Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/14cab7a4-9592-3724-82d8-0c2cba745ca8.roa
File:                     14cab7a4-9592-3724-82d8-0c2cba745ca8.roa (raw, json)
Hash identifier:          6jkHpCGiytyAP8Cq3aFwQ7Lnkd1CZI4eVv4WkjNJivw=
Subject key identifier:   60:FD:22:F6:C4:FF:78:1B:E7:04:B5:AF:97:A6:17:80:F6:14:C5:E5
Certificate issuer:       /CN=d7a960e2-9fa8-4b77-8609-5ee424f44087
Certificate serial:       010D0C9F4328584E640F70E3986A7A0F4587FB00
Authority key identifier: A2:A6:EF:CB:44:3A:94:85:33:05:1B:25:CC:81:A8:4A:7E:34:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/14cab7a4-9592-3724-82d8-0c2cba745ca8.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     19318
IP address blocks:        216.219.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/d7a960e2-9fa8-4b77-8609-5ee424f44087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/d7a960e2-9fa8-4b77-8609-5ee424f44087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:70:e3:98:6a:7a:0f:45:87:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7a960e2-9fa8-4b77-8609-5ee424f44087
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=92f55ece-b114-4ccd-ac05-cbaac466d460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7a:82:00:db:30:60:39:a9:42:43:79:20:c4:
                    ef:bb:13:7f:c1:fc:46:5b:ae:b7:81:bf:b5:7b:65:
                    11:70:9f:67:7a:b6:a4:1f:7d:58:53:6e:29:e0:5b:
                    b8:57:1b:a5:9e:67:2f:e7:43:75:3c:f3:8e:a2:af:
                    5a:14:d4:20:6f:9a:be:08:87:41:e6:18:e6:a0:00:
                    b8:9d:3e:01:04:f8:8a:4b:eb:5d:b1:c7:cc:0f:36:
                    fc:b9:4f:0a:a7:19:51:0d:56:84:7a:26:50:ec:4e:
                    7d:d0:27:60:21:24:61:d7:4d:4c:10:4e:17:76:49:
                    e7:a3:1c:6f:60:2d:89:f1:f0:e4:ec:43:de:b7:1a:
                    00:4a:2c:34:5b:ca:fb:e5:da:94:f8:96:cf:14:9f:
                    4a:91:2e:77:c6:fa:c5:6a:cd:9e:c9:78:01:30:fb:
                    72:c6:7f:dd:53:1a:58:90:73:2f:f7:1d:dc:12:98:
                    fb:0a:31:88:86:14:c5:4d:d3:99:c9:b2:6e:e9:17:
                    54:67:7c:07:81:8d:48:37:5c:31:b1:e7:c4:f0:ae:
                    c4:bf:cf:ae:2c:87:6b:9b:a4:af:1d:22:e8:09:e4:
                    74:68:63:1b:21:d0:6a:d7:07:14:8a:78:2f:75:f7:
                    5e:f3:f1:5e:a2:ff:db:33:8c:13:a9:48:f6:36:53:
                    ee:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:FD:22:F6:C4:FF:78:1B:E7:04:B5:AF:97:A6:17:80:F6:14:C5:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/14cab7a4-9592-3724-82d8-0c2cba745ca8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/d7a960e2-9fa8-4b77-8609-5ee424f44087.crl

            X509v3 Authority Key Identifier:
                keyid:A2:A6:EF:CB:44:3A:94:85:33:05:1B:25:CC:81:A8:4A:7E:34:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.219.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:39:a5:99:35:08:31:95:c1:63:9b:86:63:19:de:07:ff:03:
         32:49:3d:9b:5c:18:52:4d:61:62:ce:24:ef:fa:2e:48:f8:a5:
         c8:1c:8b:ac:1a:5d:4a:5d:44:ed:3a:12:be:3e:ea:fb:b4:ad:
         e6:da:46:1c:d4:62:b9:b7:4c:3d:22:50:81:78:44:d9:cf:92:
         28:a2:fc:75:71:2c:65:19:53:3a:bd:c5:70:04:58:4b:3f:2d:
         d1:7e:5d:1f:b7:15:3d:9f:60:bd:e1:7d:86:d4:0f:ea:14:88:
         0a:29:8f:4f:6b:65:5f:fd:69:cf:8e:b0:21:b1:67:b8:9e:aa:
         58:1f:60:b2:d1:25:00:4d:e6:64:bf:0e:cb:13:5b:0e:c0:b7:
         7e:8b:a2:8c:97:3b:b8:0a:2e:66:f2:86:47:f2:66:c5:e8:41:
         03:03:90:db:b2:db:7b:40:2f:af:8a:8c:97:a8:07:96:db:f0:
         f2:64:10:57:bd:28:3b:10:77:77:84:a2:bd:5d:ac:5b:f8:e6:
         d2:af:4c:ba:bf:b6:c1:9b:0c:31:f3:fe:11:3b:3f:98:46:ac:
         4d:a3:5d:36:4e:c4:15:bd:fe:3e:b9:81:98:1b:42:61:e6:70:
         3c:20:f1:b1:a2:62:e1:67:d6:4d:2f:01:a4:2f:1d:74:10:04:
         6b:ea:8d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:29:12 2026 by rpki-client