Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/abb10cbd-7ad6-3df3-8c4f-bbd62f847e06.roa
File:                     abb10cbd-7ad6-3df3-8c4f-bbd62f847e06.roa (raw, json)
Hash identifier:          zn1z4bNIXDj7JqQVIVbRfAp5z97U0/+qcRtnbBsKU7c=
Subject key identifier:   B5:77:06:C0:4E:17:4D:71:3C:47:21:70:39:B7:C2:1C:B9:D7:46:19
Certificate issuer:       /CN=f6e6ee11-cd51-4809-bddc-1460c28a9121
Certificate serial:       010D0C9F4328584E31CF8056EAA16934E0D72500
Authority key identifier: 2F:64:D2:D2:30:94:F0:74:84:57:4C:F6:ED:28:61:F2:B1:E8:27:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/abb10cbd-7ad6-3df3-8c4f-bbd62f847e06.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     46620
IP address blocks:        208.90.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/f6e6ee11-cd51-4809-bddc-1460c28a9121.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/f6e6ee11-cd51-4809-bddc-1460c28a9121.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:80:56:ea:a1:69:34:e0:d7:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6e6ee11-cd51-4809-bddc-1460c28a9121
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=a22fed66-3b79-4b55-8d33-5516ed22a21c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6c:25:1b:42:19:dd:79:d8:93:5f:fb:b2:61:
                    dd:aa:4a:7d:b7:fc:dd:5d:a8:ee:f1:47:08:7d:ae:
                    a5:51:3e:9b:bd:28:c0:8f:57:3a:f8:c7:43:88:2a:
                    eb:f9:77:73:c6:09:ea:9a:25:45:0b:81:c7:fa:8f:
                    7d:17:3e:a7:7f:4e:9b:45:86:33:70:3f:ed:d4:84:
                    8c:2a:43:32:39:4a:72:c3:75:73:0e:7c:99:78:0b:
                    a9:7f:fa:9c:a3:a1:71:13:bd:a5:f7:63:6b:aa:91:
                    24:35:b7:6c:ad:6e:33:65:e8:06:95:26:8b:a6:8d:
                    de:2b:f6:74:8d:0e:0a:b8:fc:ff:4a:49:68:04:bd:
                    d7:0a:e0:cd:59:0f:ea:fb:cb:12:a4:88:49:45:40:
                    55:d9:f9:8a:1e:55:26:98:af:30:c1:1c:7b:04:3c:
                    fc:68:e3:12:3a:c0:a3:23:51:18:30:bd:8d:e9:87:
                    b4:d3:4d:db:a2:3f:3e:90:a4:ee:e8:4a:3d:ff:cb:
                    eb:12:8f:4a:0a:88:64:d0:14:cf:8e:b4:4e:c8:e4:
                    07:81:c1:8e:44:cf:1f:a8:12:e9:d0:92:b3:20:bf:
                    3e:f6:97:45:51:23:e4:bb:f5:ca:21:f6:4a:ef:08:
                    80:88:4a:4e:77:05:92:62:5e:50:24:6e:45:3e:57:
                    40:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:77:06:C0:4E:17:4D:71:3C:47:21:70:39:B7:C2:1C:B9:D7:46:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/abb10cbd-7ad6-3df3-8c4f-bbd62f847e06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121/f6e6ee11-cd51-4809-bddc-1460c28a9121.crl

            X509v3 Authority Key Identifier:
                keyid:2F:64:D2:D2:30:94:F0:74:84:57:4C:F6:ED:28:61:F2:B1:E8:27:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6e6ee11-cd51-4809-bddc-1460c28a9121.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.90.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:8f:14:f7:8c:d0:29:fd:0c:38:30:50:2d:83:82:35:ba:c8:
         ec:dd:26:8b:ce:fb:59:94:dc:e0:45:78:84:0e:5f:6a:e6:6b:
         01:56:ca:eb:a8:20:4a:85:0e:55:72:b4:31:27:df:aa:04:48:
         46:13:a6:61:9e:0a:ff:20:96:e5:2c:96:20:1a:47:28:9c:17:
         2f:84:89:4a:86:dd:c2:81:2e:ae:9c:62:bb:7f:6e:f5:10:57:
         49:2a:c0:5d:a7:5f:ec:04:6a:3c:29:a9:99:06:be:c4:b5:a7:
         e6:3c:5b:80:40:d1:43:7d:a0:70:15:36:84:1b:c9:36:94:ae:
         1e:5e:e6:90:69:39:5d:76:9e:02:33:61:3c:36:91:19:3f:a2:
         13:6c:02:e7:65:1d:8e:a0:28:05:5e:d9:68:19:2d:ff:0c:d6:
         0a:66:f3:c9:0d:8d:34:9c:7c:48:26:47:b8:a8:54:5d:96:4f:
         4c:f0:9b:03:da:27:a2:66:a0:44:2a:74:45:e2:32:c4:20:86:
         23:c4:3b:3b:dd:c3:75:35:fd:5a:7c:e7:f8:90:91:b7:d7:de:
         d7:27:ae:37:c6:84:3d:29:03:58:a0:ca:8c:29:cf:3b:c0:e4:
         62:c8:15:d4:5d:ec:5b:07:09:bc:32:8b:b1:11:cd:48:96:74:
         d9:45:0d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:37:36 2026 by rpki-client