Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/a569e485-6b37-3b02-a56e-74b826b6659a.roa
File:                     a569e485-6b37-3b02-a56e-74b826b6659a.roa (raw, json)
Hash identifier:          zeGnSzp11YgSinTYyM+oeMx7UluCcQy9pyYhF+RShoo=
Subject key identifier:   93:46:BC:89:9D:64:49:21:5A:0B:5A:7A:27:CD:11:CB:39:CC:F7:2C
Certificate issuer:       /CN=860b4c38-2ca6-4edd-80ef-1173a8d7ef86
Certificate serial:       010D0C9F4328584E7E94E66920FE7D7A35E250C0
Authority key identifier: 9C:1A:0A:7B:40:6D:41:FC:4E:99:70:8A:78:C9:86:84:99:7C:78:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/a569e485-6b37-3b02-a56e-74b826b6659a.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     20326
IP address blocks:        208.91.104.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:e6:69:20:fe:7d:7a:35:e2:50:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=860b4c38-2ca6-4edd-80ef-1173a8d7ef86
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=10d0283d-7967-4d76-b82c-9a7a383dfeb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:61:05:58:39:93:57:c3:ed:00:f8:19:3c:fe:
                    79:9c:42:73:d1:aa:db:9f:bf:67:eb:50:5e:17:92:
                    3b:43:58:eb:86:f3:1c:8e:42:1b:7c:44:a9:c7:ce:
                    f7:21:1b:ce:f4:9d:10:e3:0d:89:1e:ef:07:ce:cc:
                    62:0f:16:6e:6a:93:63:3f:86:52:0e:9f:6e:5a:eb:
                    c2:f9:b1:55:c5:a0:d4:31:07:42:94:fb:48:d9:a5:
                    84:37:ae:35:b9:db:b9:91:1d:b6:ad:21:a6:5e:68:
                    9f:d9:fc:0a:7d:ae:63:99:3f:54:67:e3:d3:f2:3f:
                    88:29:bf:7b:74:1d:2e:bb:42:b5:b0:8d:5a:8b:51:
                    b9:58:db:41:22:cb:63:39:c2:f5:a8:9d:5f:b1:78:
                    8e:cc:99:c7:05:52:be:e1:c3:e5:c8:de:32:96:c4:
                    e1:7b:32:28:b3:41:02:fd:95:32:dc:e0:51:ce:ed:
                    34:7b:22:35:aa:f6:d3:ce:31:8c:e2:7f:b3:b4:03:
                    e9:b5:8a:28:c2:50:ba:d0:49:32:ac:78:e5:59:c4:
                    7f:05:d0:a7:fc:6c:c1:57:75:88:cc:54:67:3d:fe:
                    4c:e4:8e:f0:19:15:da:93:6b:86:64:2f:f9:58:bc:
                    fa:ed:6a:92:52:41:4a:98:08:ed:5a:85:f8:6f:cd:
                    3e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:46:BC:89:9D:64:49:21:5A:0B:5A:7A:27:CD:11:CB:39:CC:F7:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/a569e485-6b37-3b02-a56e-74b826b6659a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.crl

            X509v3 Authority Key Identifier:
                keyid:9C:1A:0A:7B:40:6D:41:FC:4E:99:70:8A:78:C9:86:84:99:7C:78:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/860b4c38-2ca6-4edd-80ef-1173a8d7ef86.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.91.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:92:88:7b:f1:3a:c4:7a:07:e1:7f:cb:ec:37:69:d4:33:d7:
         8b:2e:24:f0:05:4b:aa:da:b3:8a:2c:d1:43:47:db:73:26:9b:
         83:b0:a3:f5:11:e1:33:fc:97:ed:b7:65:52:24:44:c1:4f:73:
         86:95:88:df:55:a3:67:65:a0:e8:aa:7c:2e:d7:49:f9:1d:3d:
         d1:85:bd:0c:fe:eb:e0:f1:01:8a:fa:3e:41:16:21:f0:70:92:
         ee:6f:c5:2c:e8:d0:00:47:a1:79:d3:f3:38:aa:9a:d9:fb:ce:
         35:a8:ce:fe:aa:d6:82:87:3c:51:11:39:e1:c4:0c:06:03:54:
         f6:f8:be:35:dd:40:a3:d9:35:82:c8:f7:a3:50:21:21:3b:23:
         8b:78:91:ac:67:f8:06:69:58:c9:9c:7b:c0:2a:48:93:75:09:
         36:e2:44:f1:d8:c8:77:d4:be:ae:d7:cc:0c:43:d9:88:c6:e2:
         a8:eb:60:3b:be:88:07:2a:81:6d:d5:0c:b7:72:1c:73:ed:ee:
         ed:07:5e:8c:4b:c4:6f:fb:fd:a2:65:db:46:42:15:0f:83:1c:
         d0:de:22:d0:16:4d:49:da:dc:09:48:b2:3b:58:8d:81:00:7e:
         a5:4e:78:6e:95:3a:c5:c0:13:2b:12:69:e0:96:60:ea:ae:7d:
         a0:ec:2b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:46:37 2026 by rpki-client