Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/96888e0d-7fd8-3e26-a009-cd9bdedccdcd.roa
File:                     96888e0d-7fd8-3e26-a009-cd9bdedccdcd.roa (raw, json)
Hash identifier:          HmrwbngB6syL4erDLsvmVM9Fgu3zCchIFpaNXiJlmRE=
Subject key identifier:   96:D9:DE:C6:28:BB:2A:1A:D6:13:77:B3:F6:0C:C2:3E:93:49:42:06
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584E3A2F44313BF4760A237B10C0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/96888e0d-7fd8-3e26-a009-cd9bdedccdcd.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     12247
IP address blocks:        184.105.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:44:31:3b:f4:76:0a:23:7b:10:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=2dc3190e-e846-4843-a174-1fdbc05eeac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c1:de:3a:6a:8d:92:2e:3d:e7:d2:49:d4:50:
                    32:3e:7d:4c:03:ab:eb:61:00:1e:4e:dd:62:e0:cd:
                    31:48:84:c7:82:ce:47:19:86:c3:3b:3f:7d:f0:da:
                    4d:64:9f:36:8b:08:3a:f0:39:b7:01:ce:31:f0:29:
                    2e:0f:27:69:76:c4:3c:7c:36:67:aa:f6:2a:d0:c3:
                    58:0c:4f:61:57:43:64:ff:6b:60:89:b6:2c:2e:14:
                    da:07:c6:1f:34:58:61:db:66:c9:10:ec:6f:5c:d6:
                    9f:13:29:f4:f7:3f:99:fe:cf:2b:28:e2:95:30:e0:
                    ad:e0:9f:a2:ab:88:fd:1b:f6:4f:13:41:ba:0d:18:
                    dc:32:34:73:42:ce:12:8e:5c:74:b9:ae:04:16:e2:
                    92:52:ad:d4:9c:3a:19:ba:0d:47:28:ed:63:b6:1c:
                    dd:b8:59:33:7b:ca:2d:88:ff:a7:3c:54:aa:69:ba:
                    9f:74:4e:1b:12:7f:f0:1b:2d:a9:3c:f2:85:4a:4d:
                    17:6b:60:ad:40:5d:9e:3a:52:60:2b:34:45:3a:e6:
                    88:db:30:61:f3:58:7b:9f:7a:67:3c:4b:4b:46:0f:
                    d9:3e:f2:3f:09:ef:82:05:89:5a:91:cf:1d:57:c1:
                    ad:12:8e:52:26:41:6c:89:8e:59:6d:b5:bd:b4:31:
                    6c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D9:DE:C6:28:BB:2A:1A:D6:13:77:B3:F6:0C:C2:3E:93:49:42:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/96888e0d-7fd8-3e26-a009-cd9bdedccdcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.105.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:ee:b1:8f:e9:a9:c0:a8:7b:95:08:d4:3f:76:48:69:6b:49:
         ad:71:1c:fc:67:5d:7b:e8:01:00:8e:88:ee:72:89:bb:b2:0f:
         f3:b2:b2:4c:47:f5:38:b9:cd:05:47:05:99:59:6a:27:4e:a8:
         05:4b:c8:19:92:dc:d0:2b:fc:d9:82:4f:2a:8a:bc:33:10:c2:
         c5:2c:be:3f:7c:96:cf:df:25:d2:d7:98:ca:5b:73:12:72:0a:
         22:fd:09:ed:0d:3b:a0:4a:dc:2b:0d:04:22:c4:79:6e:ce:22:
         1a:0a:fa:17:fc:d6:a5:64:e3:be:39:37:04:15:d8:02:ed:00:
         08:81:17:84:0b:17:d4:00:e8:17:ad:10:18:05:bb:fb:b3:ef:
         87:25:90:79:b1:29:77:98:cb:de:e3:19:b2:20:b2:e9:43:a2:
         e4:f1:0d:01:bd:28:2b:ff:f0:28:a0:28:41:12:10:98:d5:d9:
         2b:5a:bc:7a:06:44:d6:bc:0d:47:b5:86:c3:b2:b8:82:12:17:
         a3:4d:22:f1:7c:85:63:90:12:47:b2:e8:09:27:88:38:41:9c:
         2c:75:65:ac:58:3d:c3:1d:2a:3d:45:d0:0a:09:84:d9:ea:75:
         6a:da:ab:c8:40:ae:8c:7a:44:80:28:ab:31:c7:7e:41:56:62:
         b5:e7:ac:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 19:37:22 2026 by rpki-client