Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530/d892b856-8973-3b3e-9c3a-b2156288988e.roa
File:                     d892b856-8973-3b3e-9c3a-b2156288988e.roa (raw, json)
Hash identifier:          eD0wM878j4cpdk0HoQopYA0jJnIqabaWCtrH0JQ1CWM=
Subject key identifier:   F4:6A:D0:1C:79:23:0F:1D:75:BF:DE:E5:A4:60:58:B8:07:40:67:47
Certificate issuer:       /CN=b7f47051-24e9-4c6d-a7f1-2165292c5530
Certificate serial:       010D0C9F4328584E2D9F01C7A07E9BA200EF4F10
Authority key identifier: 6F:67:21:58:89:0F:9A:09:B1:72:56:0B:79:3A:B9:D7:1D:DD:3C:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530/d892b856-8973-3b3e-9c3a-b2156288988e.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     19050
IP address blocks:        156.40.93.0/24 maxlen: 24
                          156.40.94.0/23 maxlen: 23
                          156.40.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530/b7f47051-24e9-4c6d-a7f1-2165292c5530.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530/b7f47051-24e9-4c6d-a7f1-2165292c5530.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:01:c7:a0:7e:9b:a2:00:ef:4f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7f47051-24e9-4c6d-a7f1-2165292c5530
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=db715d3f-bc54-444b-9021-c7c23da48000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:78:26:bb:04:a4:71:fe:6a:3e:a5:0e:14:06:
                    f8:98:bd:5a:9c:63:04:6d:51:39:23:13:ed:fd:bf:
                    16:ff:21:ab:56:cc:0c:0f:88:c4:39:38:90:a5:b7:
                    90:19:a5:ee:a0:23:eb:18:b5:4c:fe:2f:cd:5b:0e:
                    c9:96:ac:44:c3:ae:5a:15:16:2e:32:b6:b1:f4:11:
                    1b:10:51:07:6d:fa:e2:37:5a:4c:c6:70:09:9f:b1:
                    56:56:40:64:3e:1f:02:68:3f:06:17:8f:ac:cf:5d:
                    26:07:b1:25:13:86:17:0c:d1:87:26:b1:fb:10:ec:
                    62:b7:fa:f9:f1:8b:bc:d0:09:cb:b0:9a:70:8b:cc:
                    3e:e3:08:d3:bf:3d:b0:d4:87:9c:a0:95:41:36:4d:
                    7d:49:4f:37:70:52:8b:16:66:79:58:48:95:25:dd:
                    3c:08:ff:f2:bf:35:24:af:c5:6f:83:0e:b9:07:3b:
                    de:f2:95:9b:c4:e2:42:f7:a4:eb:1d:ab:99:d6:58:
                    09:76:4d:a6:51:60:a1:8c:22:58:78:ad:c3:df:14:
                    35:30:2e:21:ef:e7:85:a8:ed:24:a4:0e:ed:28:c0:
                    67:cd:bb:ac:88:97:82:00:19:be:bc:2c:97:2e:57:
                    aa:88:f5:02:36:c1:95:86:bc:c5:43:8b:1c:d5:70:
                    33:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:6A:D0:1C:79:23:0F:1D:75:BF:DE:E5:A4:60:58:B8:07:40:67:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530/d892b856-8973-3b3e-9c3a-b2156288988e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530/b7f47051-24e9-4c6d-a7f1-2165292c5530.crl

            X509v3 Authority Key Identifier:
                keyid:6F:67:21:58:89:0F:9A:09:B1:72:56:0B:79:3A:B9:D7:1D:DD:3C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b7f47051-24e9-4c6d-a7f1-2165292c5530.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.40.93.0-156.40.95.255
                  156.40.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:ab:27:ed:ca:30:b4:3e:89:7d:22:ac:06:14:4e:5b:51:da:
         49:f4:67:22:71:3f:36:bc:bf:57:c7:7a:8c:40:92:77:09:3f:
         70:04:9f:1c:41:e4:1c:dc:83:39:bf:f1:24:a7:b4:cc:2b:c6:
         e1:14:34:d1:63:77:c6:cd:a4:52:fe:23:57:70:b2:87:ec:9f:
         cc:97:ff:e4:f4:b7:e1:59:ed:bd:0a:d1:60:47:1f:6b:b3:54:
         44:ba:a2:aa:0d:e1:c6:6c:38:0b:58:47:58:18:3e:14:33:95:
         c1:9e:55:fe:0a:0a:a6:70:0b:e6:72:e4:95:bc:c1:1f:64:58:
         04:18:4c:22:31:a0:c6:b6:93:37:71:9f:1a:9e:0a:cc:64:96:
         2f:91:1a:bf:28:c8:9b:7d:5a:94:6b:61:4f:66:02:23:15:fc:
         51:77:8d:5c:80:e5:6f:95:48:be:ff:0c:c8:be:d2:47:5f:21:
         4d:24:79:f1:dc:e5:7a:89:00:03:e9:8d:24:3a:57:cd:68:95:
         4c:c7:14:00:90:41:70:40:56:e1:b6:f1:54:7e:8f:d9:ad:0b:
         f6:13:8d:ec:ea:c7:70:8d:2c:8c:88:e1:1b:11:da:c6:15:16:
         0f:6e:0f:f3:7e:c0:ff:0b:aa:52:61:4c:bf:19:72:d8:11:b4:
         5a:20:cf:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 05:51:37 2026 by rpki-client