Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b0f5898-6bfa-4fdc-aa09-d90787500755/07190909-34fd-3bfe-8a28-741595cc170a.roa
File:                     07190909-34fd-3bfe-8a28-741595cc170a.roa (raw, json)
Hash identifier:          A8UhuLozG5V5A9c7bXeT82B+H2T4pqxJrY6drvJnLEs=
Subject key identifier:   A7:46:48:D8:1A:EE:91:40:D1:16:2E:03:F0:88:CC:0E:C2:BA:05:76
Certificate issuer:       /CN=6b0f5898-6bfa-4fdc-aa09-d90787500755
Certificate serial:       010D0C9F4328584E5CF3BBB533527AFDB37B4D00
Authority key identifier: DA:CF:BE:68:7C:33:95:AC:D3:CA:BF:AC:A6:CF:61:AD:9B:89:DF:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b0f5898-6bfa-4fdc-aa09-d90787500755.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b0f5898-6bfa-4fdc-aa09-d90787500755/07190909-34fd-3bfe-8a28-741595cc170a.roa
Signing time:             Thu 02 Jul 2026 07:53:58 +0000
ROA not before:           Thu 02 Jul 2026 07:53:58 +0000
ROA not after:            Wed 30 Sep 2026 07:53:58 +0000
asID:                     7412
IP address blocks:        208.92.96.0/21 maxlen: 21
                          2607:f608::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b0f5898-6bfa-4fdc-aa09-d90787500755/6b0f5898-6bfa-4fdc-aa09-d90787500755.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b0f5898-6bfa-4fdc-aa09-d90787500755/6b0f5898-6bfa-4fdc-aa09-d90787500755.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b0f5898-6bfa-4fdc-aa09-d90787500755.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5c:f3:bb:b5:33:52:7a:fd:b3:7b:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b0f5898-6bfa-4fdc-aa09-d90787500755
        Validity
            Not Before: Jul  2 07:53:58 2026 GMT
            Not After : Sep 30 07:53:58 2026 GMT
        Subject: CN=33345011-c78b-428b-9819-1799216d310d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7e:2d:20:33:30:19:3c:08:02:a2:30:e9:ea:
                    9b:53:1c:d5:23:0f:0a:b8:3c:36:bb:cb:d0:32:23:
                    bf:2a:ae:c8:1c:1c:a0:47:99:7a:b0:3c:52:08:2d:
                    5c:01:51:75:b0:87:63:26:0a:18:9b:5c:a1:1f:7d:
                    b2:3a:d4:1e:2d:b0:94:69:bc:16:0b:62:9b:15:d5:
                    36:4e:62:08:17:67:99:c2:d4:6b:86:94:bc:8d:fe:
                    5e:a6:5d:b7:d1:50:4f:75:d1:dd:5e:fe:e2:1a:19:
                    73:0c:9e:44:6a:68:02:12:91:93:38:05:fa:ef:eb:
                    c5:17:f0:70:e7:5c:10:1a:0d:13:00:b4:a7:6c:75:
                    45:94:76:67:e1:e5:25:7a:87:b7:9e:8b:aa:80:cb:
                    43:42:bf:56:d4:7d:0e:3c:88:58:ca:7c:91:41:ce:
                    13:b7:8a:21:8f:7c:10:70:04:b9:ed:2f:5e:8f:37:
                    03:8c:fb:33:6f:cb:48:6d:4f:98:b6:66:a1:6f:2e:
                    61:7a:0d:d5:83:2d:c5:b4:8a:ac:b5:08:db:27:2f:
                    b8:73:77:a1:68:e7:61:2b:60:a2:3d:22:82:20:b6:
                    21:fc:ea:55:97:84:d7:54:84:a2:68:7e:00:57:df:
                    d6:5f:9e:82:a5:c9:99:fb:4a:89:77:be:72:06:22:
                    f5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:46:48:D8:1A:EE:91:40:D1:16:2E:03:F0:88:CC:0E:C2:BA:05:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b0f5898-6bfa-4fdc-aa09-d90787500755/07190909-34fd-3bfe-8a28-741595cc170a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b0f5898-6bfa-4fdc-aa09-d90787500755/6b0f5898-6bfa-4fdc-aa09-d90787500755.crl

            X509v3 Authority Key Identifier:
                keyid:DA:CF:BE:68:7C:33:95:AC:D3:CA:BF:AC:A6:CF:61:AD:9B:89:DF:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b0f5898-6bfa-4fdc-aa09-d90787500755.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.92.96.0/21
                IPv6:
                  2607:f608::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:ba:1b:b7:28:a3:c6:06:22:4f:0a:71:1c:d9:26:ef:1f:9d:
         df:0c:44:3e:40:d0:c0:d3:2c:91:71:38:b1:d4:d3:ff:21:3e:
         27:cc:f9:35:ab:1a:63:bf:c6:7f:58:63:c8:83:1c:de:d3:ce:
         ee:dc:d4:c3:e7:25:1f:53:42:48:40:0f:c0:84:f7:7d:c0:1d:
         fb:cd:d2:2a:9f:71:9d:71:20:03:5b:07:a4:65:06:a4:b5:04:
         e1:ad:bf:71:83:02:6a:f3:f3:ae:51:f7:a6:90:b7:ed:2c:ba:
         88:3d:8a:6e:ec:eb:2e:3c:22:90:a5:eb:9d:47:8d:8c:d8:43:
         8d:d4:c2:45:f3:5d:60:5c:ff:3a:1a:d3:ff:fb:89:39:0c:02:
         d8:dc:52:2c:85:0b:23:dd:b1:6e:c7:86:24:66:9e:d8:26:e2:
         b3:2b:f9:e3:eb:d3:a7:b9:2a:0b:17:22:c6:bb:30:1e:b9:2a:
         91:f9:36:0d:88:a7:cb:8b:47:09:d8:aa:d8:49:be:4e:88:cd:
         9f:5c:49:ea:da:4a:ac:05:c2:6d:64:55:12:97:14:80:7a:8d:
         08:4e:8d:ef:36:62:2d:31:88:e0:c7:a5:de:93:e9:5e:f4:44:
         4f:ed:6d:b6:10:fd:74:86:8f:39:90:7c:c4:e6:87:db:6a:bf:
         11:93:28:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 23:51:33 2026 by rpki-client