Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/493b6a29-354a-3d5c-9e76-86357ec364ec.roa
File:                     493b6a29-354a-3d5c-9e76-86357ec364ec.roa (raw, json)
Hash identifier:          +reJLch9auO8zJmi1r1/Q91YjvYlrDpJGd/8RM/xWGY=
Subject key identifier:   70:22:D3:5F:A5:3A:23:7E:3E:EC:88:EA:BA:91:0D:6E:EB:15:E0:7D
Certificate issuer:       /CN=4c5f6fb8-1f68-4792-8def-a616a53280be
Certificate serial:       010D0C9F4328584E2D9F231E7F7C17B594D51F00
Authority key identifier: AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/493b6a29-354a-3d5c-9e76-86357ec364ec.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     18593
IP address blocks:        138.8.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:23:1e:7f:7c:17:b5:94:d5:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c5f6fb8-1f68-4792-8def-a616a53280be
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=d0e3280b-604f-4c67-a285-1642ec3c4f4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:82:fe:6a:8f:1e:2f:d7:2e:eb:dd:75:cb:b0:
                    59:d2:ef:d2:b2:23:74:ec:c7:7b:98:70:9c:c4:6e:
                    e6:17:9c:f9:2d:c9:dc:bd:d5:e7:62:09:7a:04:85:
                    3e:48:e8:7e:b6:b2:39:41:8d:20:38:f8:91:e9:a1:
                    71:5e:42:a9:af:09:eb:2d:bd:ca:0b:6e:9b:19:d5:
                    39:5f:18:ef:d9:b7:97:9b:6f:26:7a:f4:43:39:91:
                    5f:75:68:34:82:2d:69:8f:87:5c:54:b4:c3:03:06:
                    42:3b:84:69:77:78:22:46:33:a7:79:3d:dc:70:6e:
                    61:cd:b1:ca:0d:e1:5a:73:ad:2d:53:27:95:2e:bc:
                    83:60:9b:ba:09:2d:b0:66:b6:83:ee:e8:36:62:e7:
                    7f:8e:da:2f:31:ad:95:b3:49:35:c2:5f:db:c9:fd:
                    5e:10:97:54:e2:4e:aa:32:54:57:80:a1:6c:99:e9:
                    22:7c:20:37:15:6b:f7:fc:de:f1:76:d8:61:18:a6:
                    39:05:7e:f3:d1:1a:6c:8e:96:7d:11:93:fc:5d:bf:
                    17:c0:08:93:1a:ad:0a:19:96:cd:91:91:1f:70:38:
                    df:1c:69:21:ef:68:36:6c:9e:b9:10:b2:d5:92:37:
                    0b:ac:94:87:53:d5:e2:28:8d:a5:bf:6e:56:e4:9b:
                    57:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:22:D3:5F:A5:3A:23:7E:3E:EC:88:EA:BA:91:0D:6E:EB:15:E0:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/493b6a29-354a-3d5c-9e76-86357ec364ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be/4c5f6fb8-1f68-4792-8def-a616a53280be.crl

            X509v3 Authority Key Identifier:
                keyid:AA:EF:D4:F9:97:B3:77:DE:1F:2F:C5:D8:02:C1:29:94:BF:44:93:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4c5f6fb8-1f68-4792-8def-a616a53280be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.8.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:d3:d4:b4:c7:9d:b8:e1:5e:49:a8:55:23:fc:36:3a:f3:9f:
         c6:8b:e6:be:33:26:f2:2c:ef:49:73:c6:77:9c:26:cd:75:3a:
         ab:ce:c1:99:5a:cb:b5:49:8e:26:be:ef:af:41:4e:a0:de:c9:
         04:ba:31:69:9b:7e:56:0b:d1:22:0c:3d:80:c7:eb:af:49:5a:
         7b:79:6c:43:f2:76:7c:e3:3e:9e:a0:0e:ea:f9:a8:18:cf:11:
         b0:6f:ef:5e:35:f3:83:57:89:09:15:65:00:af:bc:0c:d3:01:
         06:dc:34:5f:ea:50:ba:78:69:b6:6b:2b:6a:eb:ab:f8:31:3a:
         1e:88:de:eb:21:ec:94:42:85:45:c9:0e:b0:74:ba:e2:af:0b:
         b9:b0:17:d8:ef:95:78:d1:8b:34:35:d4:20:ca:3e:e8:a4:86:
         88:b4:5a:c8:dc:ca:c4:c2:2b:f3:2b:d9:67:cd:80:4d:a1:d8:
         3d:e0:39:a7:91:46:66:bd:92:40:ad:b6:9f:42:76:77:8a:80:
         1b:0a:37:c4:73:5d:e8:d8:0b:1a:b3:fe:ac:e5:16:35:57:36:
         9b:25:a6:cc:24:d0:a7:81:31:8a:cf:44:85:2e:3c:05:27:d3:
         d3:f5:85:6a:cf:64:0c:e8:0a:20:8d:f8:dd:82:c6:5d:ca:18:
         70:4e:80:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 12:50:50 2026 by rpki-client