Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/c51ed012-f06e-33a6-a934-b2ef7ad2479a.roa
File:                     c51ed012-f06e-33a6-a934-b2ef7ad2479a.roa (raw, json)
Hash identifier:          VKZCg+GBcWp295qJ+9UJEAD0G/pCcTqW19s9/zrFjaU=
Subject key identifier:   08:A2:07:A9:6C:1A:49:12:F0:CF:CF:6A:5A:84:95:A5:A4:3E:80:6E
Certificate issuer:       /CN=b194a9ed-65e1-4df1-85aa-9a35c571253b
Certificate serial:       010D0C9F4328584E7E94F61DE3A7B15C7BCB6940
Authority key identifier: 89:14:EA:E2:30:BC:CF:0D:65:06:C0:1E:7C:34:93:B1:A3:5D:CD:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/c51ed012-f06e-33a6-a934-b2ef7ad2479a.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     11472
IP address blocks:        216.7.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/b194a9ed-65e1-4df1-85aa-9a35c571253b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/b194a9ed-65e1-4df1-85aa-9a35c571253b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:f6:1d:e3:a7:b1:5c:7b:cb:69:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b194a9ed-65e1-4df1-85aa-9a35c571253b
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=b49c9ece-c85c-4fdf-b937-58a4c1697523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:30:f6:73:58:48:d0:2e:9b:aa:00:26:43:b5:
                    26:f2:a2:ea:d4:21:01:6c:41:0a:a2:66:db:9d:fe:
                    44:3b:dd:db:76:87:a1:d7:32:96:0b:af:34:59:fc:
                    41:5d:c0:5c:d3:37:fd:24:b4:ba:3e:93:a1:e6:08:
                    bd:a8:f8:2b:8e:c1:14:47:ce:86:07:3e:a6:9b:a6:
                    d6:f8:b2:11:a0:23:69:44:84:17:41:12:ae:e7:5b:
                    e9:10:6e:6e:b1:52:a0:c2:17:96:6c:fb:6d:4d:8b:
                    08:d0:fa:e0:26:64:a6:44:26:80:d6:30:b7:d8:52:
                    48:03:10:f7:e6:3b:56:16:66:06:62:cf:cd:4b:f8:
                    3d:8d:c8:ef:c0:a0:d3:72:dc:ee:99:55:81:7e:44:
                    07:d8:a7:e2:31:0f:d7:e5:82:b3:90:c4:0a:cf:92:
                    02:14:99:11:17:d2:c0:d7:d1:71:1d:bd:26:8b:72:
                    b6:e6:ee:51:19:ac:40:77:41:98:01:7f:5e:37:ab:
                    98:f8:47:ce:55:97:57:6b:66:bb:ea:e4:98:b9:9d:
                    ac:6b:34:06:c6:55:95:88:da:23:3b:e0:fc:40:c2:
                    dd:91:54:24:b5:02:99:a3:01:e4:f0:13:1f:79:be:
                    f0:64:f2:be:18:ee:d0:b8:90:bc:c6:4c:a4:a1:2f:
                    f3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A2:07:A9:6C:1A:49:12:F0:CF:CF:6A:5A:84:95:A5:A4:3E:80:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/c51ed012-f06e-33a6-a934-b2ef7ad2479a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/b194a9ed-65e1-4df1-85aa-9a35c571253b.crl

            X509v3 Authority Key Identifier:
                keyid:89:14:EA:E2:30:BC:CF:0D:65:06:C0:1E:7C:34:93:B1:A3:5D:CD:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.7.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:2d:de:0b:5a:66:51:0a:fd:11:3e:43:b5:73:82:ed:72:5b:
         27:12:c2:18:ce:53:36:3b:40:da:cd:ba:c1:eb:80:a9:07:7b:
         62:f8:e0:af:f7:ce:6f:67:7a:4b:8f:d5:2b:8b:86:bf:1f:e5:
         92:9b:32:df:0a:5a:17:9c:ab:ad:b9:4a:df:0a:c5:db:98:14:
         4d:75:c8:36:c5:ca:71:49:f4:3e:53:6f:23:a6:be:5a:47:b8:
         60:28:da:c7:ab:05:27:57:42:75:b5:72:f6:bf:72:3c:26:84:
         42:64:9b:07:d7:78:51:61:bd:99:9e:58:c8:ff:b4:86:fc:6f:
         38:07:c8:bf:dc:0e:3c:d9:e2:1a:ce:91:25:f8:02:fc:17:c1:
         78:e7:ee:00:25:5f:3a:dd:8c:fc:08:bd:e1:3e:fe:39:d3:22:
         d1:dd:ae:7f:b5:c7:bf:c3:b7:ad:14:6c:54:5d:dc:0c:20:6b:
         b1:30:28:f7:3d:ff:0f:95:79:f1:88:1f:a4:3f:37:01:1c:0f:
         4c:1a:b7:ce:2f:60:67:8f:bf:e9:10:d3:c1:39:be:d7:ce:f9:
         20:e3:38:40:49:ef:43:62:06:2e:10:6a:39:ae:d7:72:fb:2e:
         da:09:09:3e:b9:8c:61:e0:fc:47:79:a6:70:77:b9:17:27:18:
         47:fa:c6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:42:59 2026 by rpki-client