Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/5b93e980-32ed-38bb-99b8-e4418c3b0d4f.roa
File:                     5b93e980-32ed-38bb-99b8-e4418c3b0d4f.roa (raw, json)
Hash identifier:          Ri4h0KapY8pmMyhmxoazAxmCqcRvbvbT49YPFtTlcDE=
Subject key identifier:   2B:11:1A:21:71:11:C2:B3:60:84:1D:E3:A0:82:3C:2A:8D:80:08:34
Certificate issuer:       /CN=4539b3da-1f4b-4767-acf6-d4d714664a6d
Certificate serial:       010D0C9F4328584E3A2F14F864EFCA449F87CAC0
Authority key identifier: 11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/5b93e980-32ed-38bb-99b8-e4418c3b0d4f.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     26658
IP address blocks:        172.87.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:14:f8:64:ef:ca:44:9f:87:ca:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4539b3da-1f4b-4767-acf6-d4d714664a6d
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=05eddbb9-eb29-4fdc-af1e-223a54a50ade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ff:4d:3e:b3:71:17:6d:a6:7f:bc:ad:2c:04:
                    49:69:02:dd:b9:26:4b:13:cd:d4:33:f6:b1:13:e2:
                    b8:1f:93:0c:04:bf:f5:c2:b8:28:10:5a:16:52:95:
                    fe:59:ac:58:0a:16:fe:5e:10:7f:2d:59:a8:6e:aa:
                    f1:0c:3c:f6:6e:32:a6:36:8f:20:65:9f:e9:f8:e5:
                    12:3c:0e:30:a0:6d:67:47:91:bd:64:9f:99:03:d7:
                    ad:7f:75:0b:2d:0f:69:51:32:d5:51:bf:f1:28:c3:
                    c7:fa:6c:3e:d7:c1:02:4e:0f:8d:c8:6b:a9:49:2a:
                    63:f0:23:99:d9:0f:01:4e:19:f1:38:43:52:89:85:
                    c2:dc:d2:dd:65:02:84:38:cd:3a:2a:9d:74:84:ee:
                    11:22:b3:e1:ef:78:b2:e0:17:b4:56:df:4c:5a:68:
                    56:5d:47:98:47:e9:fc:09:80:2c:11:d8:a7:2f:2f:
                    e1:60:c8:ee:a5:72:7b:3f:78:55:61:b0:09:ef:1a:
                    b4:95:b2:d0:2e:cc:1a:ff:71:e8:e5:40:d6:63:61:
                    38:61:de:56:e5:02:7e:e1:6b:10:e2:82:27:85:51:
                    69:74:d0:97:a6:b4:a7:bd:e0:c2:e5:4d:0d:0b:c2:
                    9d:dc:c0:76:11:fa:a9:d7:b8:a1:b6:f2:c2:e3:ce:
                    ea:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:11:1A:21:71:11:C2:B3:60:84:1D:E3:A0:82:3C:2A:8D:80:08:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/5b93e980-32ed-38bb-99b8-e4418c3b0d4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d/4539b3da-1f4b-4767-acf6-d4d714664a6d.crl

            X509v3 Authority Key Identifier:
                keyid:11:69:D2:67:84:3D:85:91:82:48:A1:9C:7F:C1:F7:5B:C0:23:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4539b3da-1f4b-4767-acf6-d4d714664a6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.87.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:04:8f:95:23:18:3f:db:f2:16:6a:22:bd:c7:8a:b2:72:df:
         f4:3e:46:9f:69:a2:33:d1:76:7d:ff:14:d6:9a:6d:ea:e8:0b:
         6c:a5:64:47:da:09:8e:ca:0c:6e:12:d6:71:bf:b7:c8:17:51:
         90:4f:96:b0:7f:73:8a:ba:24:ec:00:33:05:b8:42:14:81:6a:
         c3:96:2b:b4:ff:37:52:11:d9:9d:bd:29:f6:c8:97:87:18:2a:
         ae:e5:0a:5d:62:9e:c1:2c:15:2f:eb:86:ed:aa:59:6b:a0:6f:
         a6:ed:9d:41:bb:33:46:bd:89:c9:3d:0b:da:ca:67:f9:d4:24:
         07:b8:df:8c:3f:5f:e3:4d:ad:c5:e0:6b:33:35:23:1b:90:49:
         ec:1f:e1:03:c2:ab:6a:c1:9c:0c:47:db:00:11:fa:ad:86:cd:
         7b:31:44:e8:c6:73:96:4e:c7:69:21:71:4a:48:de:4e:a6:92:
         dd:d7:d0:ea:8d:2c:2c:53:f1:d9:ba:d7:1c:f0:a3:dc:33:0d:
         ec:57:c6:55:91:f4:58:04:39:25:d5:9a:21:98:b7:ba:2d:9f:
         ee:c5:21:94:5e:0e:43:0b:08:58:3d:cb:3d:84:5a:1a:85:81:
         04:9c:e8:41:39:eb:fa:e9:60:66:be:95:c5:d8:70:8b:19:cd:
         33:57:5f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 05:11:30 2026 by rpki-client