Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/91077fef-d4ef-3abf-b66d-a3aedd6262fe.roa
File:                     91077fef-d4ef-3abf-b66d-a3aedd6262fe.roa (raw, json)
Hash identifier:          mpSw+pGJtlHL82RlJirv7KWo9GM2/SQClebjcYvyLXY=
Subject key identifier:   0F:70:D3:21:A2:77:2D:7E:18:04:A6:41:AB:76:1B:C6:20:19:39:56
Certificate issuer:       /CN=c73e1054-5f4b-4aa5-9e55-1c5c87fb709d
Certificate serial:       010D0C9F4328584E6144A63EF1C22638CA8E8DC0
Authority key identifier: AF:32:CC:82:88:DA:6B:F1:0D:BD:29:C9:B4:40:8A:F8:E8:C6:16:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/91077fef-d4ef-3abf-b66d-a3aedd6262fe.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     12208
IP address blocks:        192.159.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:a6:3e:f1:c2:26:38:ca:8e:8d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c73e1054-5f4b-4aa5-9e55-1c5c87fb709d
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=b06e8bc4-3c79-42f2-a82a-78a4ec45877c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:91:c5:ba:8f:9b:84:2a:62:a4:8f:43:4f:42:
                    32:f1:69:c1:fb:9b:e0:e9:86:50:03:9f:a3:27:65:
                    f0:29:e1:0a:5f:5b:3c:f4:e2:f4:90:22:08:fc:b1:
                    bc:e9:75:e4:4f:a6:a5:8b:98:f8:e5:a2:1c:25:7e:
                    70:8d:57:1f:6a:ea:f9:97:fb:58:41:25:a5:0f:d0:
                    7e:0e:60:25:7f:0d:dd:be:6d:43:3d:71:4a:cc:a7:
                    4e:61:46:54:4a:4c:68:e8:44:17:51:2d:fb:d3:41:
                    c9:cf:81:ed:87:a9:c8:da:df:17:48:7b:f3:d5:65:
                    ae:8f:0a:f2:96:a1:cd:96:06:59:9d:6d:35:62:71:
                    b4:5e:72:9e:92:ce:ba:f4:c1:13:1b:e2:68:6b:81:
                    9a:c7:ac:01:68:c4:3d:61:95:1b:3f:b9:0d:fe:73:
                    6e:31:1a:b0:4a:e9:80:6e:94:bc:99:54:97:c5:87:
                    6d:6e:05:db:d2:d6:66:09:b2:5c:69:ae:90:47:19:
                    67:12:d0:01:7d:4a:04:21:90:22:ce:93:52:09:97:
                    a6:4a:36:b4:78:65:bf:18:fc:eb:ab:01:ed:c3:f8:
                    4c:81:a1:12:95:8e:80:2d:4a:ac:e6:5b:aa:95:05:
                    26:a0:3c:48:c8:b5:75:7d:99:54:5f:58:5e:a3:69:
                    78:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:70:D3:21:A2:77:2D:7E:18:04:A6:41:AB:76:1B:C6:20:19:39:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/91077fef-d4ef-3abf-b66d-a3aedd6262fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.crl

            X509v3 Authority Key Identifier:
                keyid:AF:32:CC:82:88:DA:6B:F1:0D:BD:29:C9:B4:40:8A:F8:E8:C6:16:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c73e1054-5f4b-4aa5-9e55-1c5c87fb709d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.159.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:2f:a4:47:8e:0f:a0:53:75:f3:f9:92:e0:ac:ad:8b:f1:5d:
         8e:7e:db:ba:0e:1f:20:ac:6f:2b:bd:0f:ad:9b:70:19:33:57:
         77:74:e7:ff:3f:f9:20:40:71:fb:0d:a8:1c:0d:f0:ab:5d:d1:
         57:86:a5:2e:74:2c:e9:86:77:6b:de:cb:fa:d8:b6:2b:98:2e:
         ad:1f:34:fb:3c:13:02:2b:41:44:0c:86:25:84:fd:0a:66:82:
         f4:2f:83:e5:72:77:f3:08:d1:bd:19:4b:be:50:e3:8a:c2:c9:
         c7:8d:03:9c:4b:fa:4e:2f:37:5e:c3:1a:ed:6b:6c:45:b7:1d:
         08:ae:4e:06:29:18:3c:80:5d:2d:0e:e3:78:3c:5d:a8:04:9d:
         2a:eb:14:f5:1e:94:05:a9:7b:d3:5d:ed:f7:e2:1d:3f:2f:dd:
         84:fd:5c:16:38:45:d8:8e:c0:43:36:47:1a:09:d9:c9:4d:7a:
         c1:82:7f:d2:de:c7:48:6a:d0:4e:81:99:01:47:ae:32:f7:33:
         18:64:17:cc:84:03:84:b4:a6:dc:9b:de:d2:b8:fd:86:6c:a3:
         0b:53:fc:a9:ba:38:68:13:c7:82:3e:01:96:71:6e:58:b1:ed:
         58:af:bc:2a:b2:1a:d0:77:8e:3d:15:af:90:8d:f6:51:f1:10:
         56:f4:eb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:54:12 2026 by rpki-client