Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21/93b9cdf3-2c0a-39c7-9ba7-78e1abb22020.roa
File:                     93b9cdf3-2c0a-39c7-9ba7-78e1abb22020.roa (raw, json)
Hash identifier:          QNbQ8BlkLNDHEyUVNBdsxVgXsHLK01xRV0D12iWfinM=
Subject key identifier:   C8:D1:D0:5B:BD:C2:46:C7:FD:7E:84:97:C1:52:56:19:F2:85:81:30
Certificate issuer:       /CN=19eb256a-4db0-45f5-95c3-26a618298e21
Certificate serial:       010D0C9F4328584E4C5487AD54163A7E7EDF3740
Authority key identifier: D3:6B:B7:B4:90:BB:05:13:0F:6A:EE:07:0C:17:85:68:8E:F1:3E:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21/93b9cdf3-2c0a-39c7-9ba7-78e1abb22020.roa
Signing time:             Fri 26 Jun 2026 09:00:12 +0000
ROA not before:           Fri 26 Jun 2026 09:00:12 +0000
ROA not after:            Thu 24 Sep 2026 09:00:12 +0000
asID:                     13728
IP address blocks:        63.143.16.0/20 maxlen: 24
                          68.66.16.0/20 maxlen: 24
                          97.107.80.0/20 maxlen: 24
                          2604:f200::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21/19eb256a-4db0-45f5-95c3-26a618298e21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21/19eb256a-4db0-45f5-95c3-26a618298e21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4c:54:87:ad:54:16:3a:7e:7e:df:37:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19eb256a-4db0-45f5-95c3-26a618298e21
        Validity
            Not Before: Jun 26 09:00:12 2026 GMT
            Not After : Sep 24 09:00:12 2026 GMT
        Subject: CN=90fd0c9b-4a60-4eeb-949d-953c9a05b3ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0b:b6:49:78:93:d7:70:ac:2b:60:0c:ca:d9:
                    2b:36:ff:02:8f:00:e9:5a:a3:0f:c1:7b:fb:d2:b3:
                    92:52:6b:70:e4:11:63:d2:96:0a:24:fc:7c:af:71:
                    46:8e:45:68:83:b1:6f:ea:27:ea:32:16:6a:b1:ee:
                    0f:8f:82:0a:ee:ec:7a:c8:e3:db:c0:6f:7a:b3:4f:
                    61:ae:65:6c:57:78:86:7a:11:d2:cb:c7:57:40:0e:
                    5e:28:01:5e:2d:21:d2:a6:02:b0:0d:2f:7c:1d:65:
                    d1:3e:fa:77:a6:59:d5:cc:96:fc:10:4e:88:d8:f8:
                    2e:d5:06:07:f1:0c:08:13:62:9a:ff:70:bd:47:a4:
                    72:bb:75:eb:8c:c2:cd:9b:4a:e6:10:fe:95:1d:04:
                    3d:14:ed:92:25:58:44:f0:2f:58:10:0a:23:b7:ed:
                    15:ca:60:32:15:40:89:73:c3:de:33:50:1b:b6:60:
                    cd:e7:f4:d5:33:c7:e0:c7:df:0f:d4:ee:7e:bf:f4:
                    06:26:0f:e2:71:ed:13:70:64:15:b2:6e:88:ff:c1:
                    df:c2:4f:1d:a1:54:44:82:96:39:2e:da:04:ec:99:
                    bd:12:68:14:34:51:71:d2:e8:f0:1c:aa:55:a5:e1:
                    6d:1a:d5:28:61:36:19:88:4a:5a:56:45:6a:2a:d4:
                    3c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D1:D0:5B:BD:C2:46:C7:FD:7E:84:97:C1:52:56:19:F2:85:81:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21/93b9cdf3-2c0a-39c7-9ba7-78e1abb22020.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21/19eb256a-4db0-45f5-95c3-26a618298e21.crl

            X509v3 Authority Key Identifier:
                keyid:D3:6B:B7:B4:90:BB:05:13:0F:6A:EE:07:0C:17:85:68:8E:F1:3E:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19eb256a-4db0-45f5-95c3-26a618298e21.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.143.16.0/20
                  68.66.16.0/20
                  97.107.80.0/20
                IPv6:
                  2604:f200::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:63:23:d2:2d:e7:85:b1:db:9f:ce:26:f5:48:49:f2:39:94:
         60:c1:85:6d:a2:ae:20:63:06:42:5c:06:5d:31:92:90:2e:8b:
         70:2f:e9:ad:25:60:9e:e7:c7:30:c2:9b:1c:36:b5:2f:9d:46:
         b3:e1:e9:48:ab:58:b1:28:94:54:81:b5:72:46:15:4f:85:1c:
         28:70:ba:67:40:bf:d3:ce:40:80:1e:31:d2:ec:2f:a5:c9:ac:
         39:7e:47:a4:4c:67:9f:50:5e:ac:c3:00:12:b5:8c:aa:57:84:
         b9:43:33:27:92:f6:9d:91:73:cf:44:1e:c4:af:69:7f:c7:ec:
         d6:e7:71:6d:6a:f1:ef:e1:d0:80:28:a9:6c:b2:3a:35:f1:c0:
         fc:7d:b4:a1:e7:99:7d:a0:ce:e1:b3:4e:2f:3b:9d:ea:df:e6:
         69:65:41:35:74:74:30:a2:4c:b8:16:0e:69:d7:ad:e1:16:a4:
         fe:14:64:a5:e9:82:79:78:68:8c:24:dc:42:b1:ee:d1:e5:67:
         09:13:3e:21:6e:e0:6a:f7:db:0b:dc:8f:31:ff:68:2d:1b:b8:
         4a:89:a2:8d:7a:67:02:e5:f3:7e:65:b6:a1:c1:d9:3d:35:8a:
         37:0a:c0:c7:bd:c5:f7:39:09:7b:2a:55:0a:ea:fb:6d:80:70:
         f9:46:81:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 20:05:05 2026 by rpki-client