Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/28ad8c15-6504-3448-80f6-48cbd21dac70.roa
File:                     28ad8c15-6504-3448-80f6-48cbd21dac70.roa (raw, json)
Hash identifier:          aWSn0Cx0DITZt2kauraeCaWGHxpno/zrZKZ6NsNoics=
Subject key identifier:   CD:59:4C:2D:BB:5B:45:52:D4:1B:35:8B:8C:D2:3D:02:EE:3A:E0:CF
Certificate issuer:       /CN=7c14ef7c-1289-47ed-8144-c7b3feacf5af
Certificate serial:       010D0C9F4328584EAA51A033184D1919DD817240
Authority key identifier: B0:DF:18:ED:79:09:C3:3D:8B:67:7D:45:AF:D6:81:F6:65:3C:2B:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/28ad8c15-6504-3448-80f6-48cbd21dac70.roa
Signing time:             Thu 30 Jul 2026 01:00:12 +0000
ROA not before:           Thu 30 Jul 2026 01:00:12 +0000
ROA not after:            Wed 28 Oct 2026 01:00:12 +0000
asID:                     31782
IP address blocks:        192.219.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/7c14ef7c-1289-47ed-8144-c7b3feacf5af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/7c14ef7c-1289-47ed-8144-c7b3feacf5af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:51:a0:33:18:4d:19:19:dd:81:72:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c14ef7c-1289-47ed-8144-c7b3feacf5af
        Validity
            Not Before: Jul 30 01:00:12 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=1e044067-db64-4197-8ab2-9f5271f7ac09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:57:fa:39:36:0e:b2:ee:93:f7:88:0f:60:40:
                    4c:2c:e5:e8:77:d3:ad:0d:31:37:06:bd:7c:d4:75:
                    20:fe:9f:95:df:4c:3b:50:7f:55:20:11:61:89:aa:
                    08:0a:57:60:30:61:65:42:16:b6:70:78:fb:ac:fe:
                    33:22:35:df:51:f8:a2:23:c0:68:15:9b:87:c2:63:
                    3c:de:79:12:8c:19:c8:8f:bb:dd:d1:68:6d:b3:f5:
                    f8:51:a2:16:29:ea:2e:1e:0d:bf:36:a3:e3:1a:a2:
                    32:31:f4:86:7e:1b:5b:35:77:e1:ee:5f:86:ce:80:
                    52:1a:f2:6a:6b:79:3a:b2:2e:b0:3c:72:de:26:76:
                    28:db:69:f7:90:98:b0:9f:5d:3e:65:a2:06:d1:01:
                    6b:c9:78:52:74:be:81:d1:c2:a5:84:47:ad:4f:ee:
                    5d:33:50:4c:4f:ee:44:35:4e:de:17:b6:7d:eb:9a:
                    9c:60:b5:69:c1:17:c7:99:ad:9c:23:0e:11:f0:2f:
                    9f:2d:ca:1f:e9:fc:e1:73:57:97:0c:e3:33:e8:f4:
                    ec:b1:94:89:32:0b:d0:ca:b8:92:5d:21:da:90:45:
                    7c:ae:fa:d5:6b:ef:21:bd:47:41:18:12:a9:4c:c7:
                    d5:af:1e:8b:08:19:e0:aa:2e:2f:d7:f8:bf:48:a8:
                    65:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:59:4C:2D:BB:5B:45:52:D4:1B:35:8B:8C:D2:3D:02:EE:3A:E0:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/28ad8c15-6504-3448-80f6-48cbd21dac70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/7c14ef7c-1289-47ed-8144-c7b3feacf5af.crl

            X509v3 Authority Key Identifier:
                keyid:B0:DF:18:ED:79:09:C3:3D:8B:67:7D:45:AF:D6:81:F6:65:3C:2B:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.219.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:6d:7b:07:8a:6c:60:24:d4:81:ea:a2:e3:5e:36:d8:34:8b:
         a6:74:11:51:c6:2d:e5:9c:08:7b:2c:24:4d:a3:89:18:d5:3e:
         4e:aa:94:60:bf:36:80:6b:d2:1d:3f:78:2e:89:1d:b8:ed:e2:
         2e:d8:e9:b6:74:9b:9c:24:53:ea:78:a9:5c:1c:d6:99:44:2f:
         9d:90:a9:53:8b:33:58:0e:13:1b:37:87:b1:c5:dc:1c:94:fa:
         ae:06:af:52:c3:c8:16:ad:ac:72:5c:29:5a:b9:1d:ca:ce:97:
         9a:a1:1c:7f:19:01:d8:63:f9:96:a9:94:75:56:a7:79:72:6d:
         1e:b8:88:6a:e4:0b:85:f7:1d:a8:c3:5a:55:e7:26:5f:0b:cd:
         17:5f:df:c4:4b:63:52:a5:7a:30:dc:85:7e:33:a5:94:e0:ec:
         0b:5a:80:ab:c2:ce:5d:28:33:f7:fa:94:18:92:77:3b:0e:44:
         28:51:61:d8:5f:35:b6:26:a8:3a:d4:a0:65:de:34:0a:12:1f:
         d4:95:ee:c5:cb:95:3f:8b:e8:34:2b:ed:8a:e0:71:be:2a:5d:
         4a:66:35:25:fc:23:22:d9:1c:e0:6d:4f:fe:e6:eb:d9:da:b0:
         e6:d4:9a:24:22:c3:af:b4:5c:c9:c9:11:de:1f:fd:19:29:f6:
         8e:28:d2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 21:59:05 2026 by rpki-client