Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/b08af031-d473-3555-848a-e8df72a59930.roa
File:                     b08af031-d473-3555-848a-e8df72a59930.roa (raw, json)
Hash identifier:          8LVhCw/vUFq/CJW8pfNBX/1t1aUnd/LnfHDu85WeG1M=
Subject key identifier:   30:98:14:2E:52:9F:D2:F0:C0:39:23:90:89:38:80:D5:26:A1:E8:E9
Certificate issuer:       /CN=d1a2d4b1-dd63-4ea3-8762-70d628347ca6
Certificate serial:       010D0C9F4328584E8B24F6DCECF4270BAA146B60
Authority key identifier: B3:AC:FE:4F:D4:AB:F0:4E:D1:07:A2:5F:2C:2F:D2:D0:43:17:FE:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/b08af031-d473-3555-848a-e8df72a59930.roa
Signing time:             Sat 18 Jul 2026 21:00:11 +0000
ROA not before:           Sat 18 Jul 2026 21:00:11 +0000
ROA not after:            Fri 16 Oct 2026 21:00:11 +0000
asID:                     398564
IP address blocks:        192.190.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8b:24:f6:dc:ec:f4:27:0b:aa:14:6b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1a2d4b1-dd63-4ea3-8762-70d628347ca6
        Validity
            Not Before: Jul 18 21:00:11 2026 GMT
            Not After : Oct 16 21:00:11 2026 GMT
        Subject: CN=3399740d-2b44-45d9-9d7c-d8dd642f8fde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:73:dc:1c:76:ca:8d:53:ef:47:f7:eb:6c:df:
                    ed:73:e2:9f:e4:5a:9b:5f:95:f9:e3:28:14:b7:ec:
                    21:c6:90:44:31:00:02:cf:57:af:6c:59:b8:e9:b1:
                    dc:f8:4d:f0:44:37:3b:3a:0a:a2:24:32:1c:5f:b9:
                    c6:92:a9:fa:c5:d2:39:b9:d0:bc:68:f6:9a:dc:3f:
                    bb:8e:bc:cd:f8:f6:69:c9:9a:8b:f0:be:55:2a:06:
                    b0:06:20:68:40:a9:78:99:dd:02:37:60:9c:76:1f:
                    39:1c:cc:7d:9d:7c:85:f6:52:ff:f5:2e:e1:2f:8b:
                    a7:fe:61:4a:dc:cd:bb:6c:33:f7:b1:be:47:83:6f:
                    21:e0:c8:91:1e:5c:96:c0:d6:20:7d:cb:fa:d4:99:
                    df:d9:c7:1c:eb:93:af:95:f4:ad:9a:03:d5:74:db:
                    23:e6:55:75:5c:0b:78:3f:9e:b4:bf:6e:bc:d5:03:
                    f9:17:75:76:0c:c9:f8:51:30:2a:46:a5:71:fd:39:
                    cf:18:fe:88:30:c5:6d:18:30:3b:76:3d:1c:0e:ae:
                    e2:38:42:95:b8:84:41:68:57:c4:bf:5e:a1:ab:e6:
                    25:8e:1d:9f:04:a0:a3:b8:9b:da:56:21:76:56:6d:
                    d4:be:bd:5c:b4:9f:d2:9f:0f:61:48:6b:e9:8d:fc:
                    d9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:98:14:2E:52:9F:D2:F0:C0:39:23:90:89:38:80:D5:26:A1:E8:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/b08af031-d473-3555-848a-e8df72a59930.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.crl

            X509v3 Authority Key Identifier:
                keyid:B3:AC:FE:4F:D4:AB:F0:4E:D1:07:A2:5F:2C:2F:D2:D0:43:17:FE:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d1a2d4b1-dd63-4ea3-8762-70d628347ca6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.190.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:47:7a:3e:e4:52:e1:1c:69:d7:35:67:89:ae:cf:5a:f2:28:
         9b:1e:ab:aa:83:b7:5e:1c:1c:af:18:bd:8b:bd:40:da:ec:dc:
         05:bc:28:5c:37:b8:3d:9f:f7:86:54:d0:0c:b6:86:c9:2e:98:
         19:eb:5f:b5:ff:02:88:c8:c8:f1:96:71:c8:9c:51:3e:10:5d:
         fa:0a:e2:d8:05:be:e5:f7:64:a6:38:50:d6:4c:36:29:43:4d:
         f2:ca:07:fb:39:03:fe:0e:9e:84:6b:e3:aa:bd:05:dc:19:e3:
         5b:ad:5f:63:ed:48:23:25:25:c9:e8:98:93:6c:ab:79:24:84:
         8f:29:70:7a:4e:73:02:f9:33:03:aa:e5:06:27:13:a2:2b:49:
         db:86:e3:d6:a3:61:71:3e:3d:80:ac:b2:58:a2:84:af:c0:3b:
         b9:97:09:46:9e:ec:d8:b5:8c:34:77:0b:2c:e3:e0:ea:91:92:
         04:82:81:02:45:d7:1a:9a:a6:df:e8:12:4f:0f:c6:35:9c:64:
         e6:9a:4e:f0:08:1e:0d:5e:aa:5e:e2:a7:62:9f:40:69:d4:d6:
         32:b9:fd:46:0a:c6:30:49:0a:92:3f:dc:36:5d:50:91:d5:e3:
         dc:65:12:79:69:66:90:c0:bc:1b:57:54:2f:d6:eb:38:f5:9b:
         49:79:54:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:04:46 2026 by rpki-client