Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/2436cc83-a62c-3742-950a-c8c1fdc678de.roa
File:                     2436cc83-a62c-3742-950a-c8c1fdc678de.roa (raw, json)
Hash identifier:          7rBPjNfMHj4nS+Qmkvr9GGKHCyvnE8k/iMHCBpfrEjo=
Subject key identifier:   74:62:C1:82:3D:54:B0:E9:D3:34:B7:91:E0:A4:4E:10:50:30:C8:9B
Certificate issuer:       /CN=d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3
Certificate serial:       010D0C9F4328584E3A2F14CC8136CCA0F8FDFF80
Authority key identifier: 06:F4:F4:09:CE:5D:8E:8C:95:73:69:14:22:CF:2A:7F:B9:91:A3:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/2436cc83-a62c-3742-950a-c8c1fdc678de.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     19830
IP address blocks:        144.249.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:14:cc:81:36:cc:a0:f8:fd:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=4d29a177-4489-41d6-85db-b5c29995d0b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a2:b5:3c:d6:5b:32:55:b2:b7:3b:47:de:a8:
                    fa:f5:7a:93:5a:1b:8e:41:92:1c:51:0d:3a:00:24:
                    80:c8:ae:81:36:e0:0f:bd:1f:af:74:85:78:3f:b7:
                    10:84:25:19:1f:be:60:df:8b:f0:8d:61:9e:c7:b1:
                    3f:22:e8:5f:28:91:4c:40:4c:a7:3b:a0:c5:1c:65:
                    3b:25:88:4a:b8:3f:67:6f:43:de:48:f0:83:cb:46:
                    80:dd:dd:35:7c:77:5c:fb:30:b2:b9:c7:3b:f0:8b:
                    0f:51:20:10:da:93:83:c0:20:fe:a2:95:81:fd:b2:
                    d7:be:06:d2:80:fc:ae:4c:71:49:0c:b7:b5:92:29:
                    f3:4d:8a:93:80:6b:55:fc:2b:fa:92:b1:49:fb:90:
                    b4:3d:1d:ec:15:30:d7:66:1c:0b:61:f7:3a:1b:73:
                    75:fd:75:3c:6c:3d:19:09:31:32:b1:51:c9:a2:d7:
                    e7:a8:d6:5c:67:9d:d6:8f:6b:9f:11:ea:9f:a6:15:
                    11:f3:99:5a:d4:7a:e9:ae:4c:4d:c4:99:36:78:71:
                    26:95:e7:db:ca:4a:e2:07:66:bf:e7:d1:2e:2c:f0:
                    d9:24:f4:2b:e2:51:94:46:a8:50:dc:0e:52:1e:68:
                    9e:a5:7d:ce:cd:6a:10:f9:a7:98:2a:c6:ef:f1:91:
                    5e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:62:C1:82:3D:54:B0:E9:D3:34:B7:91:E0:A4:4E:10:50:30:C8:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/2436cc83-a62c-3742-950a-c8c1fdc678de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.crl

            X509v3 Authority Key Identifier:
                keyid:06:F4:F4:09:CE:5D:8E:8C:95:73:69:14:22:CF:2A:7F:B9:91:A3:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6ad526c-b705-4f4e-a2da-6b7f12f1f7e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.249.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:f6:81:a2:4b:e0:da:b8:53:60:87:6e:22:3d:58:80:e9:f0:
         dc:fc:a8:f5:b6:b6:7e:34:d1:ee:cd:bd:f8:86:01:69:30:1d:
         7c:80:d0:d2:47:c8:7e:96:61:05:60:47:a8:8e:1c:dc:3b:4d:
         e4:4b:72:a8:9f:9d:00:e5:82:13:ab:5c:53:29:9c:e4:19:20:
         07:2c:bc:e0:80:dc:76:0b:4b:26:22:25:0f:5d:fc:a8:df:86:
         33:79:b3:20:d6:5d:fc:ad:a5:73:61:b8:7a:59:82:ca:f9:53:
         e2:85:fb:2f:46:e2:13:8d:90:0e:7e:8f:70:bb:b4:66:e5:e8:
         d9:37:43:2d:a9:ea:a3:d0:5f:28:c3:9b:8b:ee:cb:c0:45:de:
         a0:f0:3f:d8:24:b1:3f:69:79:9c:2a:a2:5c:1c:d5:a1:22:fb:
         93:6a:a2:2e:7f:ad:f2:10:8c:aa:72:22:60:dd:b1:6f:86:72:
         ed:9a:7b:8d:74:c7:fe:7f:a6:c7:54:b9:30:29:b4:89:f5:a1:
         27:8a:d1:53:21:ef:b5:ef:8d:86:91:8b:65:d2:4e:58:c8:97:
         d1:8a:a2:81:1d:11:e0:8d:84:72:5a:03:91:e6:27:47:01:32:
         d5:8f:f2:32:e1:b3:5b:1b:8d:94:61:4f:f9:be:c1:ef:92:46:
         3b:6b:23:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 05:47:55 2026 by rpki-client