Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/848bbd29-5bc4-39b5-be9c-b90b75f8a7a1.roa
File:                     848bbd29-5bc4-39b5-be9c-b90b75f8a7a1.roa (raw, json)
Hash identifier:          WIJWWwXxVmvzNMW1YSIPjM9VhxJmXShXEQYzr4d2AMg=
Subject key identifier:   9B:7D:9B:02:DB:A2:BB:3D:8A:3A:D9:11:57:3C:11:CB:C0:A9:6F:41
Certificate issuer:       /CN=a1ffc192-d4a8-4189-bab2-ce7a37ea683c
Certificate serial:       010D0C9F4328584E8B24F6955E0CE72965CD53A0
Authority key identifier: 68:BB:AC:66:A8:07:8B:85:E6:ED:9C:01:3D:C2:35:BD:D2:A7:AB:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/848bbd29-5bc4-39b5-be9c-b90b75f8a7a1.roa
Signing time:             Sat 18 Jul 2026 21:00:11 +0000
ROA not before:           Sat 18 Jul 2026 21:00:11 +0000
ROA not after:            Fri 16 Oct 2026 21:00:11 +0000
asID:                     398774
IP address blocks:        209.250.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8b:24:f6:95:5e:0c:e7:29:65:cd:53:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ffc192-d4a8-4189-bab2-ce7a37ea683c
        Validity
            Not Before: Jul 18 21:00:11 2026 GMT
            Not After : Oct 16 21:00:11 2026 GMT
        Subject: CN=8d9f1c55-42e8-4866-9e7d-d4238cb92f19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:73:88:b9:24:c9:fc:c9:72:6a:40:a0:fa:34:
                    88:9b:0f:bf:f5:2b:23:a9:06:33:bd:58:62:ac:15:
                    2e:91:41:ab:76:0b:7f:ce:6e:2f:0f:e0:c6:ae:b5:
                    d7:f1:c2:cb:e1:23:e2:ce:1a:db:af:7c:85:83:68:
                    34:cf:58:9b:c9:8b:5d:61:1e:39:bd:bd:15:71:99:
                    16:8a:27:39:91:c7:52:a3:5e:b6:df:78:c5:8f:5e:
                    2a:3d:4c:ff:be:7b:f0:f0:37:e1:1d:dc:59:f3:2f:
                    34:df:26:bc:2c:a6:c2:2b:3a:5e:26:ab:c5:0f:38:
                    2c:b1:c7:65:e0:e1:c3:09:89:96:7f:d6:29:92:57:
                    2b:1e:20:96:84:d0:55:ab:5b:0d:29:1c:a3:ee:7a:
                    e4:a9:6c:52:7c:a1:a9:de:47:9e:23:37:47:43:16:
                    c2:66:8c:f0:39:fd:9c:46:fb:bf:a5:43:92:af:8e:
                    8d:51:22:57:24:84:df:09:7f:5c:60:9d:9e:a1:ca:
                    43:e4:2d:e9:c7:c3:06:5b:09:19:de:04:ff:2e:77:
                    ee:ca:dc:5b:1f:95:21:62:b1:37:50:fa:37:b8:1b:
                    57:4a:4a:ff:7f:d7:70:da:da:bc:66:4f:64:10:9c:
                    52:41:40:00:85:31:d7:5c:f6:3b:81:68:09:48:19:
                    52:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:7D:9B:02:DB:A2:BB:3D:8A:3A:D9:11:57:3C:11:CB:C0:A9:6F:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/848bbd29-5bc4-39b5-be9c-b90b75f8a7a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.crl

            X509v3 Authority Key Identifier:
                keyid:68:BB:AC:66:A8:07:8B:85:E6:ED:9C:01:3D:C2:35:BD:D2:A7:AB:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.250.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:09:89:b8:26:1e:fc:17:85:6f:d5:f9:11:eb:06:7c:af:6e:
         7d:70:ac:c7:25:0e:27:c2:9b:cd:3a:d8:61:28:da:04:d7:a5:
         36:b4:ad:d6:06:bb:43:1c:46:18:53:84:74:2e:42:12:b2:cd:
         d4:01:63:58:fc:49:86:7c:6a:59:6f:11:ba:9c:0d:3c:c7:61:
         9b:51:da:da:98:d8:3e:e1:c0:e9:86:9a:3c:6c:bd:37:3a:ab:
         ea:ed:81:8a:a2:6f:7d:7f:0f:cc:9f:cb:c1:41:29:48:0d:e6:
         2d:24:4d:73:05:d1:21:f0:d1:fb:8d:6d:9d:40:30:d8:44:ce:
         34:89:15:54:90:27:ec:9e:fa:4e:b8:c7:fe:a8:10:fa:36:2d:
         cd:be:ed:57:ad:ef:89:19:4f:19:f9:52:9b:3d:ec:f9:92:05:
         c7:a6:e2:39:55:7e:5b:46:58:5c:b5:a0:31:9c:eb:e8:dc:b7:
         98:2b:e1:b9:73:20:fe:fd:3d:a1:be:f2:62:2e:b0:70:8d:ad:
         2f:7b:a0:ff:8f:fe:81:66:02:5b:b6:db:20:d6:19:54:ad:ea:
         0e:3e:50:61:00:21:21:7f:9e:f5:12:f2:32:77:92:c8:cb:1c:
         f3:97:4e:5b:40:71:d6:c5:6f:8f:85:f4:59:1c:5e:a2:f6:29:
         3d:07:20:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:51:12 2026 by rpki-client