Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/c914ae45-f96a-379f-b2e6-986e217df7d0.roa
File:                     c914ae45-f96a-379f-b2e6-986e217df7d0.roa (raw, json)
Hash identifier:          5ugtsy9E34+JV2KOYrl9j7jq31QILfVkNW9pUqx2oHI=
Subject key identifier:   1A:E8:01:0A:68:51:25:EF:18:F1:13:E6:49:2A:2C:67:21:3B:8C:2E
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F4328584E376465A67C306007FA07CC60
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/c914ae45-f96a-379f-b2e6-986e217df7d0.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     16904
IP address blocks:        209.237.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:65:a6:7c:30:60:07:fa:07:cc:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=dfe3a3fb-28db-4eef-9bec-f4f341c6dae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2a:d1:8e:26:e6:b7:a2:3b:69:77:9f:0b:db:
                    3f:1b:23:c2:49:b6:89:2a:ea:c3:74:91:9f:1c:7b:
                    af:22:c2:55:6f:67:da:74:2d:1c:77:58:7b:bb:73:
                    cc:1d:e4:27:b3:d0:ff:8e:e7:6f:ed:77:08:5b:96:
                    14:c9:21:34:25:13:ed:19:b1:ff:f3:d6:c3:6d:cf:
                    9a:69:8a:41:d4:b1:55:16:9f:5e:4a:b8:8a:fd:0b:
                    12:1a:9f:59:c7:78:1d:cb:2a:f8:a2:7b:01:9f:a9:
                    d3:89:f9:3e:93:44:a5:31:df:2a:72:d6:16:25:ec:
                    49:a8:ff:1d:d9:23:dc:48:64:88:9d:0b:1b:3c:2e:
                    36:1a:70:71:bd:19:57:6a:7c:c7:1c:b5:8f:4f:0f:
                    be:79:b1:4e:25:6e:dd:b7:34:43:40:74:d7:a4:ab:
                    ea:9c:4d:87:46:7c:7a:19:9e:ee:d7:8a:08:6d:a0:
                    73:c1:67:83:a8:ba:2c:65:6b:23:e3:4e:ef:f7:d3:
                    97:f7:ff:06:9c:16:ac:33:eb:18:5a:33:72:c5:a9:
                    0c:35:38:ab:55:b1:e7:1e:e1:5b:57:a8:27:4f:a7:
                    97:f2:ea:34:b2:89:13:ba:9a:6d:b9:8b:b0:68:df:
                    ed:9a:10:10:4a:20:9b:fb:f6:26:cb:e7:7b:f3:b3:
                    db:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E8:01:0A:68:51:25:EF:18:F1:13:E6:49:2A:2C:67:21:3B:8C:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/c914ae45-f96a-379f-b2e6-986e217df7d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:e7:1d:9e:4a:59:b9:d4:7e:9b:8e:c7:d9:91:13:8f:3a:c2:
         09:e4:04:a4:f8:e4:e7:86:63:a8:47:3a:c4:1d:c8:34:bf:f7:
         00:b9:0a:fd:4f:ef:32:c9:bd:c2:f0:4f:9e:10:43:73:2b:81:
         0e:2d:2d:60:3d:8d:e9:fe:6d:15:ed:34:6d:5d:8c:a3:e9:df:
         ba:da:95:aa:c4:80:61:85:03:92:0e:2d:51:48:c6:8b:bc:38:
         f2:f7:b6:2d:36:7d:e2:51:e8:45:ab:40:d3:ce:cd:70:36:dc:
         6f:08:4c:b1:ed:c1:28:bb:5e:b4:f3:19:7e:c5:48:28:b2:a2:
         88:7b:9a:be:ba:9b:c7:55:3b:90:28:73:50:db:af:d0:63:2d:
         18:e5:42:f3:f8:ed:70:e7:bd:0d:f3:3b:17:01:48:38:34:64:
         f6:ed:1a:27:f2:fc:f8:9b:82:57:7d:9f:63:3e:b8:1c:7e:62:
         28:af:7d:45:80:94:dd:1c:4d:de:27:d8:b7:c5:97:0b:1e:6f:
         7e:a7:e1:af:0e:06:de:d6:49:6b:e4:6b:dc:d2:05:75:db:b8:
         10:13:ac:79:b6:99:82:16:76:0c:56:5a:e6:b7:9b:45:26:15:
         e7:14:43:d0:d1:3e:cc:17:38:5e:1e:98:78:d6:06:a4:a8:62:
         2e:e6:9f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 15:57:00 2026 by rpki-client