Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/1bbe69ec-9686-337d-a609-e5cb951dc776.roa
File:                     1bbe69ec-9686-337d-a609-e5cb951dc776.roa (raw, json)
Hash identifier:          v/GiEFFyFtGSDq2YZBrBEuj9MXRJJQwS+RSsGF0b9WU=
Subject key identifier:   09:12:98:80:FF:B2:D9:23:CA:D8:05:81:6C:A9:B9:43:39:3A:BD:82
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F4328584E31CF161BE111E2163EADA740
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/1bbe69ec-9686-337d-a609-e5cb951dc776.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     16839
IP address blocks:        149.96.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:16:1b:e1:11:e2:16:3e:ad:a7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=e7ee7733-feaa-48d9-8e15-0eda1461f94e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:50:b1:79:43:10:ec:17:a8:fc:10:58:68:ca:
                    c1:f8:0a:86:2b:e5:61:b0:d4:31:57:d5:7e:7c:b1:
                    9a:17:6b:1d:43:5c:e5:6c:3d:04:81:51:a5:a4:b8:
                    37:68:0e:0d:c8:8d:90:8d:d9:69:05:73:c7:d9:e4:
                    4d:69:af:83:ce:1a:f5:39:94:6c:19:47:af:c7:ef:
                    24:04:cb:9e:21:52:d5:92:24:0d:c7:86:9f:79:a3:
                    c3:fa:6f:00:92:c5:17:fa:c3:ed:4c:ed:b7:60:7d:
                    eb:21:37:f4:63:bb:e1:cc:22:fb:69:46:ec:b2:2b:
                    db:1b:91:0e:30:6d:29:0d:db:73:4a:32:41:ca:b6:
                    95:d2:d3:0b:d9:b0:72:c1:1d:26:3b:25:12:62:87:
                    8a:69:70:03:d8:43:12:54:52:6c:16:c9:23:d3:a9:
                    58:bf:2c:49:f1:89:37:6b:fa:8f:7f:fc:5d:7c:0d:
                    b4:3d:ee:f9:ff:1d:f7:4f:3f:ca:a3:7a:3f:b1:97:
                    0a:f8:fb:3f:ff:3e:dd:04:5c:7a:c2:54:1a:c2:2b:
                    a1:c4:a3:74:fe:35:1b:ad:94:be:c1:c1:87:a5:80:
                    47:1c:d9:13:f5:92:27:3d:c3:fc:b3:6c:4a:c0:bb:
                    93:02:30:8c:cc:ae:64:bb:ed:61:10:82:ee:be:68:
                    52:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:12:98:80:FF:B2:D9:23:CA:D8:05:81:6C:A9:B9:43:39:3A:BD:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/1bbe69ec-9686-337d-a609-e5cb951dc776.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.96.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:8e:9f:5a:4c:91:8b:74:8b:0e:f3:2a:4e:48:0c:8e:9b:f6:
         ad:48:2a:09:d5:8c:b6:9f:27:54:3f:7b:9a:25:90:af:59:f3:
         69:0f:1a:53:db:2b:0c:32:63:c0:96:b2:64:d3:34:99:7a:28:
         3e:98:28:f6:c2:9e:24:c2:00:79:31:57:8d:49:04:64:7c:a1:
         cf:5b:2f:e1:92:0a:6f:dc:1a:ac:1d:35:b2:1c:a9:90:ea:91:
         73:fd:52:93:3d:da:23:97:fd:a4:22:a2:01:31:c8:b3:b4:64:
         b1:71:9d:c7:b6:dc:f5:d4:e3:e7:23:4b:0c:97:65:e6:5c:f7:
         04:37:e5:3e:1f:f7:5a:18:b5:8d:07:98:ec:47:4d:a5:02:c7:
         68:21:c0:3f:ec:43:5e:eb:d4:76:09:29:48:89:0c:cb:ae:3e:
         55:a2:a7:b0:dc:ec:4b:d5:38:a4:ea:47:67:f5:9a:88:4c:7b:
         a1:5c:d2:95:43:b9:10:0a:00:8a:8c:7f:42:a0:3c:20:5e:68:
         0b:30:ce:49:a5:7a:c4:ae:78:00:6e:96:fc:73:83:65:c6:c7:
         3b:97:c6:0a:b2:c8:59:88:cd:8d:1a:c0:3d:d0:13:0e:2b:bb:
         5e:f1:81:86:b2:19:fd:ad:b0:f4:91:1f:0e:16:31:2b:91:de:
         e5:53:a4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 17:22:49 2026 by rpki-client