Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/d3f8c872-3a82-3529-a27e-0b7a5bc40bd3.roa
File:                     d3f8c872-3a82-3529-a27e-0b7a5bc40bd3.roa (raw, json)
Hash identifier:          2TzuLy5+DDYWJwK2cHoDbcS94C+0yIXpDF8mB+HvIeU=
Subject key identifier:   43:3D:35:2C:C8:A4:D9:6A:97:AD:E5:87:C4:0E:68:9F:2E:83:C3:AB
Certificate issuer:       /CN=01fc1815-34ef-424d-8258-506f8b486e35
Certificate serial:       010D0C9F4328584E7E94F18B7C1929F217FC2880
Authority key identifier: 51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/d3f8c872-3a82-3529-a27e-0b7a5bc40bd3.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     10835
IP address blocks:        209.193.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:f1:8b:7c:19:29:f2:17:fc:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fc1815-34ef-424d-8258-506f8b486e35
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=820c6072-0cd8-4307-b2f8-7702b7c2ea5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1a:c1:8b:4a:7a:73:23:32:59:10:a8:e0:14:
                    a0:54:bc:2a:6e:aa:2b:36:5d:ff:24:db:10:5c:45:
                    4f:13:dc:d3:62:55:0b:eb:62:5e:87:2e:23:ab:d4:
                    27:77:40:9e:61:65:1b:d6:35:b9:89:7e:bd:a8:e5:
                    f0:2c:54:31:f9:bf:7f:0d:70:cb:22:63:95:bf:a2:
                    72:33:a0:7a:2a:d0:3e:77:96:47:35:13:df:4a:8e:
                    47:3c:b5:d1:59:62:cb:00:e0:1d:20:b2:b0:3c:c3:
                    d0:26:0b:0b:d1:81:82:73:8f:71:97:d5:0f:ff:ce:
                    ee:7f:25:be:2d:02:23:9c:93:53:46:c8:bf:b4:7d:
                    0b:65:30:47:e6:8a:c3:b4:ca:99:13:45:81:72:fd:
                    3b:a4:42:0b:08:38:85:00:f5:c6:20:9a:07:c4:8d:
                    a9:f6:45:d0:57:f2:5f:76:69:94:d2:5f:99:55:19:
                    c2:57:d4:11:15:45:15:ef:eb:b1:17:04:6c:f4:5f:
                    f2:54:e4:e5:f2:05:c0:c6:86:f3:c3:69:a5:02:6b:
                    83:62:86:7b:9d:46:3d:ef:18:48:21:69:1a:0f:7a:
                    2b:59:28:d2:d7:aa:da:4c:00:52:4d:ca:c0:55:be:
                    b2:f2:f4:9c:a2:09:6c:ea:aa:e5:6f:78:df:77:d8:
                    cc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:3D:35:2C:C8:A4:D9:6A:97:AD:E5:87:C4:0E:68:9F:2E:83:C3:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/d3f8c872-3a82-3529-a27e-0b7a5bc40bd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35/01fc1815-34ef-424d-8258-506f8b486e35.crl

            X509v3 Authority Key Identifier:
                keyid:51:A2:7B:A9:D7:4E:9B:04:5F:65:DB:3F:C3:08:66:81:84:CC:40:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/01fc1815-34ef-424d-8258-506f8b486e35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.193.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:88:4c:af:1c:27:28:e6:9c:fe:b5:23:8d:d4:24:2c:5c:6b:
         02:e3:c8:0b:39:47:4c:66:69:f1:2e:da:d3:c1:55:ea:44:a9:
         f3:a0:8a:4a:f2:03:f7:a9:93:0e:4b:df:cd:9e:aa:cc:18:de:
         6f:13:76:87:6e:fe:b3:b6:fd:30:bc:48:f3:1c:11:0e:31:ec:
         bd:ea:f5:69:9d:f5:1e:91:4c:d3:e5:e1:18:9d:9a:22:ac:cd:
         32:c4:a2:52:a3:4d:79:45:12:4f:5e:a7:6b:ef:0f:55:1b:44:
         12:21:b1:cc:a2:14:ab:77:22:f4:09:e9:1a:d8:66:0d:00:26:
         4f:e7:63:bd:ad:a6:84:38:83:d5:c7:5e:24:4c:ec:f9:ed:19:
         03:32:4e:df:58:9f:d7:5c:65:7e:9d:02:7e:f3:6e:22:c8:dd:
         f9:15:e5:47:d0:ad:e0:19:8a:ff:15:f5:b3:90:07:a2:78:46:
         8b:41:fb:f2:29:7d:36:1e:cf:e5:5c:47:cb:58:b4:67:33:89:
         26:d0:cb:1f:ec:1b:77:21:88:ba:b9:9e:c3:46:34:5f:f6:98:
         d8:c5:35:55:eb:34:d8:a8:18:a9:ad:ff:02:e8:39:4b:65:b9:
         ff:62:68:e4:c3:d1:dc:21:22:00:82:b6:55:93:f5:aa:3e:62:
         ba:42:16:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:43:50 2026 by rpki-client