Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b0f5898-6bfa-4fdc-aa09-d90787500755/b544bf03-2a78-36fe-afd5-881d261c1b98.roa
File:                     b544bf03-2a78-36fe-afd5-881d261c1b98.roa (raw, json)
Hash identifier:          rwncs9JKI9Tqp4TSd+KjtwawgCXqYFdJ7ZIgAl6uEZE=
Subject key identifier:   2C:5D:E0:FE:1E:89:11:D0:75:6E:FF:F8:D0:E1:CF:F1:9A:48:EF:51
Certificate issuer:       /CN=6b0f5898-6bfa-4fdc-aa09-d90787500755
Certificate serial:       010D0C9F4328584E5CF2A731A4579A69F1C61000
Authority key identifier: DA:CF:BE:68:7C:33:95:AC:D3:CA:BF:AC:A6:CF:61:AD:9B:89:DF:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b0f5898-6bfa-4fdc-aa09-d90787500755.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b0f5898-6bfa-4fdc-aa09-d90787500755/b544bf03-2a78-36fe-afd5-881d261c1b98.roa
Signing time:             Thu 02 Jul 2026 07:51:48 +0000
ROA not before:           Thu 02 Jul 2026 07:51:48 +0000
ROA not after:            Wed 30 Sep 2026 07:51:48 +0000
asID:                     11170
IP address blocks:        208.92.96.0/21 maxlen: 21
                          208.92.96.0/24 maxlen: 24
                          208.92.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b0f5898-6bfa-4fdc-aa09-d90787500755/6b0f5898-6bfa-4fdc-aa09-d90787500755.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b0f5898-6bfa-4fdc-aa09-d90787500755/6b0f5898-6bfa-4fdc-aa09-d90787500755.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b0f5898-6bfa-4fdc-aa09-d90787500755.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5c:f2:a7:31:a4:57:9a:69:f1:c6:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b0f5898-6bfa-4fdc-aa09-d90787500755
        Validity
            Not Before: Jul  2 07:51:48 2026 GMT
            Not After : Sep 30 07:51:48 2026 GMT
        Subject: CN=95df26f4-4e8f-4a1b-afc4-e64aaded218d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2d:48:64:b1:c3:04:58:27:d8:bb:1c:a8:c4:
                    bf:8b:f8:45:05:c3:bf:8f:db:9f:06:38:f7:db:82:
                    70:88:16:63:ff:48:c2:63:09:cc:f2:7c:65:38:bb:
                    d4:09:82:9a:74:97:81:b6:d5:73:fa:3b:bd:12:6b:
                    6c:a8:7f:bd:0d:bd:10:77:d6:1f:f5:e8:31:ce:ba:
                    cf:fe:be:a7:37:ba:80:ed:b5:99:85:fd:7d:f4:84:
                    7c:b9:1f:02:38:51:65:17:9d:e0:d8:76:ae:a4:8a:
                    29:bf:aa:b3:cc:be:86:a0:72:3d:90:bf:84:d9:4d:
                    f5:c5:ae:a7:9a:5d:be:5e:f6:b9:8b:5f:b6:7c:83:
                    dd:77:a9:8d:c2:cb:42:fc:5b:8a:e1:68:b3:bd:38:
                    76:6f:84:96:69:4e:0c:17:96:b6:3d:9a:42:3d:54:
                    40:d9:cb:c8:85:7c:20:0b:cc:e4:ff:bb:f8:75:8f:
                    24:c1:65:f7:5e:4c:01:45:b0:3e:d0:a5:b0:16:45:
                    38:1a:ab:ba:5c:65:41:c0:49:f6:54:ce:0b:99:ec:
                    39:33:af:52:1d:10:2d:9b:6e:84:bc:02:43:b9:87:
                    0e:fd:35:60:36:df:50:89:d1:d9:6d:73:ef:6b:56:
                    00:cf:93:e0:85:0a:52:cb:43:c7:15:0f:d8:cc:0a:
                    11:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:5D:E0:FE:1E:89:11:D0:75:6E:FF:F8:D0:E1:CF:F1:9A:48:EF:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b0f5898-6bfa-4fdc-aa09-d90787500755/b544bf03-2a78-36fe-afd5-881d261c1b98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b0f5898-6bfa-4fdc-aa09-d90787500755/6b0f5898-6bfa-4fdc-aa09-d90787500755.crl

            X509v3 Authority Key Identifier:
                keyid:DA:CF:BE:68:7C:33:95:AC:D3:CA:BF:AC:A6:CF:61:AD:9B:89:DF:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6b0f5898-6bfa-4fdc-aa09-d90787500755.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.92.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:ac:53:1d:2e:e8:15:f9:a7:74:29:e6:07:d0:01:7a:e6:0e:
         2f:aa:06:94:a9:4d:4b:b6:57:1a:04:80:97:2b:aa:10:46:7d:
         2c:54:54:91:e6:3a:8e:3e:27:6f:3a:8b:90:8d:97:6b:cb:59:
         c7:a9:11:bd:30:67:b2:26:83:e0:84:5f:7c:59:d0:b8:ec:63:
         b0:91:03:72:76:63:70:44:29:bb:ad:1a:85:a6:b5:07:56:c7:
         69:39:12:e9:48:d3:26:a4:33:f5:7e:a1:b8:25:c1:aa:3b:6a:
         78:87:f6:98:f6:99:5e:0a:4a:79:9c:c5:72:68:c1:67:d3:48:
         95:b3:e8:cd:ec:e1:c7:44:48:27:c0:73:3f:a3:04:02:2f:47:
         84:a9:cc:7e:b1:91:fe:b9:b7:09:9c:78:8f:3f:9f:b7:c9:8e:
         25:e5:56:4b:ad:14:b2:e9:70:9c:f9:fc:47:ae:9d:08:0f:ff:
         91:52:32:33:8d:16:31:d8:de:0f:ad:84:3e:d1:a6:9a:29:6e:
         4f:cf:d8:d1:cc:42:f7:6a:96:97:ac:1c:f9:39:12:f9:e3:cd:
         3f:6b:11:06:0d:65:71:fa:34:69:ca:07:5a:5d:28:3d:14:34:
         78:17:ae:7a:5c:20:b5:2d:f5:49:2c:3d:32:6a:86:b3:51:82:
         4d:5f:39:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 21:53:13 2026 by rpki-client