Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/cd34bd7e-ac13-33b7-a1d8-365545eb31f2.roa
File:                     cd34bd7e-ac13-33b7-a1d8-365545eb31f2.roa (raw, json)
Hash identifier:          ByDG4cGQgXTOPl1DzuVqi44kmJ/rMPW0xudYF3hOPG4=
Subject key identifier:   33:96:B1:A7:58:CD:B8:99:D3:7A:20:DA:C4:28:69:B2:35:50:0B:98
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F4328584E7FFA51E39685EE5D49336FA0
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/cd34bd7e-ac13-33b7-a1d8-365545eb31f2.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     20454
IP address blocks:        192.240.196.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:51:e3:96:85:ee:5d:49:33:6f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=57434c40-68c2-464d-b629-a4a439ae05c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:93:e8:c0:37:01:11:9a:07:cd:c2:1e:b9:45:
                    b8:7f:41:c3:11:da:ea:d6:39:5a:b1:81:28:6f:0b:
                    9d:2a:ad:09:37:62:60:6c:0f:e0:a2:16:81:c1:d1:
                    f4:40:ba:b4:73:78:db:3a:46:04:04:3b:cc:82:bf:
                    52:c9:ba:ef:72:37:b6:c4:b8:6e:fd:c8:3c:6d:9f:
                    49:35:5e:88:41:63:38:83:db:fa:15:8e:aa:df:6a:
                    18:c6:94:17:7a:49:7d:59:83:e8:b5:8c:d8:8e:64:
                    f1:28:e3:05:ed:a8:36:99:93:e8:e1:24:e0:7f:6b:
                    f2:c4:ef:d6:03:99:4b:24:be:fb:ce:83:e2:2b:83:
                    f5:e2:ae:19:26:c4:de:ed:69:33:63:2a:15:05:c3:
                    59:e6:5c:76:1b:45:a4:dc:ae:84:c0:af:aa:00:a5:
                    7c:15:35:fd:75:91:2e:9b:82:a6:02:ac:9b:99:8e:
                    eb:e1:3c:1b:c1:c5:b8:3d:4c:b4:1b:40:f6:fa:37:
                    be:33:50:10:b7:3b:88:6f:32:a7:41:e4:d2:26:94:
                    e0:c6:59:6b:cb:65:00:3e:12:60:0b:0e:82:4a:43:
                    df:11:46:cd:e4:7f:70:f3:7d:ce:87:c3:1a:56:10:
                    38:0d:d7:5e:c3:36:0c:fe:25:11:17:99:83:54:25:
                    5f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:96:B1:A7:58:CD:B8:99:D3:7A:20:DA:C4:28:69:B2:35:50:0B:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/cd34bd7e-ac13-33b7-a1d8-365545eb31f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.240.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:b4:00:78:ab:8d:64:84:f7:e2:56:28:2e:3e:de:94:72:c4:
         d4:a5:5e:f5:99:da:ba:73:55:e2:54:f3:a9:19:2e:08:20:20:
         e1:0f:75:a1:93:a7:44:ae:b5:aa:bc:37:b7:64:78:15:d9:d4:
         ac:85:ef:e8:b4:c3:1d:6a:00:ce:ce:e4:dd:b3:29:88:eb:20:
         28:78:88:16:88:cb:5c:7d:b7:d3:b8:ec:82:db:ce:4f:fd:1d:
         f0:98:84:cf:32:24:db:aa:9a:a6:b3:7c:8e:6f:20:a3:10:36:
         d3:43:1e:e8:89:dd:37:03:a8:82:eb:43:d0:ec:e3:9a:29:41:
         f0:da:39:df:ac:7c:10:a6:15:51:0d:9e:c6:3f:96:e2:27:06:
         59:45:df:9b:7a:da:87:74:a1:59:b4:a7:c6:5f:55:b9:1e:17:
         d0:7a:6a:81:32:25:4e:8d:90:7e:03:c3:fe:9b:b6:a8:c2:c5:
         73:94:d4:4a:40:02:2a:7e:57:5f:f8:fd:84:d5:28:7d:6b:42:
         4d:65:fe:be:0d:0b:62:f9:e7:33:c8:88:ba:0f:a8:3d:d6:67:
         0a:89:fb:6b:b2:56:fc:a9:56:c7:45:b2:53:a5:b7:29:58:b5:
         9a:17:c3:ff:e3:77:dd:e4:60:fe:7d:18:f3:15:9d:35:66:98:
         cc:8b:93:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:25:30 2026 by rpki-client