Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d84a1bcb-33b6-4b81-bb5e-920d980ccf31/2846aed7-fef4-30dd-b52c-6b501db699a6.roa
File:                     2846aed7-fef4-30dd-b52c-6b501db699a6.roa (raw, json)
Hash identifier:          fFSFxxX6BEVPV1AVAKx9zM5MdpStDwMQ878kEuVuZyU=
Subject key identifier:   50:AC:C7:8D:E6:6F:D4:05:CA:6B:39:78:5D:83:50:1E:0F:EC:7F:4C
Certificate issuer:       /CN=d84a1bcb-33b6-4b81-bb5e-920d980ccf31
Certificate serial:       010D0C9F4328584E5BAF6007C143340D7A661C80
Authority key identifier: 0D:4B:17:FE:49:4B:D4:54:DC:EB:64:58:48:27:B7:6A:D7:E7:A6:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d84a1bcb-33b6-4b81-bb5e-920d980ccf31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d84a1bcb-33b6-4b81-bb5e-920d980ccf31/2846aed7-fef4-30dd-b52c-6b501db699a6.roa
Signing time:             Wed 01 Jul 2026 21:00:12 +0000
ROA not before:           Wed 01 Jul 2026 21:00:12 +0000
ROA not after:            Tue 29 Sep 2026 21:00:12 +0000
asID:                     396862
IP address blocks:        209.126.94.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d84a1bcb-33b6-4b81-bb5e-920d980ccf31/d84a1bcb-33b6-4b81-bb5e-920d980ccf31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d84a1bcb-33b6-4b81-bb5e-920d980ccf31/d84a1bcb-33b6-4b81-bb5e-920d980ccf31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d84a1bcb-33b6-4b81-bb5e-920d980ccf31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5b:af:60:07:c1:43:34:0d:7a:66:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d84a1bcb-33b6-4b81-bb5e-920d980ccf31
        Validity
            Not Before: Jul  1 21:00:12 2026 GMT
            Not After : Sep 29 21:00:12 2026 GMT
        Subject: CN=62318c8a-07dc-4034-860c-0420289ee6ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0d:0e:fc:05:76:2c:7b:71:48:b7:a8:f7:26:
                    43:f8:62:2e:1e:49:48:bf:47:15:1e:18:f1:9f:fc:
                    c4:36:50:e7:4e:49:b4:41:2b:32:48:e1:42:5e:70:
                    99:4f:79:b5:b5:45:f7:ab:48:79:02:34:c3:b1:5f:
                    13:ab:ce:07:87:8d:97:d8:fe:a5:0e:3a:1a:f1:ae:
                    63:c8:a0:fa:4a:88:20:94:2b:ea:5b:75:1c:ea:f7:
                    03:c6:83:d6:1f:c3:15:41:bf:cf:dc:df:f3:a0:db:
                    e8:29:f1:6d:3c:ef:59:04:d0:1b:1c:f8:b4:6d:22:
                    e9:da:99:0e:c4:eb:c5:1e:6d:1b:08:6d:76:76:e6:
                    f2:0e:9d:4d:b6:0e:1a:f8:1a:bc:4d:f7:d2:f4:1e:
                    49:c1:c2:37:ba:5d:e5:bd:88:a3:8c:01:6a:77:e0:
                    18:90:5d:08:7f:32:11:d9:e1:22:7f:48:f6:27:39:
                    7d:1e:c1:4e:f0:25:f1:16:db:63:b4:18:5a:83:7f:
                    2a:2d:ae:eb:1d:03:bf:49:91:7c:03:ee:59:9b:a7:
                    9b:4b:93:c9:e8:d6:bd:5b:68:a9:ae:58:d4:c4:53:
                    03:18:7c:fa:c3:09:62:18:60:5a:be:a8:75:55:78:
                    29:08:8b:29:68:4d:e6:8b:ea:d2:d2:da:8f:a4:01:
                    5b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AC:C7:8D:E6:6F:D4:05:CA:6B:39:78:5D:83:50:1E:0F:EC:7F:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d84a1bcb-33b6-4b81-bb5e-920d980ccf31/2846aed7-fef4-30dd-b52c-6b501db699a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d84a1bcb-33b6-4b81-bb5e-920d980ccf31/d84a1bcb-33b6-4b81-bb5e-920d980ccf31.crl

            X509v3 Authority Key Identifier:
                keyid:0D:4B:17:FE:49:4B:D4:54:DC:EB:64:58:48:27:B7:6A:D7:E7:A6:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d84a1bcb-33b6-4b81-bb5e-920d980ccf31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.126.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:d5:cf:e8:fa:01:2d:51:46:5e:31:eb:83:97:3e:9c:b1:7f:
         cc:f3:98:3d:e8:b2:29:70:e2:c3:4a:d0:d1:db:ca:37:4e:18:
         8e:e0:59:18:90:41:9d:2a:85:5b:4a:2e:86:fa:87:0c:f5:d7:
         d5:7d:f2:ff:f9:53:1e:38:68:49:f9:98:f7:e1:3a:d5:92:4f:
         5e:83:a0:f4:f5:d2:0f:f9:ed:8c:cd:ce:07:42:70:5f:32:db:
         0a:89:9e:b0:48:ab:39:92:03:4f:85:4b:4d:82:7a:35:a0:4e:
         bc:9b:10:80:c1:7f:93:bf:10:7b:df:46:9a:9f:33:e2:90:9d:
         a3:39:99:4b:4d:d5:74:57:cc:65:2a:f1:97:f5:34:02:30:7d:
         6d:3a:0f:2b:d4:6b:a3:b9:8e:26:69:21:af:11:bc:ea:6b:f4:
         62:0e:a2:fb:19:3f:30:73:99:24:f0:b3:a8:6b:47:5a:93:dd:
         b9:5e:43:e2:e4:65:84:39:79:39:a6:ed:28:78:e0:25:39:a6:
         e3:be:57:af:91:69:ff:09:51:da:99:45:4f:d9:06:b9:e0:6f:
         7f:35:5d:5e:8e:84:a5:dc:40:a4:f9:45:d6:95:8f:7c:0e:63:
         80:09:b6:a6:3c:72:63:10:81:b7:eb:bc:d0:2e:af:c6:6c:58:
         9d:a3:36:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 05:20:09 2026 by rpki-client