Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9a04c360-2582-30c3-8634-70c1a0fd710d.roa
File:                     9a04c360-2582-30c3-8634-70c1a0fd710d.roa (raw, json)
Hash identifier:          3ncifTgSH/prZPqIZjAhkOQGQ6GS589MBcXDnyJ//mc=
Subject key identifier:   79:47:54:7B:79:B2:6B:26:EB:D2:AB:A6:E1:B6:90:3B:4A:58:C6:EB
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F4328584E2AD45747954BE00691E19880
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9a04c360-2582-30c3-8634-70c1a0fd710d.roa
Signing time:             Sun 14 Jun 2026 09:00:11 +0000
ROA not before:           Sun 14 Jun 2026 09:00:11 +0000
ROA not after:            Sat 12 Sep 2026 09:00:11 +0000
asID:                     16509
IP address blocks:        129.41.88.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2a:d4:57:47:95:4b:e0:06:91:e1:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Jun 14 09:00:11 2026 GMT
            Not After : Sep 12 09:00:11 2026 GMT
        Subject: CN=2bb4a69b-64a8-4858-9e03-b93464fe5802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:80:26:6f:8c:d9:d0:ea:b9:76:f4:a4:21:ab:
                    c3:f4:cd:33:d1:a1:35:e8:cc:74:35:f6:22:67:3f:
                    dc:e3:5c:58:f2:4b:c8:32:2b:72:db:b1:95:77:9a:
                    39:74:a6:7a:e7:80:c0:a0:6b:27:53:5f:15:c1:cc:
                    3a:6c:ba:1a:18:74:12:db:45:bf:5b:62:49:50:6f:
                    f0:af:ae:00:be:d7:46:4e:9c:96:12:23:01:09:5e:
                    23:73:1c:57:af:ca:43:2e:9d:a7:38:52:51:bc:52:
                    7c:af:db:f2:06:cc:a3:f9:87:95:8a:7a:87:12:42:
                    f3:c4:c2:a8:a8:46:d8:e2:c5:f0:56:a9:8d:e6:72:
                    f0:39:a8:39:a5:38:e0:6f:42:90:43:9e:04:30:02:
                    3e:03:d9:d0:c8:e3:85:d0:87:4f:85:f2:48:dc:3e:
                    16:45:80:7d:e6:e6:aa:60:82:fb:00:00:e4:7c:1d:
                    26:33:26:66:17:ea:aa:f7:41:6e:b1:20:92:2b:c9:
                    55:de:87:58:ff:ac:aa:7e:a4:74:98:e9:93:35:98:
                    32:45:2b:ee:99:61:90:43:8d:74:6f:c6:a4:b2:2e:
                    36:6c:b3:25:f3:28:96:bb:c0:33:9f:84:08:97:e9:
                    a9:8a:0c:a6:2f:c9:7f:9d:ff:de:38:8a:15:4d:49:
                    62:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:47:54:7B:79:B2:6B:26:EB:D2:AB:A6:E1:B6:90:3B:4A:58:C6:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9a04c360-2582-30c3-8634-70c1a0fd710d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.41.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:e3:9e:44:3f:bd:1d:25:86:15:6b:40:00:a7:25:36:c4:62:
         5b:f2:76:f0:11:8e:66:4a:61:47:ba:56:e4:4a:ce:b9:ff:2a:
         ff:4b:fc:47:ab:f2:b3:7c:ca:63:10:d9:57:5b:9c:86:f0:9c:
         e4:81:36:d2:cd:19:30:57:11:44:af:4d:e2:a1:9e:1f:dc:c0:
         21:c3:39:b5:a2:b4:cc:7b:2a:77:45:3c:59:b4:2a:26:7a:7e:
         b7:b6:5c:86:61:6a:bf:4d:de:21:d6:ce:6b:95:c5:20:47:85:
         ef:62:e1:8c:21:1a:3f:4d:b1:7c:32:19:c1:b8:77:cc:06:c3:
         86:c1:63:82:e6:2a:a0:9f:b0:c8:54:c7:72:65:ca:20:79:1e:
         f3:13:bd:72:34:44:1e:d7:f5:da:9e:28:da:17:f3:5f:33:9d:
         e4:36:ac:ca:28:c7:82:b3:ca:a9:de:07:f4:3c:8d:b6:68:03:
         e6:4d:a0:07:6b:5c:04:b8:bf:7c:fa:f0:c2:49:06:f6:09:ff:
         33:00:ce:94:cf:f6:c9:3f:bb:28:ad:b8:6f:b0:4f:31:80:f7:
         13:cc:df:50:5b:70:d2:2e:43:23:05:90:a9:59:50:00:8a:94:
         e2:51:14:95:11:f5:b0:06:dc:ab:01:5c:18:bf:9f:26:8d:6b:
         99:bf:7c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 22:37:56 2026 by rpki-client