Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/91307cac-b66f-340c-86ed-db0c58a0ec17.roa
File:                     91307cac-b66f-340c-86ed-db0c58a0ec17.roa (raw, json)
Hash identifier:          f+vuJL9ooX6GTBedtdqsj8LBcfCfWj+yCtDMfORGmBY=
Subject key identifier:   E2:6B:F2:62:72:02:F0:CC:C6:1A:C9:D8:62:A8:18:57:AC:8F:D8:3F
Certificate issuer:       /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Certificate serial:       010D0C9F4328584E8C8A3D4FB33F507BDBE75880
Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/91307cac-b66f-340c-86ed-db0c58a0ec17.roa
Signing time:             Sun 19 Jul 2026 09:00:11 +0000
ROA not before:           Sun 19 Jul 2026 09:00:11 +0000
ROA not after:            Sat 17 Oct 2026 09:00:11 +0000
asID:                     3384
IP address blocks:        216.93.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8c:8a:3d:4f:b3:3f:50:7b:db:e7:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
        Validity
            Not Before: Jul 19 09:00:11 2026 GMT
            Not After : Oct 17 09:00:11 2026 GMT
        Subject: CN=f6d37877-aa1d-4b8e-85a7-972e1c993f59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8b:93:3e:42:1d:86:0f:24:26:67:48:fc:02:
                    05:f6:ba:9a:fa:ab:6c:c5:a2:8e:0c:ca:87:7f:37:
                    36:8f:23:30:64:f0:31:c9:a7:a5:5d:a4:60:8b:e5:
                    12:68:f8:95:a4:7b:89:2b:6f:a6:20:22:0b:50:c4:
                    8e:d6:3b:04:a6:8c:b9:c1:81:bb:04:55:2d:66:00:
                    17:29:f3:0a:f8:17:28:1f:04:7f:dd:f7:2a:47:1c:
                    32:d8:19:aa:d9:4b:ac:fa:29:45:89:f9:b2:9c:4c:
                    88:7b:5c:9d:c8:b2:b9:90:a1:8b:2c:1a:49:ea:3f:
                    46:b8:5a:ab:f1:70:a7:8a:7d:d0:1c:d1:91:53:d0:
                    f7:04:e5:00:cd:a6:54:77:a8:23:b6:57:1c:4c:33:
                    6e:03:16:af:a0:90:c8:73:01:28:0b:ed:ff:c4:ab:
                    53:24:7b:f5:71:fe:17:fc:38:71:48:d1:c6:13:16:
                    56:b8:f2:ed:d8:ca:3d:63:f3:de:c6:11:24:41:82:
                    7d:8d:d1:a8:b1:af:68:e6:14:51:2f:49:25:d5:bc:
                    d2:59:73:1b:91:36:61:53:6c:d5:2d:f1:62:27:ae:
                    79:47:1c:ef:07:47:aa:08:ce:60:9f:bb:c2:7b:ca:
                    ec:dd:47:a5:4c:70:d1:bd:4a:39:8a:5a:2f:03:a5:
                    15:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:6B:F2:62:72:02:F0:CC:C6:1A:C9:D8:62:A8:18:57:AC:8F:D8:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/91307cac-b66f-340c-86ed-db0c58a0ec17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl

            X509v3 Authority Key Identifier:
                keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.93.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:d2:1a:6c:6f:fa:0a:07:e6:2a:70:4d:b7:87:78:55:77:85:
         01:72:e8:ba:8c:6c:15:60:ff:a7:d8:b1:cd:db:3e:6d:71:4a:
         05:f3:0c:82:79:e5:98:2a:43:d4:fc:d8:9e:12:bd:de:3b:16:
         65:d3:6e:32:6c:c5:ec:24:09:0d:71:15:54:f1:b0:d3:3c:44:
         da:ba:ad:7a:bb:a0:07:3c:18:e3:e9:6c:32:00:b3:b1:d3:f7:
         be:29:35:72:2c:7f:0f:48:53:73:4e:8b:63:24:e7:07:8a:1b:
         23:bf:a3:d7:fa:44:d6:75:2d:85:b3:0a:fb:b0:bc:31:ac:8d:
         0f:aa:51:1f:a9:e9:bc:6a:b6:a8:e5:60:5b:9d:e6:38:63:d3:
         fc:38:0f:51:ac:e3:13:16:c0:40:10:05:45:7e:43:cb:11:d9:
         62:8b:46:f1:7e:4d:d7:8f:fe:09:7f:dc:5a:06:81:2e:9a:b6:
         9c:a1:c5:8a:14:6e:bb:c3:d6:25:31:e0:ca:ef:17:a8:cb:3a:
         fc:94:ef:03:1d:3c:e9:08:c5:26:bc:5e:00:bc:21:2a:97:f8:
         bf:fb:52:be:b0:50:91:0a:fa:91:ef:50:5c:e2:c7:df:a4:8b:
         fb:4a:99:c5:ee:a5:bb:5b:2c:ca:71:7d:93:04:c6:91:30:55:
         1d:0a:e8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:03:02 2026 by rpki-client