Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/d8bbd3b0-d3db-3edd-9ebe-2617cdf97b63.roa
File:                     d8bbd3b0-d3db-3edd-9ebe-2617cdf97b63.roa (raw, json)
Hash identifier:          xrLaeXmHrL+V1S1ZVzjwu4s685hI77QZkXplB0Csomc=
Subject key identifier:   56:DA:7A:46:E9:21:CC:FF:15:B9:0C:DF:6E:E2:4C:A0:D6:FF:74:92
Certificate issuer:       /CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
Certificate serial:       010D0C9F4328584E534F3BF3D37BEF66827AE740
Authority key identifier: B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/d8bbd3b0-d3db-3edd-9ebe-2617cdf97b63.roa
Signing time:             Sun 28 Jun 2026 21:00:11 +0000
ROA not before:           Sun 28 Jun 2026 21:00:11 +0000
ROA not after:            Sat 26 Sep 2026 21:00:11 +0000
asID:                     812
IP address blocks:        24.137.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:53:4f:3b:f3:d3:7b:ef:66:82:7a:e7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
        Validity
            Not Before: Jun 28 21:00:11 2026 GMT
            Not After : Sep 26 21:00:11 2026 GMT
        Subject: CN=de3e47dc-cb40-4c5b-aae6-2221dbe3a113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b3:ed:0f:b4:4b:44:ab:d3:66:5b:83:89:ea:
                    6d:75:03:87:ec:a2:92:b1:e2:15:47:d6:d5:d7:28:
                    8e:70:ab:36:dc:36:1a:c8:da:ec:f0:eb:8b:f8:d4:
                    81:9e:e2:4f:f8:4e:ab:c7:b5:cd:0a:6c:89:93:73:
                    b0:75:e4:e6:22:ab:6e:da:a8:6d:c7:ea:b9:f8:39:
                    aa:8c:4f:ce:5f:37:71:b6:c5:f5:06:2c:2a:da:0a:
                    41:8f:40:7b:2d:8d:1b:f0:37:4b:52:32:e3:31:6d:
                    12:89:ea:46:ae:87:fb:e1:62:e5:81:c2:7d:7a:3c:
                    41:b1:0e:7a:d6:93:c8:10:a9:68:a1:00:7c:4e:b6:
                    3b:52:5b:a5:dc:9e:b0:f8:e1:a4:27:b3:ff:39:4b:
                    d9:b8:16:7b:31:4c:e8:63:7e:2d:05:ba:3f:d9:1b:
                    b6:dc:66:2e:28:aa:e0:fa:88:bd:f7:99:2f:f9:53:
                    26:2f:f1:6d:19:fc:57:1d:0c:7d:69:6e:e4:ec:91:
                    d1:02:bf:a6:f7:82:55:53:4a:5b:c1:84:29:3e:6b:
                    fe:5e:09:00:cc:b0:d1:b5:b9:bd:88:ab:83:c9:24:
                    dd:36:a4:49:33:21:2d:56:3d:8f:bc:ae:c2:b4:b9:
                    c4:2c:46:e6:96:a0:79:5c:8a:e3:1c:d3:4b:48:18:
                    71:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:DA:7A:46:E9:21:CC:FF:15:B9:0C:DF:6E:E2:4C:A0:D6:FF:74:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/d8bbd3b0-d3db-3edd-9ebe-2617cdf97b63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl

            X509v3 Authority Key Identifier:
                keyid:B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.137.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:d8:12:f7:c5:eb:5d:75:84:94:5e:2c:79:d9:1e:46:e8:d1:
         07:61:8d:ef:b4:f9:3f:ce:40:a6:ac:a6:59:78:90:f4:33:37:
         25:7c:f4:32:05:85:62:f3:8c:18:70:f7:54:54:bd:2e:8c:67:
         7c:75:7e:b3:bd:b7:81:c5:a4:f3:cc:e5:13:b3:2a:6a:42:db:
         b3:c8:03:8b:0c:4c:0d:9d:18:64:12:83:62:be:a8:56:02:68:
         cd:ff:f7:d7:33:23:2c:34:1e:96:44:64:8d:a2:63:3f:05:d4:
         f2:14:23:bc:f5:8c:69:08:0f:17:97:5b:84:e7:ca:99:be:a3:
         37:b8:f9:59:e5:fc:94:4f:ad:f3:3a:d4:42:2a:c0:88:32:8d:
         15:b2:f6:1f:26:15:7f:be:8b:48:7a:f5:40:f5:84:48:6d:8d:
         3d:ec:52:14:97:87:49:36:cb:f4:05:0d:35:54:9e:19:33:0f:
         ea:bf:29:dc:66:b6:a6:e3:a7:19:f4:31:ca:ef:af:f9:8a:5d:
         05:8b:d8:98:48:da:f2:b3:7f:c1:99:60:a4:d8:e0:de:c0:e0:
         59:e6:c4:9f:51:ca:96:23:b5:27:b2:94:e8:5f:ea:d6:c2:4b:
         7e:95:53:c6:9c:41:9f:34:ad:d9:85:1c:7e:31:a4:80:16:d9:
         19:d2:20:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:51:16 2026 by rpki-client