Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/68e7e629-2583-346b-9dd2-02b237f540c4.roa
File:                     68e7e629-2583-346b-9dd2-02b237f540c4.roa (raw, json)
Hash identifier:          inJXCv96qja37NpZRagJjYi/jEqJTlvDIVQHec/mGpY=
Subject key identifier:   F8:C2:88:12:B2:AB:E2:A4:C3:03:2E:64:92:A4:43:A0:04:AB:4C:AF
Certificate issuer:       /CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
Certificate serial:       010D0C9F4328584E0CC177126FCA7812375EBB00
Authority key identifier: 5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/68e7e629-2583-346b-9dd2-02b237f540c4.roa
Signing time:             Wed 03 Jun 2026 14:28:01 +0000
ROA not before:           Wed 03 Jun 2026 14:28:01 +0000
ROA not after:            Tue 01 Sep 2026 14:28:01 +0000
asID:                     64267
IP address blocks:        192.6.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0c:c1:77:12:6f:ca:78:12:37:5e:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
        Validity
            Not Before: Jun  3 14:28:01 2026 GMT
            Not After : Sep  1 14:28:01 2026 GMT
        Subject: CN=de7a6b36-607a-4be6-91eb-4e121864b71a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:79:c0:2f:93:83:f3:e1:09:97:a9:cb:38:ee:
                    f6:29:f9:f8:a4:b6:51:f2:c0:a8:d9:33:71:48:3a:
                    dc:24:33:bd:07:6c:89:b6:f9:72:a6:26:07:02:70:
                    49:36:2e:30:08:7d:7a:1b:90:f1:b0:33:83:fb:d0:
                    84:13:06:3d:39:f2:99:c0:5e:f2:73:45:e4:97:db:
                    50:a7:65:2c:21:ff:25:b9:43:00:b2:39:fa:62:d0:
                    f1:4f:35:59:c6:55:9b:e3:e1:ea:18:a6:73:68:05:
                    f6:af:28:1a:61:7f:a9:90:13:7a:29:39:61:b5:97:
                    4d:89:86:89:51:48:d3:d0:68:2f:37:fb:cc:f3:8b:
                    fd:c5:53:40:c3:f1:2a:ac:95:53:71:f5:31:47:74:
                    1a:a5:4b:97:47:36:fd:82:7c:ac:64:d4:e8:3e:06:
                    86:2c:81:0a:73:41:8b:02:3e:75:ae:aa:35:aa:3a:
                    d8:2a:81:3d:07:d7:7e:5c:57:fd:76:fb:67:58:06:
                    9a:eb:cf:47:23:dd:cf:ba:34:99:b5:4c:61:69:6b:
                    25:9b:ea:9f:5c:3e:2e:5c:d1:e6:9b:34:40:61:b8:
                    b7:55:35:82:3a:5e:96:7a:ce:b0:e9:c6:29:48:27:
                    45:ac:0c:51:ed:f5:0c:6e:8e:56:62:96:83:4e:77:
                    e3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:C2:88:12:B2:AB:E2:A4:C3:03:2E:64:92:A4:43:A0:04:AB:4C:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/68e7e629-2583-346b-9dd2-02b237f540c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl

            X509v3 Authority Key Identifier:
                keyid:5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.6.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:65:53:a4:3e:b3:cd:c9:3f:c6:e8:b4:b1:2a:fc:6b:26:52:
         bc:57:71:70:99:71:1e:40:56:71:4f:ae:b4:4a:c3:9d:3a:6f:
         98:cf:c6:74:c3:97:32:db:8c:a5:93:e9:6c:43:5f:a7:5a:1f:
         b2:ee:f9:8b:d3:e2:16:cf:89:8f:58:8e:1d:87:32:df:3b:18:
         e6:86:13:ba:a3:99:0a:61:fc:56:99:f2:4f:16:f9:8d:5c:ee:
         24:40:1a:30:ce:e4:1c:a7:92:81:d3:cc:75:9f:c3:56:ce:f8:
         7d:e4:cb:da:24:31:d7:4a:0d:36:f8:3a:a1:c3:ea:7c:64:42:
         0e:03:af:62:d3:f1:c0:8c:84:92:bc:c6:be:10:a6:83:5b:ba:
         f2:c8:65:60:84:f3:f9:33:93:26:87:af:24:f3:6e:b8:cc:17:
         bc:4a:20:d7:7a:72:fb:75:02:31:ca:8b:b8:d2:c1:db:a0:3b:
         95:b1:2f:0c:bf:58:e2:6b:28:42:08:6f:cb:0e:bc:9f:25:b9:
         bb:41:03:46:6a:ce:bf:c2:bf:2d:ec:a6:a9:1d:b0:01:fa:65:
         2e:b6:c1:fa:f7:d5:43:f4:68:99:90:b5:6e:b2:04:29:2c:31:
         c2:ea:bc:5f:20:02:aa:b8:fb:32:12:8e:5a:d4:58:ec:c5:64:
         58:e6:0d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 23:21:24 2026 by rpki-client