Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/f5e72b65-8c3f-3a03-8288-f2e959e37279.roa
File:                     f5e72b65-8c3f-3a03-8288-f2e959e37279.roa (raw, json)
Hash identifier:          8Qy587u315U8WP/cirVprCmWpotIsbIRE/QWxpvGrsk=
Subject key identifier:   E5:97:FC:15:9D:F7:F2:BB:14:42:CA:58:0B:6F:BD:25:90:AE:53:15
Certificate issuer:       /CN=9050423a-b7ae-4879-a880-ea3be6e193a8
Certificate serial:       010D0C9F4328584E577F46472DFA0BBCC538F780
Authority key identifier: E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/f5e72b65-8c3f-3a03-8288-f2e959e37279.roa
Signing time:             Tue 30 Jun 2026 09:00:12 +0000
ROA not before:           Tue 30 Jun 2026 09:00:12 +0000
ROA not after:            Mon 28 Sep 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        192.111.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:57:7f:46:47:2d:fa:0b:bc:c5:38:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9050423a-b7ae-4879-a880-ea3be6e193a8
        Validity
            Not Before: Jun 30 09:00:12 2026 GMT
            Not After : Sep 28 09:00:12 2026 GMT
        Subject: CN=b6e2be39-d029-4fb5-838f-03e010b0bfd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:be:bc:f7:a2:64:41:95:ff:81:2d:5f:83:02:
                    17:15:63:57:1a:90:a6:59:c7:10:e3:e6:e0:a5:ca:
                    f1:49:50:eb:48:45:a8:4f:7e:2f:e4:8f:cd:b0:a9:
                    48:bd:3c:4e:9d:bd:00:dd:fd:11:1f:c8:22:c9:58:
                    59:68:96:e8:76:80:b4:3d:a4:ab:c3:e1:b0:29:20:
                    f2:8b:55:69:60:88:5f:1e:dd:cd:da:55:c6:82:12:
                    70:9a:91:5c:cb:5d:a8:9c:f6:5d:c1:00:09:5a:30:
                    81:de:40:36:70:ff:40:89:4d:de:e0:76:36:76:89:
                    92:2d:88:35:be:e7:57:3f:c3:bd:e6:3d:7c:8e:bb:
                    09:09:17:14:5a:c4:cc:30:d4:c5:ea:ee:61:31:27:
                    ef:9a:0b:60:f2:07:06:70:d9:6c:0f:2e:e1:5c:01:
                    ff:eb:b7:b3:c9:95:0e:b8:08:fd:fe:60:c1:72:da:
                    8a:60:65:49:e2:76:75:1b:c7:04:95:1f:dd:b0:d4:
                    8d:52:c1:69:66:9c:11:31:b4:e1:a7:6d:6b:4d:de:
                    fd:68:af:30:5c:ec:95:4d:26:8a:eb:f8:02:f8:47:
                    5f:cf:29:ef:2d:23:34:38:44:03:78:e3:91:d9:c7:
                    75:11:55:ad:0f:02:eb:0e:5f:32:bc:02:f5:36:c3:
                    4c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:97:FC:15:9D:F7:F2:BB:14:42:CA:58:0B:6F:BD:25:90:AE:53:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/f5e72b65-8c3f-3a03-8288-f2e959e37279.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl

            X509v3 Authority Key Identifier:
                keyid:E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         df:6c:a2:38:ce:34:0c:cb:c9:09:63:bb:d4:e0:a8:07:29:ca:
         3f:2a:e3:11:87:45:72:55:d0:43:0d:9b:2a:8c:69:b0:0a:5b:
         7e:84:25:a1:5a:e9:ff:8d:11:5a:b9:bd:8a:9c:df:c1:96:f8:
         4a:6f:26:60:4e:27:a8:f1:57:c1:9c:80:73:21:de:99:8f:ad:
         f3:01:8c:a2:2f:c7:ac:10:ae:d0:1b:5e:1d:eb:ea:2c:76:81:
         aa:00:d6:44:e1:c3:c1:5d:67:d8:7c:a5:54:ef:4a:16:c4:f4:
         49:e9:2d:99:75:89:c0:05:f1:64:e8:d4:38:57:80:98:42:e8:
         4f:e3:45:ef:0e:a9:be:71:35:f0:62:6e:45:73:c1:ea:ac:6e:
         69:52:ae:35:1c:53:da:8e:1e:f8:eb:75:61:fd:c6:06:59:18:
         a7:ab:63:a8:dc:d2:f7:0b:72:9d:1c:8a:45:c1:32:08:5f:9c:
         fc:98:bf:35:6a:53:17:ba:1c:5f:86:c8:ff:25:e9:dd:54:58:
         1b:95:c5:d6:27:9f:a4:95:27:9d:09:ba:19:a6:38:f4:e8:51:
         aa:e1:70:3a:c1:52:99:4c:22:2c:b7:93:3b:ed:55:a5:44:35:
         eb:31:0e:ce:89:b1:64:9d:93:0e:1c:f3:92:f2:ef:7b:43:5b:
         54:1d:10:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:23:48 2026 by rpki-client