Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9b297cc7-4f76-4bfe-bf80-19a353b6648e/fa5b3234-3b8c-33f0-988b-ce636104ec3e.roa
File:                     fa5b3234-3b8c-33f0-988b-ce636104ec3e.roa (raw, json)
Hash identifier:          bqHmURLuGBl40UYLfNe2HVXF5hrIZAAVNlGxIZVP3m0=
Subject key identifier:   84:3B:FB:18:F8:41:0C:BC:89:89:38:A3:C2:CA:1D:DA:2B:9A:98:F3
Certificate issuer:       /CN=9b297cc7-4f76-4bfe-bf80-19a353b6648e
Certificate serial:       010D0C9F4328584E30A7D8DA59128DBFA8463220
Authority key identifier: A3:FC:89:A7:9E:55:75:B0:61:39:44:9D:AE:B1:52:0F:C9:F7:53:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9b297cc7-4f76-4bfe-bf80-19a353b6648e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9b297cc7-4f76-4bfe-bf80-19a353b6648e/fa5b3234-3b8c-33f0-988b-ce636104ec3e.roa
Signing time:             Tue 16 Jun 2026 11:05:30 +0000
ROA not before:           Tue 16 Jun 2026 11:05:30 +0000
ROA not after:            Mon 14 Sep 2026 11:05:30 +0000
asID:                     13335
IP address blocks:        129.192.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9b297cc7-4f76-4bfe-bf80-19a353b6648e/9b297cc7-4f76-4bfe-bf80-19a353b6648e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9b297cc7-4f76-4bfe-bf80-19a353b6648e/9b297cc7-4f76-4bfe-bf80-19a353b6648e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9b297cc7-4f76-4bfe-bf80-19a353b6648e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:30:a7:d8:da:59:12:8d:bf:a8:46:32:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b297cc7-4f76-4bfe-bf80-19a353b6648e
        Validity
            Not Before: Jun 16 11:05:30 2026 GMT
            Not After : Sep 14 11:05:30 2026 GMT
        Subject: CN=23b1a4af-e53d-4046-9eb2-614bc0cfec19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:03:ec:a3:25:ca:81:90:b4:92:2b:fe:8f:1d:
                    50:7f:82:ef:84:17:19:16:16:fb:4a:6a:8e:bd:e2:
                    2d:ba:b0:76:f9:fe:5d:a6:1c:f1:98:17:24:ee:34:
                    11:5c:5f:d1:b3:4e:34:a7:bb:16:dd:8d:a5:17:e1:
                    b2:e0:f8:63:8a:95:ef:05:38:13:03:df:b7:93:f7:
                    3f:12:13:2c:b1:bf:b2:ef:44:38:5d:22:01:a4:a4:
                    5f:7e:be:40:2d:8f:73:ae:2d:9d:54:52:b1:f0:8d:
                    34:52:13:e6:6b:a2:9a:35:50:69:e6:20:b8:ed:fb:
                    78:8f:d4:90:2a:f1:2a:93:52:a8:19:0c:93:bb:14:
                    92:4b:a2:a8:5f:31:00:00:9a:a2:53:17:a8:a6:9d:
                    09:fb:0b:2f:3b:5a:9c:2c:11:8b:c7:ce:7a:78:85:
                    af:4d:a3:82:f6:ca:33:47:9e:48:04:20:ba:41:e2:
                    cc:c6:f2:00:e2:8c:bd:8d:52:ae:58:eb:f4:aa:c1:
                    9f:a3:f9:f8:6a:a5:23:33:ce:08:c0:0a:f8:6a:54:
                    a5:1b:a6:74:7f:87:90:b7:6d:3e:0c:b7:de:e2:84:
                    52:e5:6d:d1:e0:c8:31:2a:c1:f1:3d:60:12:5d:7b:
                    76:9b:17:a3:69:19:c2:12:7c:56:15:44:69:95:1b:
                    71:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:3B:FB:18:F8:41:0C:BC:89:89:38:A3:C2:CA:1D:DA:2B:9A:98:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9b297cc7-4f76-4bfe-bf80-19a353b6648e/fa5b3234-3b8c-33f0-988b-ce636104ec3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9b297cc7-4f76-4bfe-bf80-19a353b6648e/9b297cc7-4f76-4bfe-bf80-19a353b6648e.crl

            X509v3 Authority Key Identifier:
                keyid:A3:FC:89:A7:9E:55:75:B0:61:39:44:9D:AE:B1:52:0F:C9:F7:53:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9b297cc7-4f76-4bfe-bf80-19a353b6648e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.192.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:c9:78:b1:0f:4c:67:9c:28:c4:43:87:fa:8e:7a:b1:39:ad:
         dd:41:2d:2b:05:65:8d:4e:0b:98:1e:38:db:58:7b:eb:20:53:
         59:c4:88:4a:86:9e:03:8e:88:d1:7d:f5:7f:9a:70:6e:d4:c0:
         b8:d9:a3:27:59:c6:b0:ac:5c:ee:8c:47:11:69:5b:17:f2:25:
         9f:e3:1a:99:60:33:d4:71:f2:25:50:e4:31:86:8a:02:81:a4:
         6b:a2:59:2e:1e:47:44:72:2c:8b:84:9d:7c:ce:d9:e6:d0:39:
         5c:49:7a:52:ff:22:05:cb:18:9d:81:e4:c6:9f:f5:f5:0e:21:
         8b:27:7f:82:29:ff:eb:0c:36:4b:42:bb:41:b7:2e:e4:4b:c8:
         a5:c8:09:05:d1:9b:7a:39:88:9a:f2:92:00:22:64:d9:ab:4b:
         61:3b:ec:22:e9:6d:90:7f:0b:66:22:6e:8f:e8:f1:e8:58:98:
         65:8e:10:84:7c:98:6b:0d:bd:1b:a3:61:20:2b:81:5d:00:f3:
         a7:d7:e5:29:d4:a2:11:9b:e0:61:95:bb:1d:59:ac:5b:31:f8:
         19:ff:bd:ad:fb:9f:45:fb:43:dd:95:92:05:52:ea:1a:0c:11:
         3f:5b:5b:f4:13:d6:72:b7:b2:2e:a4:e0:56:33:fd:8a:6d:47:
         43:62:b3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:24 2026 by rpki-client