Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d9b248ad-2cfe-327a-ab51-0659965a86f7.roa
File:                     d9b248ad-2cfe-327a-ab51-0659965a86f7.roa (raw, json)
Hash identifier:          tORLwv50ThaB5jEwm8DNn4/lAB2TuQtB/2RReJvyZgk=
Subject key identifier:   46:DC:D6:71:F9:97:6D:D2:80:FA:B6:D0:DE:81:18:45:8A:64:4F:52
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E4129C8BDD7201B3709631660
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d9b248ad-2cfe-327a-ab51-0659965a86f7.roa
Signing time:             Mon 22 Jun 2026 09:00:11 +0000
ROA not before:           Mon 22 Jun 2026 09:00:11 +0000
ROA not after:            Sun 20 Sep 2026 09:00:11 +0000
asID:                     30036
IP address blocks:        192.119.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:29:c8:bd:d7:20:1b:37:09:63:16:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun 22 09:00:11 2026 GMT
            Not After : Sep 20 09:00:11 2026 GMT
        Subject: CN=8285432c-716f-485e-976b-0a70faa4c645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b0:e8:e7:4e:3e:92:39:43:c1:5c:d5:be:19:
                    ab:60:b8:a3:14:4d:3b:97:b3:1d:89:7e:f5:f4:4f:
                    2f:d8:37:35:f8:5c:21:25:57:2f:74:14:c6:a2:f4:
                    49:1d:cb:01:44:aa:a7:92:6d:d7:e8:f3:63:2b:18:
                    4b:b1:a2:a5:59:9e:07:0f:09:93:9c:2b:74:3e:cb:
                    b9:6c:b9:bc:2b:d3:29:e0:a5:61:b5:b7:46:5a:c8:
                    86:6a:17:a6:42:85:41:1d:e1:20:d7:4c:0b:47:3f:
                    6f:3c:49:26:2c:4b:ee:19:ed:4c:4b:5d:3e:5b:f7:
                    40:86:c8:a9:a7:f4:3e:aa:66:d5:2f:13:04:2c:8c:
                    95:4b:6e:42:4e:27:0a:0a:96:e3:1c:1a:f5:8e:4c:
                    75:92:68:a6:eb:1b:df:ed:f9:f0:39:2c:b5:f6:60:
                    a3:b0:bd:7f:e7:c7:47:89:83:15:58:75:ae:28:c7:
                    4c:5c:0f:0a:6f:6c:a2:1e:2a:ed:e3:68:36:2f:df:
                    f1:0d:5c:00:be:4b:33:1f:f7:86:4d:9d:19:15:25:
                    46:bf:f3:ef:06:3a:0a:c8:2b:40:ad:38:40:39:30:
                    af:08:e4:cb:78:63:e0:a8:66:61:3e:05:4a:ba:60:
                    a0:dd:5f:e5:45:33:7e:2c:a7:2a:60:56:cb:e2:e5:
                    76:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:DC:D6:71:F9:97:6D:D2:80:FA:B6:D0:DE:81:18:45:8A:64:4F:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d9b248ad-2cfe-327a-ab51-0659965a86f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.119.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:e8:6a:75:36:7e:6d:69:a5:2e:89:90:6e:32:34:04:80:39:
         2a:c0:c9:d3:f2:52:c0:61:1d:7e:7f:1c:77:b2:f6:a1:47:d0:
         b5:30:16:f4:bc:9c:86:8a:ce:fc:ce:91:21:b1:f8:72:fb:be:
         bf:e4:ce:86:c9:77:3e:10:97:bd:04:20:e0:96:53:a3:81:90:
         44:68:54:51:6e:ef:97:06:6c:a9:08:e3:76:f5:77:88:30:40:
         e1:75:63:c4:90:31:36:31:66:20:f0:a5:05:7a:6c:8f:19:b0:
         db:5a:5c:9f:2f:7f:30:85:ef:b4:d1:b5:09:b1:d8:0e:66:ed:
         51:0b:b7:74:79:59:ba:d7:1a:34:b8:7f:35:ab:75:46:cc:68:
         e0:05:a5:64:46:80:dc:d5:ad:1f:fa:5b:6c:55:b8:18:af:44:
         f8:30:37:09:04:71:43:2a:4f:ca:35:6e:41:eb:fb:d4:94:aa:
         27:d8:59:2c:ac:98:77:05:dd:c0:13:e0:20:a5:97:2d:ef:a2:
         6b:d4:f6:e0:40:46:6e:a0:2b:dd:22:d7:41:b2:f5:24:70:ae:
         d8:ca:b0:8a:f3:e9:6e:26:bc:b3:bd:1c:6f:ab:69:da:9a:48:
         b3:57:c7:b9:71:f4:9d:4e:30:59:db:2c:91:91:6e:28:cb:8f:
         59:6b:a7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 04:36:10 2026 by rpki-client