Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/95a26c6a-55c9-3c2c-b26e-81969bddcadc.roa
File:                     95a26c6a-55c9-3c2c-b26e-81969bddcadc.roa (raw, json)
Hash identifier:          0CN2IRclG5d1TUcAT2S41H46dKHjOwyQ2FWT6h8WU0o=
Subject key identifier:   25:2E:ED:36:69:52:31:D6:0C:DE:35:4F:07:FF:3B:C2:B1:30:38:4D
Certificate issuer:       /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
Certificate serial:       010D0C9F4328584E3560E733E08BC6B206953E80
Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/95a26c6a-55c9-3c2c-b26e-81969bddcadc.roa
Signing time:             Thu 18 Jun 2026 03:41:36 +0000
ROA not before:           Thu 18 Jun 2026 03:41:36 +0000
ROA not after:            Wed 16 Sep 2026 03:41:36 +0000
asID:                     293
IP address blocks:        192.74.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:60:e7:33:e0:8b:c6:b2:06:95:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
        Validity
            Not Before: Jun 18 03:41:36 2026 GMT
            Not After : Sep 16 03:41:36 2026 GMT
        Subject: CN=978e4c6d-8fa9-4115-b520-015a8bb74ec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:49:bc:97:4d:d4:3f:58:40:0c:ab:03:50:f7:
                    01:72:1d:dc:c5:05:71:86:9f:1e:28:3d:5c:33:65:
                    d7:0b:d6:e3:b2:a4:cb:d7:3b:6c:92:b2:b5:a5:22:
                    0f:13:88:f8:1a:93:e7:3a:e6:a4:b5:cd:93:0e:15:
                    7f:ef:e1:9c:6c:57:13:87:1e:e1:62:fe:af:4b:ab:
                    b7:42:39:44:cb:d6:82:b8:5d:8b:b2:f1:4b:2b:4c:
                    37:c3:a6:ce:32:7f:5d:59:9d:d9:a6:1b:c5:e0:64:
                    9b:11:72:49:b7:18:2a:0d:b5:6d:34:68:f7:b6:49:
                    b0:79:db:92:23:5c:d9:95:52:62:db:8a:2c:1d:6a:
                    18:8a:32:eb:6b:24:0d:e2:91:af:71:ad:77:64:a5:
                    d6:8f:e5:95:3a:ce:84:2d:fc:da:91:35:e9:2b:32:
                    0d:97:2e:22:83:41:cf:7e:ce:7b:72:6c:c6:be:38:
                    d5:32:09:c4:17:8f:13:ce:bc:92:6a:cf:6f:26:28:
                    81:7c:19:cc:0c:77:bf:d2:9a:f5:ab:80:80:c7:d2:
                    b3:4e:53:cb:77:fa:0f:c6:62:b6:c7:2b:d7:0f:42:
                    cd:ed:16:f3:59:0b:55:15:04:38:fc:7f:61:26:15:
                    30:e9:70:6a:97:34:a5:30:10:b8:c9:11:49:fd:b8:
                    fd:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:2E:ED:36:69:52:31:D6:0C:DE:35:4F:07:FF:3B:C2:B1:30:38:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/95a26c6a-55c9-3c2c-b26e-81969bddcadc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl

            X509v3 Authority Key Identifier:
                keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.74.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:02:a3:2f:2a:de:54:52:86:80:ef:fc:2b:25:5d:ba:df:c2:
         e2:5e:e2:1e:b3:99:7c:7a:9e:e1:9d:1e:b0:1d:cf:9b:a9:53:
         1a:15:c3:48:51:05:bf:70:b7:0f:b8:c0:2b:97:94:7b:87:a4:
         38:ad:26:1f:17:c2:c0:d0:1b:86:0b:a4:ef:e3:79:25:51:e5:
         8e:f4:f7:7c:c8:e5:df:81:3f:c3:61:1b:81:bd:43:ff:9c:0c:
         0f:4b:77:5b:c4:46:59:2f:0d:b5:a3:5f:36:8e:b4:2b:27:19:
         2d:fe:e1:a9:ee:a0:cd:3f:cf:33:47:7e:5f:5b:6f:f5:d6:91:
         59:fc:d4:bd:e2:a4:69:bf:93:17:5e:5b:a9:e2:30:0f:cd:ab:
         19:30:d2:f0:eb:02:58:23:ba:f9:6f:1e:ad:39:c4:61:22:fd:
         4b:d6:ed:86:d8:2a:25:68:2e:1e:cf:b5:f5:54:2f:2b:26:92:
         0b:5a:be:c5:9c:5a:95:8c:05:f8:51:ff:9a:31:b4:06:df:2a:
         db:62:2d:c8:c5:d4:3e:30:e8:a1:f6:d9:56:1b:79:f9:40:82:
         7d:e4:a5:b6:d0:c1:c6:31:6a:f5:d7:2a:11:06:1f:58:88:6e:
         0f:af:fd:e1:27:ed:15:61:25:f7:5c:05:96:e8:cd:1d:1a:23:
         43:bd:44:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:35:49 2026 by rpki-client