Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/6d43011a-c6d1-3953-b4a1-e86795dffe10.roa
File:                     6d43011a-c6d1-3953-b4a1-e86795dffe10.roa (raw, json)
Hash identifier:          wT7F10GwedQZY0a6uWWPD0/zps1nueWNaIWVE8tkppU=
Subject key identifier:   6B:C4:E3:82:A0:D2:D0:58:2A:B1:1B:C1:2C:F5:F7:E6:BE:60:F9:4D
Certificate issuer:       /CN=c7a240a6-7109-4cea-b4c6-82f627a534d6
Certificate serial:       010D0C9F4328584DF2A2AD983CCBFE46E2A4C300
Authority key identifier: 63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/6d43011a-c6d1-3953-b4a1-e86795dffe10.roa
Signing time:             Mon 25 May 2026 05:54:58 +0000
ROA not before:           Mon 25 May 2026 05:54:58 +0000
ROA not after:            Sun 23 Aug 2026 05:54:58 +0000
asID:                     47007
IP address blocks:        172.84.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f2:a2:ad:98:3c:cb:fe:46:e2:a4:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7a240a6-7109-4cea-b4c6-82f627a534d6
        Validity
            Not Before: May 25 05:54:58 2026 GMT
            Not After : Aug 23 05:54:58 2026 GMT
        Subject: CN=827870cf-b405-4966-904c-820dac5f5b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:dc:fa:3c:39:03:e5:38:4c:a6:1d:d5:b8:d5:
                    24:22:65:e8:7a:2b:08:b3:fa:a1:61:e8:7a:2d:03:
                    87:ff:b4:f2:7c:37:74:73:2f:9d:6f:e8:4a:e1:81:
                    f7:6d:6f:47:13:de:d5:56:80:27:27:fb:fe:25:34:
                    0c:93:df:e4:37:8d:b0:aa:9a:c7:7b:c8:ba:1f:52:
                    8b:87:c0:96:df:49:79:e4:9c:83:b5:ff:59:a7:1e:
                    f9:b8:55:5f:1f:a2:6c:6a:19:7f:a9:07:35:ee:1d:
                    9d:2c:6f:b6:7d:cc:10:26:a0:f1:8b:a5:0b:9c:f0:
                    52:06:56:56:1f:8c:c2:59:87:78:96:37:cf:de:eb:
                    39:50:89:b2:06:35:aa:af:fe:85:c1:91:d0:33:6f:
                    d7:7a:b5:a5:5b:cc:95:ce:b9:3f:0e:b5:a6:60:df:
                    03:ab:19:6e:30:8b:57:cb:3e:0e:9a:24:39:f4:3f:
                    6c:67:da:e8:c7:66:8d:a1:0f:7e:c8:1f:c4:6a:b8:
                    75:ea:0b:ad:cb:a4:76:9c:0a:fa:a9:d0:ad:65:d8:
                    74:a5:a8:52:96:20:63:ff:1c:8b:53:73:05:79:73:
                    62:e2:e2:23:75:31:20:e4:0f:a8:23:bc:bd:a3:06:
                    ec:04:fc:c3:cb:3f:b0:ba:a5:55:61:c4:3a:23:54:
                    0e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C4:E3:82:A0:D2:D0:58:2A:B1:1B:C1:2C:F5:F7:E6:BE:60:F9:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/6d43011a-c6d1-3953-b4a1-e86795dffe10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl

            X509v3 Authority Key Identifier:
                keyid:63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.84.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:28:59:0f:ae:57:a6:f2:ae:bd:1b:44:84:d0:b7:9e:fe:95:
         26:80:78:96:83:a2:06:df:54:8a:42:fa:84:97:72:20:58:10:
         a3:53:6e:86:58:d1:a1:46:76:28:3b:5d:53:ff:d3:ca:c1:9f:
         6f:83:bd:af:46:79:e1:7e:ac:b5:31:2c:bb:18:3f:d5:6f:e9:
         61:e9:b8:e5:12:86:c1:64:cc:96:62:9e:81:4e:a8:b3:1e:a3:
         ed:f8:de:55:23:57:99:d1:a4:30:78:ba:6b:99:a1:73:81:00:
         03:cb:89:8e:da:45:11:da:4d:30:8b:5c:c8:ec:a6:30:ec:43:
         c7:6c:10:81:8f:4c:6a:04:cf:0a:d5:22:9a:02:7f:0b:f7:e3:
         0d:fe:b9:c4:a8:89:c7:5c:4f:df:1e:d2:2f:7e:bd:3f:47:c7:
         fd:b0:9c:b5:d3:1c:a2:c5:c3:92:c3:fd:ce:03:4d:4a:43:5b:
         f1:20:a6:5e:73:e2:32:9c:be:59:4e:40:ea:f0:82:77:c0:6d:
         6c:cc:57:63:de:f9:da:4b:66:cc:2d:15:ab:27:36:22:11:6d:
         62:9f:17:e6:03:c6:ed:03:58:ba:ac:74:78:19:e3:a6:36:a2:
         8a:f4:28:91:2e:15:62:fb:59:9a:21:0c:9c:e4:4c:8a:7a:e5:
         72:2d:9e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 08:34:49 2026 by rpki-client