Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530/18776009-308d-390f-8e0a-de8dde10d42b.roa
File:                     18776009-308d-390f-8e0a-de8dde10d42b.roa (raw, json)
Hash identifier:          GCdW/27iUwZryJ6yF2jwFbA3NF+njAf5yUUDwYt2jAI=
Subject key identifier:   EA:5B:54:D2:C7:3D:AD:DC:0A:3A:48:89:54:EE:33:89:7E:4A:EB:6A
Certificate issuer:       /CN=b7f47051-24e9-4c6d-a7f1-2165292c5530
Certificate serial:       010D0C9F4328584E35FF0A2F5EE4F1E53D914A30
Authority key identifier: 6F:67:21:58:89:0F:9A:09:B1:72:56:0B:79:3A:B9:D7:1D:DD:3C:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530/18776009-308d-390f-8e0a-de8dde10d42b.roa
Signing time:             Thu 18 Jun 2026 09:00:12 +0000
ROA not before:           Thu 18 Jun 2026 09:00:12 +0000
ROA not after:            Wed 16 Sep 2026 09:00:12 +0000
asID:                     19050
IP address blocks:        156.40.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530/b7f47051-24e9-4c6d-a7f1-2165292c5530.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530/b7f47051-24e9-4c6d-a7f1-2165292c5530.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:35:ff:0a:2f:5e:e4:f1:e5:3d:91:4a:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7f47051-24e9-4c6d-a7f1-2165292c5530
        Validity
            Not Before: Jun 18 09:00:12 2026 GMT
            Not After : Sep 16 09:00:12 2026 GMT
        Subject: CN=6ccc5ce3-453c-45c3-906e-b8dc94b20177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2c:cf:3e:95:98:6e:ec:a2:95:a1:c2:42:1c:
                    20:c2:ea:1f:12:26:d7:8f:c2:6d:18:97:2c:37:a5:
                    16:c7:60:f2:a6:b8:8e:a9:b9:8e:4c:56:c0:44:00:
                    49:33:c4:e4:f8:e0:e2:ff:97:b5:8d:a2:9a:48:e1:
                    02:b5:59:ef:36:e2:88:b5:5c:dc:01:29:f9:da:e6:
                    af:99:34:ec:8c:a3:4f:e7:11:db:f8:e4:a6:07:f0:
                    fa:02:21:e0:66:b8:a2:46:ea:18:3b:68:76:7b:e1:
                    5b:b5:22:89:7a:a5:60:fd:24:50:c4:94:a8:54:24:
                    6b:97:26:2b:92:3c:50:9c:e5:91:48:15:61:15:1a:
                    e4:29:f4:55:ba:08:96:84:10:6b:76:1d:53:04:e0:
                    e2:7b:c0:21:cc:56:db:ce:d6:86:6b:99:ee:b4:d5:
                    e3:8b:b9:71:93:f5:f5:61:fd:2c:ef:41:08:c9:8f:
                    db:2d:7e:75:61:97:86:de:62:c6:79:97:67:cd:9b:
                    13:b3:5c:89:c4:43:77:94:b4:57:de:ff:8f:aa:68:
                    52:6c:cd:bf:42:7a:e3:c8:60:b8:7c:0a:28:32:ef:
                    e8:33:ad:57:36:58:77:98:37:fc:da:2c:f6:e1:e3:
                    4f:88:3f:8b:07:05:60:e3:09:9f:46:24:58:35:77:
                    ca:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:5B:54:D2:C7:3D:AD:DC:0A:3A:48:89:54:EE:33:89:7E:4A:EB:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530/18776009-308d-390f-8e0a-de8dde10d42b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530/b7f47051-24e9-4c6d-a7f1-2165292c5530.crl

            X509v3 Authority Key Identifier:
                keyid:6F:67:21:58:89:0F:9A:09:B1:72:56:0B:79:3A:B9:D7:1D:DD:3C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.40.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:af:08:6c:a8:40:0e:6a:64:3a:84:b5:9a:b2:04:ed:7e:66:
         3b:84:3f:8b:e9:f9:52:c0:9d:49:86:30:be:2f:6d:ec:4d:0a:
         5c:09:77:01:0e:f9:53:9b:3c:d9:aa:bf:a7:4f:d1:6c:74:c9:
         75:62:55:22:45:43:ac:6e:bd:ab:77:35:14:a2:f4:72:6a:6d:
         d3:db:65:90:b8:8c:ba:25:93:61:33:a3:d5:e2:f4:31:6a:a7:
         06:1e:83:e7:0d:55:e4:9a:29:0d:62:81:8e:83:08:de:00:3e:
         27:42:15:70:d4:e7:69:5d:a2:ad:c0:10:e0:dc:b0:82:4d:dc:
         6c:74:c5:11:8f:bd:9c:23:94:5b:5b:1f:5b:d5:d0:5c:ff:fe:
         9f:44:50:c6:3f:26:e0:f9:ff:59:1a:19:6b:41:d0:a8:c1:93:
         ef:e6:c7:49:b1:d5:9c:65:93:85:d9:ad:1e:93:8b:da:76:db:
         08:c1:be:35:1d:5e:a0:ca:69:02:ee:42:a6:27:b7:59:d9:18:
         07:43:e9:dc:ef:4a:8c:8e:72:6a:76:68:49:99:6a:5e:74:8a:
         b8:26:de:f0:9b:aa:52:7f:0f:13:b1:6b:02:44:b0:b0:65:b3:
         03:86:e7:b5:32:3c:e8:01:4a:6a:00:5b:b8:16:0d:c5:e8:e1:
         bf:5c:33:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 05:54:43 2026 by rpki-client