Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/8751f3a0-4c26-37ef-8ca7-f9d9c4c45f83.roa
File:                     8751f3a0-4c26-37ef-8ca7-f9d9c4c45f83.roa (raw, json)
Hash identifier:          k7J6qu/PPlUZFj3sB0PjBTjOpVzjUaZ1xHVCBJ39RtI=
Subject key identifier:   4C:BC:E6:A4:A7:FA:C6:2A:76:BB:25:74:B3:E3:B6:03:3D:20:55:59
Certificate issuer:       /CN=7a620d45-1f26-460c-9a3e-9bc0cc4a5d59
Certificate serial:       010D0C9F4328584E4DB9F49D53BF2FB4F21A4680
Authority key identifier: 29:1C:70:C0:46:C9:AB:DC:28:EE:26:90:9A:DC:7D:D9:00:2B:F4:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/8751f3a0-4c26-37ef-8ca7-f9d9c4c45f83.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     25769
IP address blocks:        216.168.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:b9:f4:9d:53:bf:2f:b4:f2:1a:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a620d45-1f26-460c-9a3e-9bc0cc4a5d59
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=a7009c40-aee2-41f3-8eb0-bc8bc96e6de5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b3:cb:d1:25:16:fb:21:8b:e4:24:b9:99:91:
                    26:af:70:98:05:25:a3:a0:0b:87:bf:6b:49:64:c2:
                    50:a1:ef:e7:cf:59:05:c5:77:0a:5c:43:4e:88:72:
                    dc:18:7a:90:b5:24:44:7f:97:ec:be:bd:35:61:55:
                    95:53:28:c4:b0:48:6c:4e:d5:b8:2b:e8:06:68:a2:
                    e0:63:94:e0:21:a0:e3:fc:50:a1:8b:90:cb:d3:35:
                    83:db:95:34:20:2e:ca:52:2c:a9:f9:0c:ff:21:49:
                    db:6e:95:53:c1:34:d8:bc:c9:31:fe:4e:49:4a:cc:
                    a3:dc:aa:3a:f1:dd:cf:9d:80:dc:d2:ad:00:e5:1a:
                    76:27:ad:19:38:32:ae:89:15:a1:a7:95:84:e6:10:
                    d6:c6:b8:44:90:ea:f6:c7:64:1a:b3:99:1d:a1:bf:
                    7d:97:c7:0b:c1:a3:5a:25:d5:92:45:b7:f0:fa:2d:
                    77:48:7c:b2:28:93:86:27:24:d5:52:e9:2b:28:96:
                    d4:9c:4a:8c:05:ab:0d:bc:f8:b9:8b:56:aa:ee:eb:
                    cb:c1:99:23:ab:e4:82:1c:4e:ea:0a:26:df:61:32:
                    3b:31:f7:4e:d0:fc:6f:20:c5:b6:4b:d9:1c:e5:36:
                    e0:d6:20:ab:23:48:9b:bd:a7:0f:18:a7:ef:bc:bc:
                    30:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:BC:E6:A4:A7:FA:C6:2A:76:BB:25:74:B3:E3:B6:03:3D:20:55:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/8751f3a0-4c26-37ef-8ca7-f9d9c4c45f83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.crl

            X509v3 Authority Key Identifier:
                keyid:29:1C:70:C0:46:C9:AB:DC:28:EE:26:90:9A:DC:7D:D9:00:2B:F4:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a620d45-1f26-460c-9a3e-9bc0cc4a5d59.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.168.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:45:e1:6b:5c:7b:a1:84:d7:e7:2a:7f:ec:17:90:c1:47:53:
         7b:17:ce:76:17:c1:5e:8f:53:ca:42:c6:89:8e:31:1b:c9:16:
         9b:89:86:24:b2:3c:71:86:8d:82:02:de:31:4f:26:80:1e:03:
         3c:38:6a:6b:1f:14:b6:5a:2f:12:2e:35:36:f4:b7:78:cb:d5:
         94:04:3b:d7:43:7a:df:49:0e:e6:fe:18:91:1c:c0:12:89:ff:
         d4:20:70:05:84:23:7f:c5:dc:1f:a6:b5:40:c1:f1:4a:37:de:
         6b:38:dc:03:36:e0:01:a9:8f:40:d7:a2:d1:1b:68:16:34:8b:
         c6:3e:1a:21:02:85:14:a6:98:ee:92:e6:61:73:36:57:aa:63:
         4d:ea:bb:22:38:6c:34:3e:2e:eb:9b:ff:67:91:87:bf:20:4c:
         be:91:2f:03:18:12:f9:e5:df:0e:81:b8:74:c8:72:bf:55:ce:
         45:43:3b:3e:b2:be:ff:4a:ac:e9:68:7d:42:0d:e2:e9:5b:74:
         35:d5:a9:bf:de:50:98:6e:c9:be:a7:5a:69:92:60:0c:90:5b:
         57:1c:88:0b:05:4a:73:06:e9:ee:79:01:78:ad:3f:d6:55:cf:
         78:12:ba:79:14:73:6b:35:97:fc:f0:62:50:47:a1:9c:0c:e2:
         7e:88:2f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 14:15:10 2026 by rpki-client