Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/c895c230-8fe1-3d93-ad4b-385e77e2b1b4.roa
File:                     c895c230-8fe1-3d93-ad4b-385e77e2b1b4.roa (raw, json)
Hash identifier:          Gmxw3PKxxBT+YPLRj20YGXLyBBSEUjSLCDb/HKENnyo=
Subject key identifier:   77:AA:04:11:B9:2F:A1:8D:3D:41:58:DD:53:7C:C3:33:9A:FE:F8:09
Certificate issuer:       /CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
Certificate serial:       010D0C9F4328584EA79536FE1BA2BD24CB80F840
Authority key identifier: 87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/c895c230-8fe1-3d93-ad4b-385e77e2b1b4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     3738
IP address blocks:        192.250.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:36:fe:1b:a2:bd:24:cb:80:f8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=84ae8e79-bb7b-49bc-a7d1-ff7073fc92b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f5:7d:30:0f:37:6b:a4:c5:56:36:ab:7d:dc:
                    16:37:fd:88:44:31:46:be:59:13:de:c7:9f:d1:42:
                    54:ca:b8:b2:96:f8:20:13:02:d4:3f:8d:ff:92:e5:
                    9a:12:db:b1:31:81:66:74:2d:e2:64:f7:6b:4f:0a:
                    14:b3:ad:e8:36:d4:4f:08:ca:98:a3:5c:3f:18:a8:
                    9b:0d:d8:04:64:16:d5:14:ae:15:e3:66:a1:2f:f5:
                    e5:58:44:c6:53:46:e8:32:fc:1f:9a:37:9a:31:6e:
                    31:35:92:79:35:ec:51:0f:d0:60:94:eb:a8:5d:d8:
                    e7:2f:4b:09:b3:c3:79:2f:90:00:60:fa:18:fc:a1:
                    b3:95:32:00:bc:86:6b:13:05:0c:0e:84:5f:a2:84:
                    13:86:0d:f0:41:81:22:0e:2c:5b:ab:b6:ce:40:37:
                    35:27:c4:f7:09:39:fc:35:5c:82:0c:52:03:b6:ba:
                    fc:aa:f1:05:6a:d1:82:75:45:97:1c:73:af:a8:8c:
                    d2:74:70:86:5f:17:2a:eb:b0:6b:87:a7:4c:2e:df:
                    f9:9e:27:09:87:2f:07:81:60:36:5b:c2:b9:11:bc:
                    83:4e:e5:17:cf:76:15:89:8c:9d:da:06:81:49:f7:
                    f9:2d:ff:28:c2:b6:7d:b4:d9:09:01:49:12:ed:c7:
                    14:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:AA:04:11:B9:2F:A1:8D:3D:41:58:DD:53:7C:C3:33:9A:FE:F8:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/c895c230-8fe1-3d93-ad4b-385e77e2b1b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.crl

            X509v3 Authority Key Identifier:
                keyid:87:14:E5:45:F6:6D:5C:88:3D:86:4B:D8:E1:4C:10:B1:76:44:13:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6bbc010e-a3f7-4f6e-9d6c-dae55a68ec00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.250.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:5d:c0:80:ac:ef:75:a2:b0:21:04:4b:03:d9:a9:43:6d:c5:
         fb:4e:b6:1f:7d:95:36:f3:b2:c8:27:98:aa:c4:8b:0d:63:22:
         a6:bb:48:f7:ea:5e:66:60:28:cb:ca:e1:19:d4:e0:b2:2b:2a:
         f4:5e:3c:51:0e:a1:d7:30:0e:10:b4:cf:42:73:11:6e:2b:0d:
         f9:4e:90:69:6f:a5:6e:3a:69:e5:58:aa:4e:75:76:ed:0c:c5:
         c8:6d:e4:55:b5:f4:e6:b4:5c:47:87:b5:ec:2e:67:e3:ea:eb:
         68:f1:bf:2a:d0:b3:0b:15:5f:8a:82:98:8c:12:d2:7f:7c:f5:
         8d:a9:e5:98:b8:9f:bf:16:ed:ed:de:b8:d3:cf:7c:da:df:58:
         2f:6b:76:18:7d:d4:64:f3:03:b5:8f:ec:37:f7:b6:af:08:8b:
         f7:88:98:01:cf:ca:9e:6b:fe:1b:4f:94:93:fa:12:83:86:c0:
         00:40:9e:ca:43:15:e3:f9:1e:e5:76:ee:3d:bd:5e:7c:37:53:
         9e:1c:dc:48:3d:e3:76:7c:bf:a2:e6:29:e3:ee:64:72:47:e9:
         77:17:11:c8:fb:07:d3:39:25:8f:b9:bb:b8:25:2f:8f:9d:d6:
         99:81:1a:b7:08:09:91:8a:36:02:ab:a3:fd:9e:88:12:69:fe:
         12:ae:0e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 23:57:50 2026 by rpki-client