Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/13ecda92-39fe-30e1-97ea-ac88fca1d8b2.roa
File:                     13ecda92-39fe-30e1-97ea-ac88fca1d8b2.roa (raw, json)
Hash identifier:          92y3HumHJjxuD3n/t70DXy1VuYKRRo2sas/d/3UJiv4=
Subject key identifier:   E7:D0:26:A9:14:A9:75:55:33:05:65:0A:40:C1:E0:03:A7:2B:35:B2
Certificate issuer:       /CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
Certificate serial:       010D0C9F4328584EA9389614B5D4E56295E83D00
Authority key identifier: 5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/13ecda92-39fe-30e1-97ea-ac88fca1d8b2.roa
Signing time:             Wed 29 Jul 2026 15:34:08 +0000
ROA not before:           Wed 29 Jul 2026 15:34:08 +0000
ROA not after:            Tue 27 Oct 2026 15:34:08 +0000
asID:                     141575
IP address blocks:        192.6.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a9:38:96:14:b5:d4:e5:62:95:e8:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
        Validity
            Not Before: Jul 29 15:34:08 2026 GMT
            Not After : Oct 27 15:34:08 2026 GMT
        Subject: CN=72c06fce-e021-4f65-952c-7ca2939b83f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e4:18:52:e2:e3:00:bf:c9:0d:3b:21:5e:dc:
                    09:ad:72:8c:b9:36:85:5c:e5:d9:6d:03:3a:f1:b6:
                    d3:f6:b8:09:6e:6f:a7:19:3b:c0:fb:63:02:bd:69:
                    d3:41:0f:fe:28:7b:3d:d6:84:53:c7:75:b3:ac:3d:
                    47:b9:f2:6c:4f:15:18:1f:a4:4e:b8:84:bf:d1:c8:
                    0f:a0:bf:26:b3:6c:ad:a2:bc:0a:e5:0e:82:d8:ad:
                    d9:dd:08:d7:2c:f8:91:1c:86:58:10:71:f8:6b:37:
                    0a:b3:0f:6c:bf:53:4a:b4:61:c6:17:a8:8d:4f:2d:
                    50:b5:6c:95:a8:5e:8f:4d:18:fc:49:a3:47:18:71:
                    b7:ce:c2:9f:0d:d4:4f:9f:fb:ef:32:41:c2:fe:da:
                    df:cd:c3:6c:6f:c1:30:45:b7:4a:40:96:5d:eb:0b:
                    24:f8:e3:7f:82:f8:81:6a:f1:99:e6:5f:39:6a:1d:
                    80:bc:e9:e7:d8:35:eb:38:eb:e3:2f:bb:a8:f1:6e:
                    fa:09:d9:e3:71:18:d2:b7:71:7e:a0:8c:fd:63:53:
                    8d:cb:6d:63:c4:a9:ce:e7:39:88:3b:df:df:78:fc:
                    35:51:77:ae:32:20:82:4e:9d:73:bf:0b:91:c2:c4:
                    8c:ce:eb:fa:67:fe:30:02:9d:02:bd:f2:ce:dd:37:
                    02:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D0:26:A9:14:A9:75:55:33:05:65:0A:40:C1:E0:03:A7:2B:35:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/13ecda92-39fe-30e1-97ea-ac88fca1d8b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl

            X509v3 Authority Key Identifier:
                keyid:5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.6.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:2d:0a:d2:7e:2b:53:3d:db:02:13:26:4c:c7:3a:4c:b7:ee:
         ce:6e:8e:77:d6:34:02:50:dc:e2:53:16:ad:36:b7:8c:a1:5a:
         72:a9:bd:6c:c2:70:47:33:8c:5b:d9:82:68:95:38:ca:a8:3a:
         36:8a:f2:8c:5d:f2:ee:e6:41:39:bb:b5:cf:33:fb:ae:5c:0b:
         e0:85:2b:59:0a:50:b9:aa:4c:e2:f1:e2:9d:1f:d9:4e:83:77:
         32:94:20:35:17:95:96:b5:b4:68:4d:5a:7e:6a:d2:65:c9:8f:
         29:02:48:a6:de:4d:ec:25:e2:e9:11:38:20:07:e9:ce:ce:03:
         c7:0e:ad:c9:2c:8e:43:70:8a:ec:97:95:8b:2a:72:42:7e:34:
         a3:4c:46:56:5c:a1:66:d0:43:96:12:9c:06:03:99:a7:59:e7:
         95:30:26:84:da:79:07:0d:1f:71:7c:3c:86:26:59:75:9c:dd:
         ce:4c:3a:b8:fc:b6:07:3a:c9:f3:5d:4e:86:29:28:f3:9b:38:
         48:86:00:5a:1c:cb:88:ba:35:49:a9:28:79:32:2b:8d:c4:fe:
         5e:87:27:86:c4:ce:09:07:71:76:63:37:4f:b9:a1:7d:b1:fe:
         29:c5:43:4b:83:e0:c9:30:22:0b:83:fe:cb:cf:b6:b4:7a:7c:
         6f:69:f8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 01:47:22 2026 by rpki-client