Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/d68ed165-7389-3232-85d4-20e1edff7e2f.roa
File:                     d68ed165-7389-3232-85d4-20e1edff7e2f.roa (raw, json)
Hash identifier:          lYOQh4aF3U9TvAayy7NzPIjUxABh5Ydf4LvaaeUt+F4=
Subject key identifier:   55:80:E3:F9:29:7B:38:56:5F:9F:45:8F:C5:F0:E2:97:B1:57:41:A1
Certificate issuer:       /CN=8bb8bd36-b264-4279-a16e-360f4a33eb80
Certificate serial:       010D0C9F4328584E4C54918844E7523F584DFFF0
Authority key identifier: 9A:14:65:DF:F1:9B:5E:23:25:AB:9B:30:D0:F1:24:8C:6C:27:AD:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/d68ed165-7389-3232-85d4-20e1edff7e2f.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     7922
IP address blocks:        192.48.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/8bb8bd36-b264-4279-a16e-360f4a33eb80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/8bb8bd36-b264-4279-a16e-360f4a33eb80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:91:88:44:e7:52:3f:58:4d:ff:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bb8bd36-b264-4279-a16e-360f4a33eb80
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=e28ba908-dea1-42ad-93f8-16d440d5986d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:33:86:5b:5d:22:7f:27:f9:f0:b3:82:14:be:
                    87:60:ff:88:57:88:81:9f:2d:77:2b:f9:80:46:16:
                    50:32:4c:31:cf:f0:4e:3c:06:34:4b:f5:08:66:ab:
                    e4:81:97:5e:3c:20:f2:4e:8a:28:d1:dd:a0:13:d0:
                    2e:62:65:f4:45:56:68:c4:b6:df:ea:8e:4b:95:12:
                    d9:62:55:a3:ee:15:52:dd:48:cb:1a:ed:32:c2:76:
                    36:d7:38:d0:9b:d1:ac:6d:1f:71:ee:b8:82:c5:63:
                    e3:9c:6b:49:72:c4:58:91:d6:40:5b:1b:5a:c0:ab:
                    a0:5a:61:48:7b:7c:4f:d2:81:16:2b:2c:45:a8:79:
                    91:5a:f6:ec:48:03:32:50:36:e4:f3:23:64:1f:ac:
                    f1:a4:e2:b4:23:c3:ae:a6:4b:a1:9f:c2:9c:e7:80:
                    11:be:0e:a3:e0:8d:09:d9:e2:b7:57:3e:10:99:c9:
                    ba:d8:45:9b:2a:8c:f5:52:03:02:63:c9:65:53:14:
                    a6:22:dd:59:7f:7a:c0:c2:d9:2f:ee:d8:4a:46:2d:
                    05:9a:fa:e1:f5:13:4d:a4:38:a2:ec:7d:57:0b:c5:
                    35:80:18:de:64:8d:6b:6c:3c:b3:51:b9:f3:ed:29:
                    d9:76:04:bb:e7:d2:ab:b9:d4:91:b5:94:bb:2e:31:
                    40:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:80:E3:F9:29:7B:38:56:5F:9F:45:8F:C5:F0:E2:97:B1:57:41:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/d68ed165-7389-3232-85d4-20e1edff7e2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80/8bb8bd36-b264-4279-a16e-360f4a33eb80.crl

            X509v3 Authority Key Identifier:
                keyid:9A:14:65:DF:F1:9B:5E:23:25:AB:9B:30:D0:F1:24:8C:6C:27:AD:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8bb8bd36-b264-4279-a16e-360f4a33eb80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:b8:ca:47:c7:46:df:08:8a:a6:8c:3b:ed:06:55:03:1b:63:
         0c:a0:19:c8:bc:08:7c:3e:50:99:87:82:49:ef:0b:b8:95:75:
         47:f9:c9:58:de:8f:86:72:6c:24:88:e6:f2:7f:9c:27:8f:5c:
         be:37:ed:bf:b2:fa:05:cd:31:d9:7d:54:7c:25:ab:a5:dc:2c:
         a1:a3:db:7f:4b:bc:78:72:5c:04:08:f9:03:82:ef:09:1a:6b:
         55:d9:f2:8b:02:46:90:4b:20:a1:78:13:5b:2b:a8:49:6a:0a:
         0b:57:3c:cb:47:ab:b2:ac:6e:6d:ae:20:87:ea:e3:f8:59:a6:
         05:6a:c5:21:73:42:01:e6:49:30:23:c9:06:aa:c1:4c:65:b8:
         80:a2:ff:ba:ed:de:ee:2f:a1:d1:99:6f:48:6f:77:50:b5:98:
         29:8f:b9:e8:e1:ea:b6:dd:7d:77:8c:fc:60:01:7f:ec:7d:7a:
         31:b3:9a:1a:7d:d2:8b:27:49:f4:82:68:3d:99:42:28:ea:f3:
         c4:7d:c9:3e:8d:8f:f4:9b:40:34:13:62:e6:48:fe:4c:65:a8:
         05:c2:20:36:c6:49:69:67:9b:ee:b8:41:05:4c:09:36:42:a5:
         d3:5f:f9:bc:18:d3:a4:df:19:46:f9:05:8d:b9:e9:65:f3:eb:
         f5:8e:8c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 15:32:05 2026 by rpki-client