Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/00d48a25-0292-390b-8771-b64ad9beccdb.roa
File:                     00d48a25-0292-390b-8771-b64ad9beccdb.roa (raw, json)
Hash identifier:          GDJ0x5+qP6ximHTn+wv+KFMCttHeA3JTyVtC7DHiuWY=
Subject key identifier:   51:43:AA:19:B8:A5:3C:D2:A1:86:92:3C:03:5B:7B:EC:B8:79:60:53
Certificate issuer:       /CN=a91fff12-f74d-4a80-9a5d-f225534bc527
Certificate serial:       010D0C9F4328584E15E46CC83A41DF82DC624740
Authority key identifier: 02:B8:42:01:E2:A4:2E:85:E9:E4:88:63:7D:3A:92:9E:0F:C1:C4:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/00d48a25-0292-390b-8771-b64ad9beccdb.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     46595
IP address blocks:        209.169.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/a91fff12-f74d-4a80-9a5d-f225534bc527.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/a91fff12-f74d-4a80-9a5d-f225534bc527.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:6c:c8:3a:41:df:82:dc:62:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a91fff12-f74d-4a80-9a5d-f225534bc527
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=7499800c-453b-4930-bb21-3ff4f612d242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:20:f5:4b:84:70:f3:10:6a:cb:e9:ef:c4:dc:
                    dc:ed:35:86:1a:e2:d2:3c:5d:d8:ea:87:6d:4e:c7:
                    e6:94:23:6c:e0:2e:4b:30:4b:ff:4b:e7:75:81:4e:
                    9a:08:7b:3d:2a:8f:f8:55:04:e9:bd:57:7e:52:81:
                    0d:12:fb:3c:e3:8a:d8:31:bf:63:af:b9:8f:24:81:
                    ec:3f:d2:57:57:13:a4:11:63:2c:63:f4:cb:87:a5:
                    d6:87:45:ac:e7:a9:28:cd:b6:c1:8b:7d:b0:68:1e:
                    63:d8:5a:2a:7b:cc:2b:7f:bf:7d:17:eb:ea:51:c9:
                    8a:31:6e:16:7a:0a:b5:a7:35:57:09:ea:14:b4:86:
                    6c:ac:7c:f6:61:45:3b:b4:30:fa:00:68:44:0f:93:
                    80:61:be:22:5c:f7:33:2e:e5:2b:d1:cf:a0:0b:7c:
                    76:7a:c5:81:2f:1d:a5:0e:0d:a7:12:55:87:12:00:
                    e1:54:85:6d:39:a0:f6:16:d0:1d:d3:c4:3d:df:09:
                    aa:e9:9c:db:ba:09:9d:9d:72:e6:84:71:b4:b4:8c:
                    bb:38:b8:ed:f6:64:88:b3:bc:f7:22:09:b5:31:13:
                    af:50:ce:90:f0:e1:c3:c3:65:f2:f0:52:69:d0:88:
                    f6:be:01:b8:29:86:80:99:ec:2b:39:54:93:0c:d4:
                    12:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:43:AA:19:B8:A5:3C:D2:A1:86:92:3C:03:5B:7B:EC:B8:79:60:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/00d48a25-0292-390b-8771-b64ad9beccdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527/a91fff12-f74d-4a80-9a5d-f225534bc527.crl

            X509v3 Authority Key Identifier:
                keyid:02:B8:42:01:E2:A4:2E:85:E9:E4:88:63:7D:3A:92:9E:0F:C1:C4:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a91fff12-f74d-4a80-9a5d-f225534bc527.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.169.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:82:e8:15:b7:93:30:b7:22:0b:62:39:74:6d:c5:a5:b8:90:
         33:ee:17:48:4c:c0:62:fb:80:1f:42:1a:f4:15:57:c7:8a:37:
         28:bd:e8:3a:d6:df:33:ca:a0:68:cd:76:a9:6e:ca:c1:e1:da:
         64:c4:e4:93:7c:18:bc:8f:1c:6e:c6:da:23:59:58:e9:43:2c:
         90:0d:ba:48:fd:2f:95:8a:78:96:74:91:05:0f:1c:28:3d:97:
         85:ef:fb:f6:fc:aa:2d:8c:05:0d:2b:2c:5e:8f:12:ad:d7:b0:
         2b:80:18:d5:4d:32:c3:67:dd:b5:36:59:5f:08:b5:a7:44:f0:
         8f:b0:60:07:08:a8:21:bd:f8:fb:2c:83:93:0a:92:84:f5:ca:
         bb:08:84:52:c6:3f:62:1d:ca:be:01:69:5b:5c:46:a7:61:7c:
         82:63:13:b6:a1:8f:b8:d4:ef:51:76:97:40:93:a2:ab:61:2b:
         a6:07:0d:ce:16:9f:5a:64:32:db:1d:d4:ab:d7:d0:9c:ea:c6:
         e7:e8:bf:e6:1e:ed:e6:fb:6b:90:8e:b8:ec:d7:62:31:1e:2f:
         cc:e4:88:89:92:30:47:13:99:d0:88:61:ee:af:0f:94:f7:a8:
         78:d0:fa:bd:e7:94:31:73:f1:ec:a2:29:9a:88:22:c7:5e:96:
         f5:08:55:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 20:42:09 2026 by rpki-client