Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/4230ae39-e553-31f5-9fd0-f8a0e7c8d520.roa
File:                     4230ae39-e553-31f5-9fd0-f8a0e7c8d520.roa (raw, json)
Hash identifier:          juxElkdcj9OufM1pDpg7Za1YmOLtH11W3+432OkweU4=
Subject key identifier:   A5:9E:75:17:F6:84:77:C7:33:27:A5:56:4F:52:90:CD:4C:2C:C9:B7
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584E41C85FAF61AB211F76CD9040
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/4230ae39-e553-31f5-9fd0-f8a0e7c8d520.roa
Signing time:             Mon 22 Jun 2026 14:19:47 +0000
ROA not before:           Mon 22 Jun 2026 14:19:47 +0000
ROA not after:            Sun 20 Sep 2026 14:19:47 +0000
asID:                     7459
IP address blocks:        192.102.96.0/22 maxlen: 24
                          192.102.100.0/22 maxlen: 24
                          192.102.104.0/22 maxlen: 24
                          192.102.108.0/22 maxlen: 24
                          192.102.112.0/22 maxlen: 24
                          192.102.116.0/22 maxlen: 24
                          192.102.120.0/22 maxlen: 24
                          192.132.128.0/20 maxlen: 24
                          192.132.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:c8:5f:af:61:ab:21:1f:76:cd:90:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Jun 22 14:19:47 2026 GMT
            Not After : Sep 20 14:19:47 2026 GMT
        Subject: CN=70e6208c-c233-4ef2-926d-e946d834eb63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e3:2e:af:38:63:d8:63:b6:fb:fc:ce:93:3e:
                    91:fc:14:ea:2a:71:56:b0:19:1e:da:f6:d3:65:2d:
                    d4:9e:c5:fd:f7:63:39:d5:57:45:c4:75:ad:aa:07:
                    49:44:71:f7:18:a4:d4:2a:c9:51:91:00:0a:3d:31:
                    88:30:54:28:e5:50:85:b1:ee:81:57:2a:78:d6:d6:
                    56:8a:36:ed:9e:34:1b:86:a2:5e:3f:e0:04:41:d5:
                    74:71:11:cb:4f:45:98:9d:bb:6b:44:69:96:c7:01:
                    9b:2a:0b:36:f3:35:ce:d3:65:7a:b8:12:55:0f:58:
                    2d:e7:f6:b3:b4:0b:06:90:ab:d8:09:e7:a5:06:43:
                    4c:02:03:31:23:d6:eb:52:63:8f:91:0a:e9:3b:47:
                    60:38:c1:ed:e3:9e:a8:82:f4:ef:96:49:be:58:c6:
                    ec:b6:49:f8:9d:c2:9e:62:e6:57:d0:f3:ec:dd:29:
                    5d:40:89:50:a0:bf:f2:d9:5a:34:22:0a:52:1a:8d:
                    56:5a:95:5c:d3:32:55:e9:8a:26:9f:2f:9d:f6:6a:
                    d8:b9:4d:f0:7f:80:7c:e7:03:40:e1:71:7d:54:2b:
                    8d:e2:f3:01:54:72:1a:b7:ed:3a:61:fb:9b:31:fc:
                    80:5f:e5:ac:5e:7e:7c:e3:f7:06:30:76:26:73:45:
                    aa:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:9E:75:17:F6:84:77:C7:33:27:A5:56:4F:52:90:CD:4C:2C:C9:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/4230ae39-e553-31f5-9fd0-f8a0e7c8d520.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.102.96.0-192.102.123.255
                  192.132.128.0/20
                  192.132.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:b4:68:49:f3:fc:2d:0b:2c:6b:ab:df:0b:a0:e6:41:b3:f0:
         4a:09:5b:d4:8e:58:80:19:f1:c9:53:e8:03:08:94:f0:f5:5a:
         e4:5c:3d:b8:fa:32:10:38:42:80:e5:d4:ca:23:26:d1:5a:b6:
         d9:ed:eb:5f:20:6d:21:6c:97:b9:d5:9b:4f:81:4b:dc:35:a4:
         01:46:11:9e:d2:ec:0f:a0:a8:a1:29:63:db:8a:1e:ff:6d:63:
         9b:ad:c2:6d:88:25:cf:f4:8b:c9:19:68:38:56:06:bc:95:4c:
         3c:62:27:4e:5c:97:b2:c1:8d:f5:4b:16:88:57:ec:20:2a:c6:
         3f:1e:a5:a6:17:aa:ca:5e:e0:81:80:a9:f6:3c:4b:fe:36:51:
         45:31:46:f9:88:1d:e3:fb:2f:93:29:6f:08:0a:a0:bd:dd:66:
         37:88:32:4b:37:51:4a:b8:c4:28:bd:61:66:80:e4:be:1d:85:
         c9:1f:4f:e8:32:c9:b3:f0:f5:44:56:be:6f:b6:fe:80:07:9e:
         25:4c:eb:e8:db:9a:13:5c:87:54:bd:3a:14:ac:ae:62:db:df:
         5d:c5:35:76:35:32:c8:8b:48:79:af:3f:93:fc:bc:a0:51:bd:
         6a:38:84:b4:67:0f:73:71:b2:1d:e1:cf:e4:3e:d7:0b:3f:4e:
         2e:2a:b4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:44:02 2026 by rpki-client