0:58:e5:
                    92:fe:54:71:15:11:12:d8:64:b6:65:08:6e:10:77:
                    51:c5:8a:52:b2:b8:d0:60:ad:01:95:b3:8f:33:9c:
                    ad:33:c2:f5:a7:f0:09:47:bd:ab:0b:bb:40:76:44:
                    ae:c6:7b:59:05:1f:0b:92:3d:cb:8c:65:f8:cc:79:
                    dc:8e:17:ed:c9:54:c9:a6:a7:ba:07:da:f7:0e:7b:
                    16:0a:a2:23:2e:62:f0:35:14:82:b7:97:48:57:6a:
                    da:d9:6f:cc:fa:37:18:5a:32:4d:a6:87:20:9c:58:
                    65:b4:98:f2:63:5d:ea:89:df:17:82:35:fc:98:a4:
                    27:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:51:F1:81:4C:D7:22:2E:C2:DE:C2:7A:79:C1:02:1B:57:61:0A:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/7d869d29-6f25-3d02-84e2-f2a39f73e120.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.crl

            X509v3 Authority Key Identifier:
                keyid:08:BA:10:3B:00:83:2A:3C:49:0B:6B:D6:F6:7F:30:16:C0:CC:C2:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:02:26:be:21:43:7d:b3:57:8c:f4:c7:94:1f:9d:2a:d7:00:
         d5:88:4c:98:f5:f7:fa:da:2d:c9:2d:90:62:01:ba:7a:0a:71:
         80:34:aa:1d:a8:e1:93:f9:9a:86:23:9b:8e:50:97:9d:c4:82:
         59:a1:b7:6c:0e:8a:42:29:4d:a3:3f:b7:71:f9:ab:c7:ae:73:
         1f:3a:f5:25:15:65:21:f8:cc:e1:ee:fd:ca:3f:81:f1:51:d5:
         87:50:3c:83:a8:07:b7:72:fc:e0:d9:08:00:ef:52:60:85:f1:
         30:a0:da:bb:c2:7d:80:2b:12:b5:7c:5b:d3:d7:70:c3:7f:db:
         59:9a:a4:cb:b3:08:b1:1d:9d:b1:fd:3a:84:60:82:f1:9c:2f:
         39:df:08:37:3f:5c:84:c3:02:29:c8:e2:bb:86:58:98:12:cc:
         71:0a:b6:34:67:56:1f:2a:87:4c:65:9f:ef:5a:db:b3:62:82:
         fd:72:25:b5:91:90:e4:84:1c:b2:f1:b2:ab:84:18:58:ee:1c:
         43:05:2a:48:59:52:86:a3:1c:77:25:2e:90:3b:bd:ae:eb:24:
         49:0d:b8:ed:53:2d:4c:80:71:99:0f:06:8c:a3:ca:f2:ee:f5:
         dd:4d:17:6a:d7:57:ba:b2:74:64:8c:b8:66:94:a5:be:25:d6:
         49:f3:9c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:09:02 2026 by rpki-client