Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/191cfb57-9384-3c94-905f-f6fb390f6a38.roa
File:                     191cfb57-9384-3c94-905f-f6fb390f6a38.roa (raw, json)
Hash identifier:          y5yTb78lqBDHNhFXujq1QExtNCUX1afn5u01u29au4g=
Subject key identifier:   83:E8:D9:79:F8:30:1E:E0:65:D9:28:58:83:6B:7E:98:21:C7:ED:73
Certificate issuer:       /CN=27960a41-3597-4b9a-8e79-80ae635ce8ff
Certificate serial:       010D0C9F4328584E4129DD68C8DE8FC1DD3D7F80
Authority key identifier: 28:0C:7E:95:36:A5:A6:AA:39:A9:D5:04:E5:8D:2A:23:AC:C9:21:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/191cfb57-9384-3c94-905f-f6fb390f6a38.roa
Signing time:             Mon 22 Jun 2026 09:00:11 +0000
ROA not before:           Mon 22 Jun 2026 09:00:11 +0000
ROA not after:            Sun 20 Sep 2026 09:00:11 +0000
asID:                     5719
IP address blocks:        192.12.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/27960a41-3597-4b9a-8e79-80ae635ce8ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/27960a41-3597-4b9a-8e79-80ae635ce8ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:29:dd:68:c8:de:8f:c1:dd:3d:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27960a41-3597-4b9a-8e79-80ae635ce8ff
        Validity
            Not Before: Jun 22 09:00:11 2026 GMT
            Not After : Sep 20 09:00:11 2026 GMT
        Subject: CN=47054c8a-cfdb-42e8-8f8c-3c1cab6ffd57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:67:b1:36:88:c1:13:0d:bc:b2:be:7d:c9:b9:
                    8a:bb:9c:c4:f1:3d:4c:ae:37:ff:e7:63:f3:bc:e7:
                    ef:88:3f:13:c2:95:2a:68:f4:b3:ad:ac:b6:25:17:
                    00:20:23:1d:88:97:ab:de:b9:69:1c:02:85:78:00:
                    98:6f:bc:9a:59:c1:16:26:a8:bc:53:37:f0:e3:20:
                    8f:92:dc:10:2a:71:2c:20:d4:0a:15:82:75:d9:4a:
                    75:74:be:09:3f:e5:c2:4e:89:99:25:59:cb:b6:0e:
                    e3:40:65:2d:ca:74:2d:0e:1e:23:e6:d7:7d:76:95:
                    68:00:b1:63:66:6e:06:51:db:e7:d8:1d:32:34:36:
                    15:e8:ab:be:82:ab:7f:3f:69:37:23:ec:f7:ef:be:
                    4e:8c:63:36:74:05:c9:0e:5d:1d:4d:4d:16:c5:2b:
                    e5:43:5d:72:ad:c4:38:a2:8b:45:8d:d5:da:cb:2b:
                    49:7c:87:98:0e:d2:46:a3:03:ff:1c:40:9d:e8:63:
                    58:3d:17:8c:c5:e7:7e:4c:4e:51:50:d1:e8:b2:c5:
                    f4:7a:40:78:34:fd:73:3d:17:cf:39:4d:a3:9a:61:
                    2a:e7:e6:2a:dc:15:9a:81:4b:46:a1:0e:1a:10:7a:
                    5f:99:86:f3:1e:8c:65:7c:7d:05:69:36:f2:b1:a6:
                    97:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E8:D9:79:F8:30:1E:E0:65:D9:28:58:83:6B:7E:98:21:C7:ED:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/191cfb57-9384-3c94-905f-f6fb390f6a38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/27960a41-3597-4b9a-8e79-80ae635ce8ff.crl

            X509v3 Authority Key Identifier:
                keyid:28:0C:7E:95:36:A5:A6:AA:39:A9:D5:04:E5:8D:2A:23:AC:C9:21:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:94:f0:59:16:96:69:a0:97:fb:c0:2b:53:21:b6:a9:e3:56:
         6f:3d:30:49:e9:80:4f:15:b8:2e:b3:e7:ca:b7:78:35:e5:fb:
         65:88:bd:3a:ba:5f:b8:c6:29:2a:f1:e7:4b:eb:b0:5f:35:67:
         85:7b:b3:29:76:d9:74:b3:24:0c:41:ad:8a:95:a2:24:80:a2:
         5c:bb:8d:dc:af:5c:d2:ff:82:56:53:36:47:ee:f1:86:45:a7:
         57:6f:fb:26:25:1f:7d:44:e8:ea:2c:8e:74:74:2d:2b:f4:d8:
         a4:b7:29:fc:09:4d:2c:9f:82:f2:7b:58:3c:e3:c1:0e:9a:06:
         a5:94:dc:bc:64:6b:a7:d5:fb:14:a4:dd:6e:99:1a:37:d5:47:
         dd:38:77:96:30:49:7a:5e:e5:7d:2d:84:58:40:9a:53:97:89:
         7a:09:0a:a7:3f:8f:0e:5f:99:9b:c2:09:79:9f:d3:21:d7:00:
         3d:44:8b:de:42:40:8d:9e:b1:11:ba:49:99:de:50:3c:9a:4e:
         29:3d:e0:25:da:08:6b:34:c9:83:eb:f1:ae:19:82:b1:58:54:
         41:d1:2d:e2:11:ec:de:20:19:a4:cc:ee:17:ff:56:47:a1:97:
         c4:57:47:ea:7f:71:5c:90:71:9e:30:f9:40:a0:fc:50:6c:bd:
         30:1f:9a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:56:52 2026 by rpki-client