Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/73276284-ecac-36ab-a7aa-14e8474f7c9c.roa
File:                     73276284-ecac-36ab-a7aa-14e8474f7c9c.roa (raw, json)
Hash identifier:          f2xAtJyy15XHwC10fOug2w7UEdpBDZxb+YxODlwO3To=
Subject key identifier:   BC:F2:DB:8B:28:47:07:DF:91:9A:24:9E:93:66:C1:11:28:6B:46:76
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F4328584ED431F3EAC2C737F9C108E880
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/73276284-ecac-36ab-a7aa-14e8474f7c9c.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     16839
IP address blocks:        149.96.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Aug 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:f3:ea:c2:c7:37:f9:c1:08:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=504b4c64-5605-43ed-b68d-b3a074054e30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:39:b2:bb:47:2b:7a:51:0a:43:37:f3:9e:21:
                    da:fe:2c:4d:39:bc:dc:a8:06:78:84:82:0d:8d:72:
                    ab:b0:17:5c:45:2b:22:a0:ad:22:d0:dc:68:36:03:
                    a7:71:0f:f7:9e:12:55:ac:bf:67:58:c1:eb:17:ff:
                    3f:d6:06:7e:a1:8d:b5:4b:55:a1:60:5c:2f:61:7e:
                    d8:37:9e:b8:30:2a:55:f8:07:70:95:c6:b8:e0:17:
                    62:d4:b2:85:c8:1d:07:c8:7c:61:fd:42:78:8d:56:
                    66:db:66:a1:c9:11:de:e3:3d:ea:dc:be:5a:b5:5b:
                    0b:25:3f:f8:51:41:6b:55:67:76:78:1f:83:75:28:
                    c0:b7:6c:d9:22:f6:90:d6:a5:7c:06:a0:9b:55:a1:
                    ac:68:e6:8e:4a:e4:08:a5:83:3e:b9:e4:04:79:94:
                    af:15:07:46:ef:cc:8c:bc:3d:05:8a:89:78:3a:6e:
                    4a:1b:30:45:1f:03:ab:cf:bd:03:8b:15:fa:27:e9:
                    00:a7:6c:13:d3:3a:81:8b:56:35:fa:65:8e:22:82:
                    47:27:0f:de:e8:25:92:aa:db:ec:c1:93:b1:18:37:
                    91:99:42:67:27:62:4c:d3:49:aa:91:23:13:b9:4f:
                    eb:c8:ab:fb:8a:6a:c7:e9:3d:47:07:89:e0:ef:6d:
                    c1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F2:DB:8B:28:47:07:DF:91:9A:24:9E:93:66:C1:11:28:6B:46:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/73276284-ecac-36ab-a7aa-14e8474f7c9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.96.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:a9:24:31:5d:ae:6b:34:a3:66:97:92:a8:d7:bf:c0:a4:03:
         06:17:cf:44:f7:95:53:be:ed:53:02:8e:86:3e:66:f8:ba:b7:
         e7:b8:67:54:94:57:bd:d7:29:a6:22:bd:9f:97:a9:d6:88:02:
         7a:15:0f:18:b5:81:3a:8d:b1:0b:c4:33:b7:69:aa:03:3f:53:
         f3:43:3d:f8:77:07:0d:0a:65:e2:4d:70:4b:c0:26:19:c7:30:
         ef:1e:ec:92:45:74:ad:1f:f3:18:6d:c0:11:35:d8:c6:af:c1:
         29:b5:5b:5b:da:dc:85:9b:c9:65:49:d1:47:d8:05:05:64:db:
         d4:24:f5:5f:5b:7b:84:9a:a2:cb:5f:4f:4e:86:b1:34:cf:40:
         60:7c:fc:15:03:ee:f8:7a:8c:26:36:c2:9c:6d:74:04:e7:c2:
         10:df:c7:9d:b4:15:88:ec:29:05:8d:92:32:8b:42:f0:a4:47:
         1c:46:11:d2:af:d4:92:0a:bb:c5:3c:eb:1d:4b:b1:3f:8d:26:
         6e:48:09:7c:7d:13:6d:88:21:3a:e1:0b:d6:96:95:16:88:4c:
         0b:60:37:60:09:3b:27:6b:19:37:08:ef:27:88:4c:47:8f:b9:
         98:e5:24:f7:f0:6d:24:54:1e:66:48:f9:0e:5b:1c:c0:f5:0a:
         28:bd:8f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:30:29 2026 by rpki-client