Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7b69dd82-5d7b-3ef8-bd9b-ec006fdc88ef.roa
File:                     7b69dd82-5d7b-3ef8-bd9b-ec006fdc88ef.roa (raw, json)
Hash identifier:          vFjtzeygEZcJ5jQW8KcPUNAQmpTg9LTzrA6uXb4wlvE=
Subject key identifier:   0B:74:07:05:B0:08:6C:FD:4D:B9:03:7C:4B:A1:08:DC:E7:1B:7B:86
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F4328584E6F3A42A91578BB5A69536380
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7b69dd82-5d7b-3ef8-bd9b-ec006fdc88ef.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     21949
IP address blocks:        134.128.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:42:a9:15:78:bb:5a:69:53:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=92f9e61a-d0c6-4c23-ae1f-4ef6805c2115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ea:37:c9:92:97:83:3d:76:8a:ec:94:f8:fa:
                    d5:31:df:d7:f9:38:8f:4b:27:61:96:47:fb:49:7e:
                    17:73:7b:dd:65:09:57:e3:30:35:be:0d:3e:53:1f:
                    84:dd:24:bf:56:4e:a2:54:c3:9d:c3:bc:8e:e1:09:
                    a5:60:88:88:cc:36:4f:83:f8:1f:08:c0:ba:ad:56:
                    cb:dd:e6:83:94:7b:31:24:ff:28:43:53:12:c9:d6:
                    b1:03:6e:7b:a0:84:ec:59:c0:cf:1a:f1:c3:3c:f5:
                    50:b8:c9:a9:22:ef:39:e4:91:68:50:03:c0:09:48:
                    15:a4:18:1a:11:88:f8:46:91:7e:af:7c:7b:85:0a:
                    79:b7:e7:28:ad:df:85:3b:d7:75:b2:52:3a:d4:d7:
                    6b:3e:e5:f5:1e:94:5d:19:b0:0c:39:eb:8c:3e:7c:
                    f3:2e:eb:4c:e6:6a:47:ec:d5:b7:02:45:4c:1a:2b:
                    39:d0:94:c7:df:d3:60:e5:c5:22:a8:b3:2f:4c:14:
                    5c:9a:d8:1b:b1:43:dd:43:fc:97:3c:9b:e8:2c:01:
                    99:6a:4b:34:a4:b4:5c:c8:7c:c3:47:72:3b:81:bf:
                    bf:06:e4:76:6a:5f:33:0b:a6:4b:70:d1:9c:8c:64:
                    08:7d:01:f7:e4:76:8f:55:b9:63:c0:34:eb:ed:fa:
                    84:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:74:07:05:B0:08:6C:FD:4D:B9:03:7C:4B:A1:08:DC:E7:1B:7B:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/7b69dd82-5d7b-3ef8-bd9b-ec006fdc88ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.128.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:41:36:d2:06:5c:bb:ea:b4:15:78:9c:07:09:f7:89:bf:46:
         92:bc:b3:7a:8b:8b:d4:bc:b5:48:d0:fe:d4:8a:d6:bc:98:57:
         22:39:10:c9:68:af:be:f2:38:7f:5d:a4:c3:9b:29:1a:2b:ed:
         81:f6:73:52:96:dd:85:c5:82:82:34:a6:36:84:f1:de:b9:48:
         79:ed:4b:a4:1a:ad:a7:12:a5:48:b0:83:5d:9e:d7:d7:4c:a9:
         60:0f:9e:dd:14:f7:dd:a2:5e:cb:3c:48:8f:55:1d:e9:96:90:
         be:8b:1e:0d:e9:e1:3b:d5:0c:e0:d8:eb:e3:c8:cf:c9:12:e0:
         9e:26:c7:13:31:f7:c1:9c:c3:75:1e:cd:eb:1d:c4:02:c1:d0:
         48:17:9e:9a:68:ac:75:66:20:cd:72:10:d5:a9:d8:eb:c7:a0:
         66:46:02:de:8c:04:f6:7b:c0:73:8d:75:39:c2:70:63:e6:4b:
         b8:ce:43:45:c8:f0:bb:57:2a:fa:10:49:c6:6c:9d:cb:a6:ae:
         bd:72:82:a8:8b:92:de:73:f1:95:d8:7c:76:ba:07:a4:1a:2b:
         2b:e9:b3:81:cd:e9:6c:a5:9d:5f:bf:43:f4:23:38:95:67:46:
         b6:3e:ca:fb:7e:19:82:01:cb:fe:b7:fe:a4:67:f1:3e:de:6e:
         7c:d3:ed:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:01:14 2026 by rpki-client