Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/418343bf-b286-381e-8df3-433b3521eaf7.roa
File:                     418343bf-b286-381e-8df3-433b3521eaf7.roa (raw, json)
Hash identifier:          ssUQJvcsmXYoCazzCB3LJa2QOgA1VsgZ0BXTIbs+fcM=
Subject key identifier:   91:F4:03:6C:BA:9A:7D:BE:10:44:F3:14:EE:FF:51:4D:BB:A6:DD:FC
Certificate issuer:       /CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38
Certificate serial:       010D0C9F4328584E2AD46A61570C673E47868D00
Authority key identifier: B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/418343bf-b286-381e-8df3-433b3521eaf7.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     7859
IP address blocks:        216.146.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:6a:61:57:0c:67:3e:47:86:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=a0f9fd79-39c2-4743-a070-131b840f51b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0c:4f:4d:16:35:80:2b:f3:59:dd:04:45:e3:
                    4f:75:b8:3d:b9:b1:73:f5:39:87:6b:1e:eb:b8:35:
                    dd:cb:80:08:65:70:e6:f8:60:5e:5d:99:68:67:62:
                    47:36:91:76:6b:d4:ad:94:b6:8f:42:71:85:cd:3f:
                    7e:f3:08:a0:1e:3a:00:a1:11:b9:fc:fe:94:aa:ef:
                    85:54:ed:11:c7:5d:70:e4:de:95:8b:0d:64:f6:af:
                    f9:c5:e0:88:5a:cf:e2:91:6a:98:f5:37:b8:8a:dc:
                    f8:17:7b:ff:70:ab:51:29:c2:43:ee:d6:83:92:a4:
                    6f:73:63:23:eb:98:67:c8:88:f8:26:54:37:0e:a7:
                    25:19:18:89:41:3f:13:8e:c4:bb:3b:63:7e:6e:2c:
                    83:0c:34:1d:3a:47:3e:60:ff:1a:db:6e:c6:9f:48:
                    d9:ca:48:2c:85:0f:13:e6:7c:ee:e8:f0:51:b8:63:
                    e7:78:2d:1f:d0:b3:37:92:84:76:e0:3b:06:a7:21:
                    e8:de:7a:9c:04:33:79:b8:2e:d9:e4:09:71:a8:17:
                    cc:62:39:d5:8a:f9:db:d8:b7:04:17:e5:0e:90:ed:
                    4b:24:70:53:e4:20:40:fa:70:94:78:88:d5:9e:23:
                    ce:c0:90:78:9a:b7:fe:7a:e8:4b:fb:87:16:63:96:
                    1c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F4:03:6C:BA:9A:7D:BE:10:44:F3:14:EE:FF:51:4D:BB:A6:DD:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/418343bf-b286-381e-8df3-433b3521eaf7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl

            X509v3 Authority Key Identifier:
                keyid:B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:cf:5d:d5:e5:29:f1:4a:b3:a9:fd:84:36:e7:9a:49:13:f8:
         60:ac:fb:39:12:07:39:39:c1:3e:61:fb:15:2f:58:9e:70:0c:
         b3:26:6b:2d:9a:c1:63:81:2a:79:f4:9a:3c:f8:f5:e6:a3:85:
         ec:28:0c:31:ae:2e:f0:3b:f3:94:5b:9c:de:4e:3c:71:d4:e7:
         46:f7:05:54:cc:99:96:dc:bf:f5:c4:6e:7e:1a:ca:b0:bb:6e:
         3d:c0:53:6e:bb:30:dc:fb:b8:6a:84:e0:32:79:86:7a:e9:fd:
         1c:07:8d:d6:66:cc:1d:15:75:a3:e8:4d:ac:e6:8d:54:4a:97:
         d5:cf:02:17:64:e5:d3:7c:a7:c6:70:0f:02:6e:f4:03:af:59:
         46:df:57:ad:75:b1:35:ab:55:50:a3:c9:bb:7d:ed:93:59:03:
         3e:2c:fb:91:d1:8c:2d:dc:20:6f:a4:b8:07:b8:6b:0d:cf:1c:
         d2:31:18:92:9e:b4:4f:d8:9a:c6:1d:b7:da:95:92:da:65:ad:
         f8:f8:c0:47:60:e9:00:28:7e:df:b9:e4:49:c1:cf:99:41:68:
         4e:d0:38:03:2d:7f:52:24:32:c3:4e:04:ad:95:bf:6d:26:e6:
         cb:7b:0a:0e:8e:c7:00:80:96:97:36:11:1d:80:b5:56:45:2d:
         b2:82:58:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:05:48 2026 by rpki-client