Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/6624b998-13e0-3a4d-aac9-4037a34bff51.roa
File:                     6624b998-13e0-3a4d-aac9-4037a34bff51.roa (raw, json)
Hash identifier:          2ySRs2fUUjpEtE3DbuawFytD4pGbuviT5ir+J0qyiwM=
Subject key identifier:   E4:59:32:7E:76:63:EE:EF:7D:18:9C:40:DF:FE:2D:01:DB:F7:3B:80
Certificate issuer:       /CN=0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9
Certificate serial:       010D0C9F4328584E482480D984795451A3988688
Authority key identifier: 8F:F9:0F:06:64:B0:32:AE:06:2D:7A:C2:E3:4B:C1:8E:E4:79:4D:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/6624b998-13e0-3a4d-aac9-4037a34bff51.roa
Signing time:             Wed 24 Jun 2026 21:00:12 +0000
ROA not before:           Wed 24 Jun 2026 21:00:12 +0000
ROA not after:            Tue 22 Sep 2026 21:00:12 +0000
asID:                     7127
IP address blocks:        192.214.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:48:24:80:d9:84:79:54:51:a3:98:86:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9
        Validity
            Not Before: Jun 24 21:00:12 2026 GMT
            Not After : Sep 22 21:00:12 2026 GMT
        Subject: CN=e4b3472d-f508-412e-8e09-f4fc71135031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:30:a1:8f:e7:e2:e5:e1:09:f8:dc:a4:fa:d0:
                    d5:ba:77:4a:3e:c9:03:39:92:14:47:6e:0b:71:0e:
                    46:e1:50:66:73:15:5f:12:f9:7d:81:cd:68:8c:00:
                    c9:9f:0a:4e:22:bb:51:82:46:2c:72:9a:fc:f0:b2:
                    6a:af:69:03:f4:ee:59:42:3f:9a:c7:87:ac:95:b3:
                    64:9d:d7:13:66:42:a1:1e:44:14:b4:94:84:b6:c7:
                    ce:18:f3:e4:92:55:ae:7b:5e:f3:ba:e5:9b:e7:f3:
                    22:4f:46:78:8d:ce:e3:90:bf:0f:4a:fe:14:5e:43:
                    45:e6:7c:27:f8:77:42:e0:19:e5:45:17:62:9f:60:
                    df:66:af:7a:51:64:94:66:31:01:f8:d1:d2:80:f8:
                    ad:e9:e1:2d:59:68:0e:f5:28:b9:2f:ea:5f:94:cc:
                    18:56:6d:a8:d5:8d:6e:69:74:82:dd:16:52:b9:e0:
                    2b:f7:d2:1f:7a:42:fc:8f:a7:47:70:cf:b3:fe:58:
                    8e:ac:84:ff:81:1f:57:ee:52:ea:a9:ce:12:ba:02:
                    ad:45:01:35:34:e8:42:15:1e:43:84:7a:d2:b7:97:
                    bc:fb:b5:c4:ae:41:6c:41:18:21:05:96:69:ff:e4:
                    b2:9e:78:20:5c:a2:51:46:31:5b:69:aa:df:b3:f5:
                    02:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:59:32:7E:76:63:EE:EF:7D:18:9C:40:DF:FE:2D:01:DB:F7:3B:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/6624b998-13e0-3a4d-aac9-4037a34bff51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.crl

            X509v3 Authority Key Identifier:
                keyid:8F:F9:0F:06:64:B0:32:AE:06:2D:7A:C2:E3:4B:C1:8E:E4:79:4D:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.214.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:6a:66:9e:b8:eb:97:ee:2a:61:24:90:01:af:18:94:c6:ab:
         f4:8b:d4:3d:39:77:d5:2b:38:8d:0d:6d:d2:68:21:9e:79:70:
         6b:0b:dd:a4:b2:75:5d:c3:cc:6b:5f:3f:25:70:e1:7e:c5:ef:
         0e:ba:c4:91:76:b1:3a:4d:7c:81:38:ff:43:11:e0:e3:3a:1d:
         b6:bf:09:0f:6e:d7:34:93:d6:18:6c:6a:d2:43:1a:29:fe:3a:
         b7:b7:9e:67:7d:f6:a8:d1:07:3e:24:43:52:de:5b:6f:00:ed:
         4c:ec:de:76:62:ef:35:a7:eb:33:97:e5:c8:2d:4b:95:21:52:
         03:a5:58:39:e5:b2:b0:49:91:01:aa:d1:21:7d:86:df:b5:04:
         8a:52:ec:f6:b5:a2:b5:b6:06:86:56:2d:ee:f9:2d:d5:0c:0c:
         f0:cc:67:ae:05:fc:e4:2d:ac:02:da:7a:9e:0c:d9:d0:80:9b:
         17:c7:9d:e7:b0:7d:d8:42:22:df:79:d3:0a:fc:f1:75:34:7b:
         c7:17:4a:06:5f:d8:1d:2d:5c:36:32:07:e2:d7:e8:ea:cf:b5:
         9a:15:4e:96:68:28:ec:8f:bf:66:eb:5b:71:77:f4:14:fe:61:
         da:2c:b1:56:cb:70:84:89:3c:d4:87:9c:b7:e4:86:a1:99:7b:
         b6:03:8d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 15:56:05 2026 by rpki-client