Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15918682-1f44-3387-abb8-f7772b5f9f5e.roa
File:                     15918682-1f44-3387-abb8-f7772b5f9f5e.roa (raw, json)
Hash identifier:          4dTlenmVBsU8vY9KVigEgIt2MzU4rLpLg53tilzhtyc=
Subject key identifier:   06:9A:02:8E:A7:2D:B1:FB:D5:0B:B1:33:1D:62:3A:5C:25:49:20:72
Certificate issuer:       /CN=15f8d443-e823-4b37-9217-3c5af8dcc8fa
Certificate serial:       010D0C9F4328584E3E5F20578CF7953E76606100
Authority key identifier: F5:85:8B:8E:64:0C:F7:F3:65:83:84:1D:3F:BA:C0:40:05:C2:D6:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15918682-1f44-3387-abb8-f7772b5f9f5e.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        208.91.36.0/24 maxlen: 24
                          208.91.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15f8d443-e823-4b37-9217-3c5af8dcc8fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15f8d443-e823-4b37-9217-3c5af8dcc8fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:20:57:8c:f7:95:3e:76:60:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f8d443-e823-4b37-9217-3c5af8dcc8fa
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=21c1189f-bf3e-451c-80c7-1e4b231075cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:39:ae:2b:c3:a1:c4:93:25:0c:e5:25:81:ed:
                    99:41:fe:2b:a9:c3:22:7a:38:e6:0a:02:d7:14:7c:
                    35:5d:9d:f8:0b:10:b6:26:a2:7a:89:dd:5f:70:1c:
                    34:da:65:d6:43:1f:0a:9d:17:92:b7:fa:44:86:7c:
                    45:3e:58:63:32:dc:47:59:53:02:ee:8f:10:63:5e:
                    ec:b8:9c:32:c5:b1:37:a4:d5:4e:78:7b:d8:6a:5d:
                    06:17:49:49:ae:9d:93:9d:9f:f1:1b:5f:91:e2:3b:
                    67:e4:33:bd:1f:cb:9b:36:23:7d:50:fd:56:3e:af:
                    ad:1a:0c:c3:5a:bd:42:14:ef:22:64:52:35:ec:d1:
                    b0:86:13:86:1e:68:f9:24:d5:ab:03:10:6a:6b:a2:
                    6f:e9:f6:65:06:23:8c:82:9b:94:d3:40:c7:46:02:
                    c4:20:ca:64:bb:88:ee:6f:4c:09:19:41:7a:c4:11:
                    aa:92:56:07:ca:e3:73:c4:8b:a4:29:fc:25:2b:bf:
                    a2:9d:d0:d9:2f:06:d3:10:28:37:3b:09:46:b1:b4:
                    ed:3b:4b:e1:1f:ec:76:79:87:70:96:e0:11:8f:70:
                    23:f2:3b:36:2b:91:f9:1b:a5:ee:62:f6:ca:e0:dd:
                    76:f0:59:7d:da:73:2f:5d:0e:df:55:de:c4:33:60:
                    8c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:9A:02:8E:A7:2D:B1:FB:D5:0B:B1:33:1D:62:3A:5C:25:49:20:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15918682-1f44-3387-abb8-f7772b5f9f5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa/15f8d443-e823-4b37-9217-3c5af8dcc8fa.crl

            X509v3 Authority Key Identifier:
                keyid:F5:85:8B:8E:64:0C:F7:F3:65:83:84:1D:3F:BA:C0:40:05:C2:D6:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/15f8d443-e823-4b37-9217-3c5af8dcc8fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.91.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:87:f3:52:6b:86:89:96:fa:1d:9c:f1:12:53:1f:5b:33:c7:
         e3:e6:c5:b7:6e:30:f5:b5:6c:8e:11:37:e3:e1:56:25:65:b9:
         e3:da:3c:64:fd:00:9f:f0:bd:37:28:a7:76:a3:a2:b2:39:47:
         a5:0e:94:54:cf:4a:33:95:97:cd:f6:c2:60:c5:6c:b9:08:74:
         0d:19:ed:6a:a4:c0:71:bc:99:1b:07:85:f2:ad:68:89:2b:f8:
         0c:dc:0b:c4:e2:24:7b:2b:ee:51:ca:32:97:15:70:7b:88:08:
         f7:83:2d:65:0b:73:e8:32:bc:d8:61:4e:b7:2d:2f:21:d5:be:
         2e:26:36:d7:3e:73:55:58:9b:31:79:a7:a2:8f:95:0f:06:38:
         b3:58:be:b0:fa:08:6d:d6:3a:9c:84:86:67:81:6e:02:6c:f2:
         60:0d:31:03:e7:a9:76:48:a7:f6:08:78:34:73:47:6f:60:0d:
         f3:f9:b2:05:a0:7d:34:e6:c9:52:e3:f5:be:1a:fb:16:14:7e:
         8c:8e:fe:22:29:f6:e5:ba:03:59:7d:54:af:6f:02:bf:4b:51:
         2d:07:de:49:d6:4a:39:ea:fd:92:fe:dd:d2:2d:e9:c2:80:31:
         ad:81:37:7b:29:70:1c:0d:c0:db:80:63:49:e5:47:3d:67:57:
         1b:53:43:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 15:51:39 2026 by rpki-client