Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/3f9d2fae-fd49-33bf-8645-afba9150e12c.roa
File:                     3f9d2fae-fd49-33bf-8645-afba9150e12c.roa (raw, json)
Hash identifier:          i3WK5D7z8bWFx/6Y1WwGcRo1i+eNXNb2ulzFi+QFTqc=
Subject key identifier:   54:72:9E:6D:7A:C8:03:87:30:58:8D:74:66:31:90:FF:EC:A1:A6:EC
Certificate issuer:       /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
Certificate serial:       010D0C9F4328584E3A2F28D29C84BE77131CF280
Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/3f9d2fae-fd49-33bf-8645-afba9150e12c.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     5050
IP address blocks:        192.88.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:28:d2:9c:84:be:77:13:1c:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=cd78ab33-77d4-41e5-a32c-905af02f7491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:30:26:4c:d1:8b:a6:04:46:c5:be:c2:1e:e6:
                    cc:73:4e:ea:33:6e:05:b4:52:27:5e:4e:30:40:87:
                    89:0d:80:6f:1f:cf:04:03:98:57:fb:e3:91:cf:06:
                    9c:c4:da:a5:94:8f:43:a3:7c:dd:9a:3c:8a:6a:19:
                    0d:a9:88:8e:2d:79:b5:aa:54:8e:0b:f6:ad:14:4e:
                    8a:4c:c3:9f:6a:36:ca:93:14:88:d9:7a:70:59:84:
                    41:ac:08:f8:4a:b6:c7:f0:98:08:fe:4b:92:4b:13:
                    69:be:74:00:95:85:d1:45:72:56:d8:56:21:21:16:
                    ef:82:56:16:5a:19:8d:92:bd:10:66:3c:40:bf:fb:
                    3a:99:46:fd:2a:85:32:2b:b1:4d:63:2b:58:58:17:
                    cb:a8:1f:49:b2:6b:9f:08:82:37:ea:a7:74:fe:4a:
                    95:5c:54:1e:53:f8:fb:2d:0f:1b:14:85:d6:24:98:
                    54:32:a3:1c:76:f6:29:57:40:f8:55:8a:44:d6:ee:
                    bc:d3:87:8f:47:c7:90:b0:59:de:20:16:35:ab:eb:
                    ac:72:7b:47:0d:a5:28:2f:09:e9:d2:dc:04:14:71:
                    0f:f6:89:e7:9d:e8:af:b2:02:df:bc:0f:ac:5f:93:
                    65:f5:29:7b:68:f9:d3:90:84:b8:d1:d1:ed:bf:02:
                    3d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:72:9E:6D:7A:C8:03:87:30:58:8D:74:66:31:90:FF:EC:A1:A6:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/3f9d2fae-fd49-33bf-8645-afba9150e12c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl

            X509v3 Authority Key Identifier:
                keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.88.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:c5:95:c1:34:9b:02:14:41:dd:f7:2f:1a:29:f8:96:73:e5:
         fa:4b:d7:b3:6a:7c:bd:7b:2a:91:96:f2:02:9b:52:e7:d6:0d:
         14:b5:22:68:87:2b:86:fd:23:6a:d0:be:e6:85:64:40:e9:76:
         d5:a6:60:fc:6a:de:f0:1b:08:a2:60:03:b6:72:e8:fb:67:85:
         9a:e7:25:26:88:88:5b:ee:3f:82:8c:0c:b1:2b:f4:d0:b9:be:
         f6:c5:93:0b:ce:f6:7f:01:f6:d5:8f:67:11:31:d6:0c:ba:eb:
         d2:6c:ac:b6:ee:6d:3e:0a:e5:83:b6:08:0f:bc:5d:4a:34:b0:
         90:34:e9:be:b7:7f:19:d9:33:9a:5f:33:38:ef:4b:08:52:58:
         82:bd:ba:c5:6c:af:4d:db:e6:5f:ba:85:d4:8e:f0:30:1e:74:
         11:6d:79:ba:fd:26:82:82:3d:d3:22:24:7c:fd:73:b0:e3:0a:
         49:35:c7:48:99:f8:b1:f1:28:c5:75:1e:5b:52:61:79:0b:98:
         42:29:ef:11:d4:19:c8:1d:fb:a6:81:e7:d6:59:8a:6f:47:8e:
         ac:2b:02:66:f9:75:2b:bc:52:23:04:14:2f:52:78:ca:eb:9a:
         22:cd:4f:fc:ea:cb:35:3e:ed:c0:dd:c7:31:c2:a1:3b:4f:9d:
         11:76:e3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:06:23 2026 by rpki-client