Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/5edc96a2-d7e4-34f1-952c-fd1ca1e706d6.roa
File:                     5edc96a2-d7e4-34f1-952c-fd1ca1e706d6.roa (raw, json)
Hash identifier:          F4qIFtoB1OlWijoldY5HP8AVawee1nbiApJrluk8F5Q=
Subject key identifier:   AB:8A:B4:D1:B2:62:25:09:B2:00:AF:93:F2:24:04:FC:A7:2D:EC:4D
Certificate issuer:       /CN=0795b7b9-f2da-44fa-b181-d74a57f64e1b
Certificate serial:       010D0C9F4328584E3E5F39F076771A308879DC40
Authority key identifier: A3:FB:1D:59:CD:2F:DB:E4:4E:58:8A:58:BB:6E:4D:6F:27:76:4A:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/5edc96a2-d7e4-34f1-952c-fd1ca1e706d6.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     20394
IP address blocks:        216.177.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/0795b7b9-f2da-44fa-b181-d74a57f64e1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/0795b7b9-f2da-44fa-b181-d74a57f64e1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:39:f0:76:77:1a:30:88:79:dc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0795b7b9-f2da-44fa-b181-d74a57f64e1b
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=0704fbce-eaf0-4c22-a602-5d7cfe51db32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:74:9f:09:30:0f:ff:4c:d8:2d:da:b0:73:fd:
                    94:d5:b8:17:de:43:2b:a4:ec:d9:8e:4e:a8:38:02:
                    df:fb:78:0c:dc:58:d3:75:dd:74:8b:e2:9e:cd:8a:
                    06:f2:81:eb:a5:58:92:48:9d:02:5a:bf:8f:40:a3:
                    df:3a:cf:11:00:65:1e:a3:f1:01:98:41:05:9f:28:
                    a6:a0:98:e0:b2:ed:ee:cf:62:46:42:2b:99:50:34:
                    84:a2:05:ea:b3:29:0c:ed:f6:a0:f8:a1:8f:6c:20:
                    94:82:80:88:e5:b0:4c:66:86:c4:23:01:64:b1:9d:
                    f6:68:2d:b2:9c:76:21:39:88:c1:8b:46:e1:76:f7:
                    a8:51:64:28:a9:25:f3:b5:4f:20:42:34:49:7e:4c:
                    b6:e7:96:ca:ea:3d:56:dc:c1:dc:a2:10:8c:85:70:
                    d6:11:b4:ea:73:21:47:17:89:96:83:21:81:e8:9a:
                    48:b6:a5:ac:0b:68:cb:c3:77:90:98:b8:1c:77:5e:
                    b3:2f:58:f5:e4:f4:7c:53:f7:c9:63:cd:c4:44:63:
                    5a:2d:aa:24:a8:32:94:5c:41:d6:61:c8:c8:e4:69:
                    ab:09:68:e0:4e:f8:90:db:da:52:b3:16:98:94:da:
                    7e:0d:98:ee:c1:52:f3:27:fa:84:9b:9a:19:66:8b:
                    1b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:8A:B4:D1:B2:62:25:09:B2:00:AF:93:F2:24:04:FC:A7:2D:EC:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/5edc96a2-d7e4-34f1-952c-fd1ca1e706d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b/0795b7b9-f2da-44fa-b181-d74a57f64e1b.crl

            X509v3 Authority Key Identifier:
                keyid:A3:FB:1D:59:CD:2F:DB:E4:4E:58:8A:58:BB:6E:4D:6F:27:76:4A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0795b7b9-f2da-44fa-b181-d74a57f64e1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.177.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:c3:41:54:06:d6:00:aa:ac:38:71:6c:65:00:88:d0:28:8c:
         ce:e9:d8:74:48:30:f6:63:40:0d:a8:ee:1f:ba:cc:df:d9:bd:
         f9:df:47:08:30:bf:d7:ae:21:cc:f5:bb:31:2d:46:c0:49:a7:
         0c:fb:c6:87:1b:81:42:17:d0:22:a2:57:af:e7:df:d1:a6:7d:
         68:75:a1:e0:0c:c3:d1:4a:b0:30:47:ee:ab:38:ba:d6:eb:dd:
         43:2b:d3:be:d6:8c:9f:ca:28:68:3c:cd:76:0f:59:69:69:2a:
         fa:91:a0:6d:93:fd:b8:19:aa:00:42:d9:85:10:10:97:25:c4:
         85:5b:47:99:51:37:5d:98:6a:a2:56:11:70:25:b2:56:3c:6c:
         ef:96:49:e2:c3:3d:d0:6d:a1:ae:48:b8:3e:6b:d0:f1:05:54:
         13:f4:77:05:06:3b:76:9a:fd:ed:21:4f:29:ef:78:d3:9b:87:
         56:41:97:f7:dc:3d:6e:66:de:8b:cf:8d:17:f7:fa:6d:9c:22:
         d6:5a:0e:65:1e:30:94:44:6e:49:d4:61:ae:e5:d4:a3:8b:d7:
         89:c0:45:2e:7a:d4:1c:41:92:4b:5c:35:49:0b:d8:a5:78:7d:
         f1:87:1a:fe:66:a2:e5:68:1d:52:a6:63:a0:c0:cf:93:a3:ce:
         5b:8f:ed:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 20:05:57 2026 by rpki-client