Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0cf9a0ab-2fba-4c49-9664-539b7448b108/c7616cc0-1341-3188-8570-1184e101e37c.roa
File:                     c7616cc0-1341-3188-8570-1184e101e37c.roa (raw, json)
Hash identifier:          IhhwhK52lNTL0leRnptUVqyawceeLE9DFg4MpfLIkOI=
Subject key identifier:   24:7E:62:20:5A:25:3D:7E:7F:02:26:39:88:C4:38:A0:5F:20:A6:3F
Certificate issuer:       /CN=0cf9a0ab-2fba-4c49-9664-539b7448b108
Certificate serial:       010D0C9F4328584E736A3C41CF728ED02C5B0040
Authority key identifier: BB:30:BC:AC:15:4B:B2:7F:AB:7D:40:C3:47:88:2C:C3:ED:79:DF:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0cf9a0ab-2fba-4c49-9664-539b7448b108.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0cf9a0ab-2fba-4c49-9664-539b7448b108/c7616cc0-1341-3188-8570-1184e101e37c.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     14368
IP address blocks:        96.46.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0cf9a0ab-2fba-4c49-9664-539b7448b108/0cf9a0ab-2fba-4c49-9664-539b7448b108.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0cf9a0ab-2fba-4c49-9664-539b7448b108/0cf9a0ab-2fba-4c49-9664-539b7448b108.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0cf9a0ab-2fba-4c49-9664-539b7448b108.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:3c:41:cf:72:8e:d0:2c:5b:00:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cf9a0ab-2fba-4c49-9664-539b7448b108
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=ca8d5847-d860-41dc-a02e-2a7f36877752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a6:98:20:2a:58:3d:ca:cd:4a:c6:30:11:42:
                    2a:6e:61:36:86:46:9f:0e:86:5d:13:79:ff:bf:92:
                    07:fd:f7:38:e2:45:ca:08:da:aa:61:01:a8:d3:3b:
                    9b:d8:a8:e9:6b:52:f5:ad:b2:8e:8e:44:e0:49:d3:
                    48:73:11:0b:d9:a3:4d:37:c6:e5:c3:e4:7c:99:b8:
                    02:4c:83:28:4a:c3:7a:81:02:30:ae:f2:b3:4d:33:
                    16:10:74:88:b1:ec:e7:44:5a:74:b4:9c:d3:34:e6:
                    b9:c4:2e:83:16:f6:d5:2c:95:5b:42:1c:bc:02:d5:
                    9f:19:0e:29:83:2e:7f:35:cf:16:4a:9d:f2:fc:b5:
                    12:5d:ce:4c:b5:c6:34:c6:a5:91:7b:51:1f:b9:82:
                    14:3a:05:37:2b:2d:6d:cd:8c:c4:52:c5:9f:21:ea:
                    7a:af:71:af:a8:e3:86:c8:db:ae:8d:19:1b:fc:7e:
                    61:ba:2a:7f:6c:22:c8:63:01:3b:36:94:6f:a8:39:
                    39:ce:0e:49:b7:4a:9e:45:62:9a:53:38:c0:c2:c8:
                    b8:89:cd:bc:e9:89:7e:0a:c1:12:85:e1:78:c7:10:
                    ff:a1:62:4d:5f:8d:23:97:81:f5:e3:d1:62:cf:5b:
                    93:62:f1:08:1a:78:4a:9d:cf:45:c8:d1:bb:ec:9d:
                    92:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:7E:62:20:5A:25:3D:7E:7F:02:26:39:88:C4:38:A0:5F:20:A6:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0cf9a0ab-2fba-4c49-9664-539b7448b108/c7616cc0-1341-3188-8570-1184e101e37c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0cf9a0ab-2fba-4c49-9664-539b7448b108/0cf9a0ab-2fba-4c49-9664-539b7448b108.crl

            X509v3 Authority Key Identifier:
                keyid:BB:30:BC:AC:15:4B:B2:7F:AB:7D:40:C3:47:88:2C:C3:ED:79:DF:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0cf9a0ab-2fba-4c49-9664-539b7448b108.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.46.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:3b:b8:ac:74:4a:4e:e0:5f:4b:0c:23:ec:ed:a5:c7:98:04:
         21:06:02:68:18:56:de:89:50:84:74:18:16:33:f8:5d:3b:b8:
         36:73:ef:97:5c:c2:84:24:46:08:eb:07:4c:d2:d7:f7:a9:15:
         da:41:84:e6:b7:39:6d:fa:ef:32:7e:2e:99:ac:52:b7:38:f0:
         fe:1b:1d:90:bf:ed:20:ec:7e:8b:c5:1b:11:e2:44:a8:c9:80:
         f1:81:c8:a4:65:c3:37:c8:6d:de:e9:b9:0c:c5:a1:5d:8e:b3:
         f7:56:31:89:be:c8:9a:73:22:57:36:fd:81:2e:90:0c:af:8a:
         15:7d:97:6e:d0:dc:de:34:72:ca:93:5c:80:e1:24:e8:80:94:
         f1:36:13:56:ad:3c:d8:30:9f:22:44:5c:8d:29:80:4b:35:eb:
         51:33:8f:6d:9f:03:75:ea:df:43:86:35:dd:dc:96:6e:1e:24:
         fb:91:e1:a8:30:71:f9:9c:f7:c0:73:a0:3b:87:f5:2f:c1:de:
         3a:91:bf:65:7d:96:d6:67:8e:40:ea:d1:87:20:c4:0d:1e:03:
         bf:01:23:33:2a:b1:21:67:99:79:5c:02:82:94:83:13:e9:89:
         e8:0a:04:ba:3c:11:14:8b:00:20:d6:48:a0:6e:7a:5a:74:d7:
         e6:7c:bf:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 05:24:49 2026 by rpki-client