Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/e92c285d-42ac-326f-a5f3-5d7542fc90ae.roa
File:                     e92c285d-42ac-326f-a5f3-5d7542fc90ae.roa (raw, json)
Hash identifier:          tsnRZ/1aytZTj2dYbcJoVQHJXO58uM37RRcXCmV8yn0=
Subject key identifier:   64:A9:86:E5:14:A5:F5:B2:14:6A:94:46:21:6F:7C:C7:15:E1:19:26
Certificate issuer:       /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial:       010D0C9F4328584E7634DFB0E164A3AE943B5E00
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/e92c285d-42ac-326f-a5f3-5d7542fc90ae.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     9009
IP address blocks:        172.85.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:df:b0:e1:64:a3:ae:94:3b:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=dde0ccae-7db4-46be-a8bf-7a092518fda4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ec:31:fd:7b:78:3c:7f:77:35:a1:c2:cd:51:
                    9f:4d:24:b0:23:fe:e3:1f:ca:e9:22:0c:81:66:2f:
                    a6:5b:48:b6:a9:5a:be:81:9a:e0:4e:e9:4c:de:c8:
                    d3:59:09:0e:23:8e:5b:63:a0:38:3d:cc:de:dc:eb:
                    16:5c:cb:83:48:37:7c:e1:dd:25:87:7c:b5:bb:29:
                    78:97:8f:e2:9b:21:cb:d3:08:58:22:cd:9d:8a:37:
                    c8:13:3a:1a:bd:dc:71:90:1b:a7:26:d5:31:63:e9:
                    60:d8:e2:67:c8:e0:7d:6e:f5:a6:34:2e:dd:7a:4b:
                    49:f1:d1:90:23:63:3d:98:ee:18:40:65:aa:4d:ce:
                    3e:30:62:32:b5:3b:87:29:4e:1f:7a:06:7c:5f:1d:
                    68:52:21:26:5f:5b:3a:57:1a:80:fd:1a:60:79:c7:
                    ee:87:b1:45:9c:da:ba:c2:ef:30:f5:44:ab:e3:9a:
                    d7:d4:74:22:99:1d:7d:2d:a5:ff:2f:ba:fb:40:7c:
                    d3:d0:1d:7e:36:d9:98:9a:9c:5b:b0:2d:db:20:72:
                    37:90:10:f8:e4:39:71:4e:fb:86:13:5a:f0:1a:a6:
                    95:b3:83:c6:fc:d3:73:38:0b:a6:7f:e0:07:85:00:
                    10:10:ab:c1:b9:d8:b4:bc:ea:70:41:15:1a:23:0d:
                    cb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A9:86:E5:14:A5:F5:B2:14:6A:94:46:21:6F:7C:C7:15:E1:19:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/e92c285d-42ac-326f-a5f3-5d7542fc90ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.85.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:e2:02:1f:56:c0:e6:02:cb:ae:56:9e:25:7e:80:5c:73:da:
         fd:5e:1f:7d:e8:cb:e8:64:2b:3d:36:1c:15:a2:e2:65:94:f9:
         d6:cd:10:21:90:ac:71:43:ea:19:e0:63:c9:87:4e:43:da:6a:
         46:ab:21:d0:d8:17:19:56:e4:e7:8f:07:ea:ee:c6:77:3c:18:
         5a:00:53:4e:c5:a8:e3:72:b1:dd:04:63:46:42:86:f4:f3:55:
         6b:2a:4f:f0:68:c9:44:6d:ea:3a:e1:71:29:70:e3:f5:c1:a1:
         86:8c:ea:72:6f:0b:e0:28:7e:a1:5d:55:e3:11:e5:d1:67:2b:
         b6:6f:9e:75:e7:b6:3d:10:ce:23:b3:8c:74:ff:ce:4b:d2:40:
         76:f0:81:dd:8b:5e:b7:8e:ba:b2:9c:b9:d1:9f:2f:a4:57:90:
         d0:71:e9:08:01:ac:ae:4c:27:5d:47:75:12:37:99:ba:77:71:
         a1:2f:60:35:c7:fd:bd:19:38:03:72:06:7f:1d:df:99:54:00:
         7e:dd:56:63:08:e9:fa:88:3a:5f:1e:9a:33:81:91:f8:41:23:
         b3:15:30:b4:30:d0:b4:ba:e7:3e:b0:a2:3f:12:25:73:35:e8:
         59:4e:d7:02:95:5c:e6:15:5e:24:6e:5b:ae:ea:7b:21:04:3f:
         f3:78:07:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:43:12 2026 by rpki-client