Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e29dcb5-6604-4c9c-b6ec-ea09c3b9f97c/5d92ed6a-ed8e-302c-87eb-be00eeb682fb.roa
File:                     5d92ed6a-ed8e-302c-87eb-be00eeb682fb.roa (raw, json)
Hash identifier:          nxzK5v6OqtzNEc3raPhzBQelQISaq5M8T7q7SpM/fgg=
Subject key identifier:   69:E7:1A:09:37:6B:01:A9:2D:E2:0C:CA:E6:84:49:AC:1B:F8:7B:20
Certificate issuer:       /CN=2e29dcb5-6604-4c9c-b6ec-ea09c3b9f97c
Certificate serial:       010D0C9F4328584E3A2F377DBCB374078BB9CE80
Authority key identifier: 12:A1:34:FC:C2:53:BC:E3:D6:BE:BF:F1:AB:D0:44:4C:8D:1B:07:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e29dcb5-6604-4c9c-b6ec-ea09c3b9f97c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e29dcb5-6604-4c9c-b6ec-ea09c3b9f97c/5d92ed6a-ed8e-302c-87eb-be00eeb682fb.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     46244
IP address blocks:        208.93.168.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e29dcb5-6604-4c9c-b6ec-ea09c3b9f97c/2e29dcb5-6604-4c9c-b6ec-ea09c3b9f97c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e29dcb5-6604-4c9c-b6ec-ea09c3b9f97c/2e29dcb5-6604-4c9c-b6ec-ea09c3b9f97c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e29dcb5-6604-4c9c-b6ec-ea09c3b9f97c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:37:7d:bc:b3:74:07:8b:b9:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e29dcb5-6604-4c9c-b6ec-ea09c3b9f97c
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=7e02eaa8-8a8c-4240-ad1f-af652bc4c774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1b:d9:57:df:7e:36:e2:e0:71:7a:a6:9f:1e:
                    10:34:52:96:de:85:a0:97:38:e6:9f:1e:a5:9b:60:
                    a9:a1:f8:c5:fd:33:a5:cf:68:88:e5:6b:0c:77:f0:
                    73:a2:b7:2c:b2:d4:44:29:e8:5b:9e:3a:20:54:d1:
                    ca:30:bd:7e:97:f0:00:bf:80:1c:32:08:f3:76:9e:
                    72:1b:0c:0f:46:9e:47:da:05:11:58:b3:a5:f0:c9:
                    50:51:1e:8b:97:63:2e:da:82:26:8a:e3:e1:f1:48:
                    1e:95:d0:f7:f2:56:53:86:ec:8c:49:d0:06:79:16:
                    c0:89:60:f4:40:4c:93:c1:0e:6c:53:f6:82:00:31:
                    bd:7a:68:1a:7a:40:ee:16:d3:24:2d:7c:70:31:f9:
                    f9:1c:b6:74:ed:69:e7:50:9a:a8:e3:01:b6:b9:cd:
                    6b:db:ff:5e:3c:54:af:38:45:77:f6:90:d7:da:d2:
                    06:ea:ec:57:74:0a:f3:3b:5e:66:79:3d:20:dc:d4:
                    a6:78:60:0b:1b:79:d4:28:96:cd:93:2c:da:72:fa:
                    b7:5f:3f:e1:62:18:41:f4:b9:75:b3:67:ad:09:d9:
                    8c:21:87:70:e7:26:72:20:d8:a5:20:d7:91:b0:03:
                    34:73:f9:1a:a4:18:a8:e5:8b:55:43:b4:e5:43:5c:
                    c8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E7:1A:09:37:6B:01:A9:2D:E2:0C:CA:E6:84:49:AC:1B:F8:7B:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e29dcb5-6604-4c9c-b6ec-ea09c3b9f97c/5d92ed6a-ed8e-302c-87eb-be00eeb682fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e29dcb5-6604-4c9c-b6ec-ea09c3b9f97c/2e29dcb5-6604-4c9c-b6ec-ea09c3b9f97c.crl

            X509v3 Authority Key Identifier:
                keyid:12:A1:34:FC:C2:53:BC:E3:D6:BE:BF:F1:AB:D0:44:4C:8D:1B:07:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2e29dcb5-6604-4c9c-b6ec-ea09c3b9f97c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.93.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:ff:08:11:5b:65:b9:db:d0:8f:62:f9:27:a7:d0:d9:db:dd:
         2d:aa:34:4a:b0:14:6a:4a:a4:5b:8f:06:3c:68:e8:38:84:74:
         e5:40:c5:9d:39:c5:6c:f3:3a:8c:0f:17:33:2f:ff:9c:10:bf:
         e9:bc:08:8b:45:59:5d:81:c2:b5:8a:48:1d:18:af:81:19:e9:
         a9:7b:76:5c:f9:37:25:dd:d7:e2:74:4e:35:90:c2:e3:e4:39:
         32:10:7b:40:b9:4b:e7:9a:bc:ca:04:11:79:40:81:a5:a9:69:
         dc:eb:e4:e5:7c:26:5c:c0:66:41:a1:fe:3e:0d:f5:d1:30:3f:
         f1:24:a0:e7:d0:35:11:73:07:c9:23:69:35:2f:a9:19:6d:fc:
         c5:68:9a:6f:02:bc:bc:30:ab:2c:92:75:fb:97:be:09:6e:51:
         06:15:d1:44:03:7c:13:1b:01:a1:df:14:17:63:ad:2d:a6:da:
         5e:f0:e3:cd:7c:bc:65:6d:fa:ff:ab:bd:f6:5a:bb:31:b6:8d:
         a8:13:1a:87:90:6b:a6:19:83:95:9e:73:41:fd:05:ec:bb:f9:
         8a:8c:ce:59:c7:ab:33:14:b1:6d:66:01:06:cb:7b:44:61:bc:
         4e:22:23:cd:46:9d:30:6e:12:7c:1e:3d:13:93:f9:b0:86:e7:
         a5:5e:6c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:14:38 2026 by rpki-client