Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3a1661e8-e26c-33eb-8628-c7a97a3366a0.roa
File:                     3a1661e8-e26c-33eb-8628-c7a97a3366a0.roa (raw, json)
Hash identifier:          0kAEA0V6lVviWHoxmPXrF06TghnLiqcq1Nq8l03erxo=
Subject key identifier:   1B:CB:F8:58:85:0A:10:53:E6:DB:1E:0B:1A:99:0E:81:C0:9E:B4:80
Certificate issuer:       /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial:       010D0C9F4328584E50849797DF602A2967C2EB80
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3a1661e8-e26c-33eb-8628-c7a97a3366a0.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     3738
IP address blocks:        192.250.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:97:97:df:60:2a:29:67:c2:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=707b79bb-c8c3-4fd0-b53b-a1eb47b7939d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5e:95:5a:21:ce:de:4b:31:f8:b1:46:4b:f9:
                    5f:b0:da:1e:d2:dd:aa:f7:c6:8c:fa:a6:d0:da:25:
                    46:c6:97:04:3a:42:77:e8:66:ef:12:f3:80:9c:e0:
                    47:60:3d:1e:20:d6:96:26:fe:dc:ff:82:b8:5a:0d:
                    14:03:a7:e0:f4:e5:d7:d2:a2:30:86:aa:5a:50:16:
                    dc:21:11:e7:38:0b:f4:a5:72:04:6e:43:2f:29:f2:
                    6e:e8:6b:78:7d:2f:8e:d7:2c:4c:0c:7c:62:95:7f:
                    d0:4d:f6:c4:a1:41:a9:31:88:79:f9:de:e2:d6:56:
                    02:8b:7f:7e:ba:68:fd:8c:e5:52:6a:df:49:9b:5f:
                    4b:21:4b:ae:fc:d5:5d:0e:3e:5c:10:74:3c:1e:dc:
                    2f:88:da:de:6c:c6:36:cb:e7:3f:e5:c4:34:51:fa:
                    db:39:a6:b0:26:d0:c5:ad:16:41:60:9f:50:92:b9:
                    2f:36:6a:be:84:07:6e:9e:05:25:49:40:87:d9:b0:
                    76:80:69:ad:df:a8:86:80:d7:04:ed:ca:c6:0c:64:
                    5f:a2:63:60:e7:7f:60:7e:0c:b1:a9:bd:fe:61:7f:
                    59:d2:2b:52:68:c2:b7:54:4f:6b:a6:69:79:8c:2b:
                    19:20:a8:0b:3e:23:59:88:c7:35:ab:7f:38:42:ec:
                    b8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:CB:F8:58:85:0A:10:53:E6:DB:1E:0B:1A:99:0E:81:C0:9E:B4:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/3a1661e8-e26c-33eb-8628-c7a97a3366a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl

            X509v3 Authority Key Identifier:
                keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.250.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:a4:68:a6:9c:f3:ed:44:ea:b4:a8:1a:26:b5:02:7d:47:63:
         60:5c:c6:24:5c:b7:48:11:bf:84:ba:41:03:96:d3:0e:2a:e2:
         d4:72:d6:95:8c:ef:ff:bb:07:9c:59:5e:99:36:ee:e6:8d:c6:
         a7:02:12:1d:c9:dc:58:35:e1:40:f5:3c:89:01:58:f0:3a:84:
         7a:84:bb:0a:c8:d8:d4:02:ca:18:78:ac:c8:f8:22:d5:fa:0b:
         9c:ae:16:7f:7e:f8:f3:3f:c6:fb:25:8e:76:14:30:f0:3f:aa:
         91:bb:8d:5c:6e:ee:6d:53:26:ce:02:9f:4b:36:fa:36:21:03:
         32:17:ce:ab:d5:11:7d:0b:ec:5f:94:a5:53:eb:af:48:b2:19:
         96:fc:69:bc:89:56:98:12:13:55:54:10:51:26:cc:b5:35:1b:
         b4:3b:d5:03:99:3e:19:8f:6f:e0:d3:19:e1:36:3c:80:eb:6f:
         70:ae:14:08:88:18:64:9f:2e:c1:be:54:03:cc:c5:58:a8:22:
         0f:fd:9c:91:3e:43:40:be:78:64:c3:13:2c:78:f4:9b:a4:d6:
         61:e8:2d:d5:6c:72:e2:88:4e:50:5e:9e:08:58:75:db:92:d2:
         df:6b:58:91:4d:a6:0a:65:52:a2:10:09:3a:d8:53:d9:3a:0a:
         de:45:b1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:26:29 2026 by rpki-client